Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS197537.roa
File: AS197537.roa (raw, json)
Hash identifier: PAnQ5VBomNH1CSxOPUXXybAznomRCGnlp4N/gKKaj28=
Subject key identifier: 68:5C:50:9F:D1:F2:1B:30:33:54:63:F3:C7:B1:89:D1:EA:E1:D5:DA
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 3CF0C14C7E1465BFB355A190AFCBA2D5A2548068
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS197537.roa
Signing time: Sun 28 Jun 2026 14:23:08 +0000
ROA not before: Sun 28 Jun 2026 14:18:08 +0000
ROA not after: Sun 27 Jun 2027 14:23:08 +0000
asID: 197537
IP address blocks: 92.112.23.0/24 maxlen: 24
95.135.136.0/24 maxlen: 24
95.135.145.0/24 maxlen: 24
95.135.146.0/24 maxlen: 24
95.135.147.0/24 maxlen: 24
95.135.152.0/24 maxlen: 24
95.135.169.0/24 maxlen: 24
95.135.170.0/24 maxlen: 24
95.135.172.0/24 maxlen: 24
95.135.174.0/24 maxlen: 24
95.135.177.0/24 maxlen: 24
95.135.188.0/24 maxlen: 24
95.135.211.0/24 maxlen: 24
95.135.216.0/24 maxlen: 24
95.135.220.0/24 maxlen: 24
95.135.226.0/24 maxlen: 24
95.135.227.0/24 maxlen: 24
95.135.231.0/24 maxlen: 24
95.135.236.0/24 maxlen: 24
95.135.243.0/24 maxlen: 24
95.135.247.0/24 maxlen: 24
178.94.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:f0:c1:4c:7e:14:65:bf:b3:55:a1:90:af:cb:a2:d5:a2:54:80:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jun 28 14:18:08 2026 GMT
Not After : Jun 27 14:23:08 2027 GMT
Subject: CN=685C509FD1F21B30335463F3C7B189D1EAE1D5DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9c:88:ab:40:25:a2:78:24:7a:59:b5:fe:43:
28:d2:5b:dc:44:16:1d:e5:d9:76:23:93:9f:83:87:
fe:f4:56:95:17:f3:b9:12:3a:82:f7:78:79:ef:80:
b0:41:92:53:d5:2f:60:6f:86:1e:92:46:d2:87:c6:
73:58:ac:5b:27:2a:1c:70:5b:50:89:89:71:96:77:
c2:48:d6:1e:0b:b2:bf:52:9e:e6:01:b0:39:9a:e9:
d5:e5:c2:18:8b:e4:77:58:64:97:34:f5:b9:b6:c0:
06:09:ff:8c:8b:4f:32:e0:e5:75:ed:8c:85:7e:b4:
68:f8:bf:86:f0:a1:47:7b:53:52:11:b9:58:b7:5d:
f1:e3:fd:55:69:3b:eb:18:f4:8f:c8:19:2e:25:5e:
96:ab:75:de:e1:d4:22:19:93:6e:c7:ec:42:ef:99:
32:a4:f5:10:b0:45:b7:10:99:6e:1e:d5:af:26:68:
bb:41:f7:af:14:62:61:43:1b:41:a3:ce:c4:28:b8:
ce:9a:13:cc:9f:d8:c9:09:87:1f:50:2a:da:fb:97:
54:64:6f:5a:e9:16:4e:2d:39:44:c7:02:66:fb:89:
a0:1c:14:24:6c:b1:fe:a2:4c:c6:4d:b9:9e:1d:47:
df:40:5c:df:fb:01:56:2b:e3:b9:51:80:58:12:4e:
71:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:5C:50:9F:D1:F2:1B:30:33:54:63:F3:C7:B1:89:D1:EA:E1:D5:DA
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS197537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.112.23.0/24
95.135.136.0/24
95.135.145.0-95.135.147.255
95.135.152.0/24
95.135.169.0-95.135.170.255
95.135.172.0/24
95.135.174.0/24
95.135.177.0/24
95.135.188.0/24
95.135.211.0/24
95.135.216.0/24
95.135.220.0/24
95.135.226.0/23
95.135.231.0/24
95.135.236.0/24
95.135.243.0/24
95.135.247.0/24
178.94.142.0/24
Signature Algorithm: sha256WithRSAEncryption
46:88:f6:17:bd:93:3b:21:77:82:20:1d:89:52:f4:12:6e:1e:
39:16:00:26:13:62:63:f0:41:6c:fd:68:70:ba:aa:55:1a:a3:
d9:d6:77:bc:a1:de:0e:df:14:e8:ae:f5:58:1c:99:fa:07:d6:
82:f4:04:3d:ac:41:e6:75:12:91:78:a8:a4:16:3c:72:99:86:
74:48:81:ec:2b:28:5a:4f:38:67:8a:8d:36:60:7d:b5:61:20:
43:e8:3e:26:b8:2c:4b:83:8e:00:01:3c:fa:e7:62:28:61:ef:
e3:e7:d4:17:2b:99:7d:5a:18:0c:c0:44:ad:5a:f5:50:3b:cf:
7a:63:ef:2b:30:11:0e:12:91:45:26:76:5b:4e:11:b8:5d:f3:
7b:5e:5e:5b:ae:a1:1d:9b:c1:62:65:db:63:7e:c0:73:9e:fa:
89:34:b8:d0:93:09:bc:cd:1f:ab:fd:44:04:d3:10:fc:55:64:
0b:7b:59:bd:bf:3c:e5:b4:70:8c:ab:5d:00:64:11:63:03:cf:
91:3a:75:6b:78:d5:92:cd:a8:b1:25:58:04:31:f2:d0:13:d3:
6d:fe:be:1d:9a:44:02:65:df:b7:9f:80:84:91:af:f9:8d:a4:
54:c6:48:45:a9:96:a0:3a:1b:77:72:7b:c4:b6:60:c3:52:19:
e3:11:25:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:31:20 2026 by rpki-client