Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS197537.roa
File: AS197537.roa (raw, json)
Hash identifier: JgnL2odPYGgeiiON9YSf5YKzGMNPG6niyeyIB/7a4r8=
Subject key identifier: F0:63:B3:49:A4:3E:F7:29:68:6A:6A:25:84:CB:04:10:E5:9A:2A:A9
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 43FDFB00C9160B3B6F31FAE5151A0B2A6BC97F00
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS197537.roa
Signing time: Sun 15 Feb 2026 05:58:08 +0000
ROA not before: Sun 15 Feb 2026 05:53:08 +0000
ROA not after: Sun 14 Feb 2027 05:58:08 +0000
asID: 197537
IP address blocks: 96.62.0.0/19 maxlen: 24
143.14.78.0/24 maxlen: 24
143.14.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:fd:fb:00:c9:16:0b:3b:6f:31:fa:e5:15:1a:0b:2a:6b:c9:7f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Feb 15 05:53:08 2026 GMT
Not After : Feb 14 05:58:08 2027 GMT
Subject: CN=F063B349A43EF729686A6A2584CB0410E59A2AA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d3:1b:d7:52:1f:cb:7f:64:1d:bf:16:b4:e3:
49:12:0d:d2:24:ee:72:21:be:25:e8:ce:ac:b5:3f:
df:08:17:3b:06:27:59:dc:60:bb:e3:0e:1b:0a:8a:
00:45:20:95:e4:98:7b:63:e9:80:63:bb:e8:4c:9b:
c7:9b:d9:7a:5d:3a:e7:84:8e:50:ab:b2:b6:2e:3a:
c8:e9:04:56:1e:b0:da:5a:21:f2:9a:ce:d0:5f:17:
ec:28:db:61:da:23:2e:d7:c0:cd:20:0a:59:81:1a:
d4:a0:6b:aa:95:8b:ae:8b:8b:19:50:0b:21:54:33:
a7:1f:be:49:60:72:b2:0a:3e:53:00:4a:26:16:80:
26:a6:8c:71:61:a2:42:84:09:c2:34:b1:0c:4c:76:
79:9e:b7:39:d1:4d:16:02:f2:3f:e4:7a:7a:05:8a:
67:99:97:e5:5d:af:00:8c:12:1c:22:0e:e1:3b:78:
8d:39:7f:5d:49:80:9f:62:d7:7d:06:c3:1d:43:13:
b2:84:81:c5:0f:79:99:0c:46:74:1c:18:9e:86:ed:
5f:fb:a6:cc:ee:45:e9:22:28:66:c3:e0:59:31:a3:
3f:90:e5:47:cb:6d:72:eb:74:cf:46:3d:7e:61:25:
01:a9:eb:7d:7b:a3:c3:26:54:c7:6a:06:6b:ea:90:
c9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:63:B3:49:A4:3E:F7:29:68:6A:6A:25:84:CB:04:10:E5:9A:2A:A9
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS197537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.0.0/19
143.14.78.0/24
143.14.254.0/24
Signature Algorithm: sha256WithRSAEncryption
30:d0:7b:89:0e:e9:2a:70:ce:1c:94:45:81:15:1d:bd:ae:ee:
cb:8e:27:8b:3c:13:86:95:a6:81:f0:64:6a:60:b1:d8:a5:13:
e8:b1:24:bf:63:1b:1a:1e:db:5c:74:6c:f1:f0:e1:e1:18:10:
75:20:62:06:ac:e2:1a:ac:fc:2f:cd:42:9f:17:f3:2c:6e:83:
1f:f7:ae:ac:e3:ae:49:fc:d5:cd:6b:20:92:27:a0:97:bf:93:
0d:51:09:13:fe:59:bc:fb:b7:5c:e6:51:0d:4e:5e:1f:d6:28:
3e:75:4b:62:ff:57:3e:15:6f:fc:12:c0:f9:3a:13:73:a0:1c:
54:21:52:c3:19:63:7a:64:f0:7d:f1:0e:b5:7f:2d:e4:85:95:
02:fa:76:2a:1b:6d:92:2f:fa:ef:85:59:97:ef:94:57:9b:1a:
c9:c9:57:a8:12:f4:1f:eb:ab:a2:47:80:b4:d8:43:f0:aa:8e:
2e:37:b0:04:00:ab:95:2d:fc:43:35:c2:cf:85:6e:77:59:5c:
4b:7a:3a:93:8c:07:66:56:e2:5f:62:f1:0e:e1:22:6b:0c:af:
7e:eb:aa:21:ab:46:8e:1c:5e:01:9b:27:31:86:84:28:57:05:
6f:8d:03:99:e3:94:49:7d:05:6f:2b:24:a5:42:44:f3:34:11:
5c:f8:38:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:03:22 2026 by rpki-client