Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS197359.roa
File: AS197359.roa (raw, json)
Hash identifier: 0HE4H3ndiWzCLxtaujj/beXGqGwQmmq8sdSPSG4sYsU=
Subject key identifier: 9E:6F:EC:4C:63:0D:C0:2B:27:81:3B:0C:1F:35:0D:19:47:A9:AE:69
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 25A85131F777693D52A0193B800F1A9C3E9C648A
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS197359.roa
Signing time: Wed 16 Sep 2026 07:25:20 +0000
ROA not before: Wed 16 Sep 2026 07:20:20 +0000
ROA not after: Wed 15 Sep 2027 07:25:20 +0000
asID: 197359
IP address blocks: 5.199.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:a8:51:31:f7:77:69:3d:52:a0:19:3b:80:0f:1a:9c:3e:9c:64:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Sep 16 07:20:20 2026 GMT
Not After : Sep 15 07:25:20 2027 GMT
Subject: CN=9E6FEC4C630DC02B27813B0C1F350D1947A9AE69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f1:37:69:b4:f3:3e:c1:96:61:ad:12:21:f0:
31:25:26:08:e3:f6:be:a0:14:14:ac:d4:b4:2d:1f:
44:81:74:9f:27:e8:12:23:9d:d3:48:37:0b:6c:97:
1a:25:b2:65:71:8a:04:05:53:cd:78:e7:3d:d5:8b:
49:1a:9e:e6:20:a6:23:f7:fc:a0:2a:87:33:9e:b8:
49:cf:f1:48:92:fa:35:20:ba:82:71:5d:a1:e3:c2:
19:41:6b:d9:1a:01:ce:4c:59:f2:85:08:5b:52:96:
b4:ea:9d:df:09:e5:48:42:10:34:89:d5:9c:0f:a4:
2e:a2:8d:fd:02:c4:53:19:1d:aa:ae:74:de:c1:7a:
28:d1:fd:79:3e:49:9f:31:a8:72:a4:65:b3:0e:7d:
46:e5:59:66:36:fc:b9:eb:a2:d0:74:b3:ed:3b:50:
b1:bb:fa:39:cd:aa:27:4d:8e:78:db:09:3a:a9:55:
fe:10:20:3f:d5:d2:6f:d1:49:d9:b3:1f:82:25:c3:
6d:67:f8:1d:08:d2:10:1d:ad:ea:da:3a:37:e8:55:
5d:26:04:6e:c2:a8:94:2b:02:02:c9:33:bc:92:b6:
91:b8:42:f2:35:2b:37:69:0c:e7:6e:1a:03:7c:ea:
a1:d0:e3:ab:bd:1b:e5:78:6f:bc:d2:a9:53:cf:59:
4f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:6F:EC:4C:63:0D:C0:2B:27:81:3B:0C:1F:35:0D:19:47:A9:AE:69
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS197359.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.45.0/24
Signature Algorithm: sha256WithRSAEncryption
31:f2:c5:f6:6f:af:bd:63:70:52:68:2f:f9:42:0a:02:d7:70:
3d:f5:2b:f6:ce:8d:c2:6e:96:d0:ad:83:03:7a:c9:d4:7d:d5:
df:e8:5a:d5:9a:04:b1:f2:fb:7d:53:51:2f:e1:ae:45:6b:66:
e4:91:98:09:58:b1:0c:68:8e:bd:c9:dc:01:bb:b2:33:d8:9d:
80:d6:2b:19:88:40:27:d2:3c:1b:2f:e3:25:ec:a1:63:95:8a:
31:fb:4d:19:ad:aa:26:b6:2e:a9:86:6b:ac:ec:c4:d7:5d:57:
a0:88:a4:72:fb:b7:78:65:f4:f9:bd:49:e2:36:db:85:c9:10:
11:cb:01:65:87:1b:2a:5c:1c:ff:96:0a:e1:b3:ed:c9:4a:18:
52:52:28:0f:1a:77:6c:68:7b:99:e5:84:95:5b:b6:23:b4:65:
20:e3:38:79:f8:8a:49:9b:d4:3f:69:f1:34:c0:1e:b2:90:a2:
c4:de:c7:68:56:49:48:b6:99:28:e4:44:45:9c:2d:2a:c8:8a:
bc:cd:a4:b0:44:d2:a4:35:0f:5d:9f:6b:04:0c:13:0e:3f:f4:
31:83:f3:03:c2:8b:00:33:78:6a:5c:34:72:ac:e1:e8:36:59:
ca:1c:78:1b:a2:3a:a6:d8:bb:d5:09:65:4f:0a:77:5f:66:ad:
b7:ed:93:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:13:51 2026 by rpki-client