Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS197071.roa
File: AS197071.roa (raw, json)
Hash identifier: vo+PMPj2TqFQSUMqa8Gwt750USFjFMlJ+wnBglRn6qo=
Subject key identifier: FE:14:53:24:DA:9E:A9:37:A5:F4:93:08:43:16:C9:73:E1:B8:99:85
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 7A689FFE9B75A2494EFE803916AE78C5FF7BE07B
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS197071.roa
Signing time: Wed 04 Nov 2026 09:49:39 +0000
ROA not before: Wed 04 Nov 2026 09:44:39 +0000
ROA not after: Wed 03 Nov 2027 09:49:39 +0000
asID: 197071
IP address blocks: 191.101.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:49:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:68:9f:fe:9b:75:a2:49:4e:fe:80:39:16:ae:78:c5:ff:7b:e0:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Nov 4 09:44:39 2026 GMT
Not After : Nov 3 09:49:39 2027 GMT
Subject: CN=FE145324DA9EA937A5F493084316C973E1B89985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:cc:28:6d:5a:3a:e2:67:d1:1c:05:2a:45:6b:
3e:c1:ce:2f:70:bd:96:25:b6:89:50:f2:8e:09:4d:
30:c7:79:04:49:90:2b:3a:79:a0:7d:8a:c6:5d:0a:
21:e3:67:b4:d2:08:b5:40:ed:4e:d1:05:bb:0f:e9:
80:2c:d3:7b:0e:aa:4f:30:6c:e2:b9:2c:0c:45:dc:
57:a6:16:bd:ee:c8:b6:75:7e:b4:7d:8d:35:24:20:
e4:f2:58:46:bc:14:ed:be:f5:dd:47:9a:4f:e0:66:
b2:42:97:a6:c7:f9:d4:58:cb:16:5a:ee:48:a9:1b:
59:a7:09:c4:bb:55:b7:90:62:73:c0:3f:1d:fe:2b:
ff:13:71:67:d3:a1:77:73:42:c2:a9:76:36:e7:c5:
71:20:11:dd:87:87:a9:e2:b1:07:1e:48:4f:fe:82:
fe:ca:75:43:75:ab:d9:7c:bc:83:f1:56:97:64:03:
9d:5b:ca:78:97:30:9e:da:a8:9a:cc:77:72:f1:80:
41:8c:9a:76:e9:7f:f1:ac:b1:6f:7f:2c:89:78:4e:
3f:67:50:1b:13:f2:85:f5:88:fb:25:80:64:d8:7a:
b8:f8:81:f1:cd:36:0c:cc:c7:f9:e1:fc:e2:bd:98:
7f:62:a7:0c:90:a3:e7:41:95:3e:e0:45:35:60:30:
10:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:14:53:24:DA:9E:A9:37:A5:F4:93:08:43:16:C9:73:E1:B8:99:85
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS197071.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.101.51.0/24
Signature Algorithm: sha256WithRSAEncryption
86:dd:7b:a5:4a:81:ca:83:bc:6c:a2:bf:1b:a0:dd:a5:01:b7:
2a:32:4a:45:fe:46:15:8e:df:f1:78:8d:5c:a5:fe:09:b5:ba:
79:98:2a:c2:4a:31:cb:68:30:35:48:9c:17:c9:e6:0e:f9:7e:
05:a5:6b:3c:62:83:01:86:63:37:20:b9:93:d1:39:b3:6f:57:
45:aa:af:3a:d8:a7:a5:75:4d:01:df:df:d1:ee:dd:a9:63:79:
da:65:f1:b2:73:4e:c4:b7:01:9e:37:35:47:5a:e4:30:b0:ae:
7c:25:9e:50:48:9f:e6:0a:14:63:77:4b:b7:28:6f:56:09:d2:
9a:dd:96:b8:ec:71:b9:62:3e:f3:77:5e:5d:a5:7c:7a:eb:d2:
db:b2:11:7f:88:8f:ea:c8:57:f2:7a:56:00:1f:86:1c:f3:a4:
7f:d1:11:e0:ee:57:42:5d:86:2c:29:2e:2c:7c:7c:e3:dd:da:
03:8d:d3:02:cb:e2:08:35:c7:fe:f1:c5:38:53:78:e0:55:9b:
05:eb:9f:f8:c3:c8:46:ef:5c:49:b0:10:6e:d1:04:41:90:04:
82:a7:ee:ed:3f:2a:f8:60:c1:db:b9:9b:3e:53:e5:6b:ac:2c:
e2:72:0a:a2:a3:6e:46:28:dd:46:23:1f:c7:6d:43:41:ee:a8:
b8:f6:c5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 04:29:12 2026 by rpki-client