Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS197537.roa
File: AS197537.roa (raw, json)
Hash identifier: 3p8tqEZNdXlWUqEzpq5OWEm+GFJmw3o1TQAWT/Qqny8=
Subject key identifier: 9D:23:73:27:12:1C:92:30:FF:48:E6:4E:39:F4:61:29:A4:B6:EB:41
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 6E83DC4404B6EEE21EA74AD4F3859F9CE31EA57B
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS197537.roa
Signing time: Wed 18 Feb 2026 19:55:38 +0000
ROA not before: Wed 18 Feb 2026 19:50:38 +0000
ROA not after: Wed 17 Feb 2027 19:55:38 +0000
asID: 197537
IP address blocks: 181.215.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:83:dc:44:04:b6:ee:e2:1e:a7:4a:d4:f3:85:9f:9c:e3:1e:a5:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Feb 18 19:50:38 2026 GMT
Not After : Feb 17 19:55:38 2027 GMT
Subject: CN=9D237327121C9230FF48E64E39F46129A4B6EB41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:af:79:8d:fb:e6:18:05:4a:ef:db:69:30:2f:
2f:38:d3:e2:f9:8d:45:6f:6c:32:0d:aa:74:f5:07:
68:80:72:ea:d3:53:21:2a:09:98:2b:62:03:aa:59:
0f:73:22:77:53:ec:c8:e1:46:31:30:58:ac:94:10:
d0:ad:e5:73:2a:5c:c2:8b:62:b8:a2:50:2d:6f:8b:
50:f8:d1:5f:db:e3:83:46:da:0d:06:8f:76:ed:63:
a0:fa:8a:b4:09:44:b5:5c:ed:3b:9b:64:5e:f4:98:
aa:df:c7:90:a7:9b:aa:a7:1e:de:cb:a1:d2:3a:1b:
3c:67:99:47:1a:1a:d1:3e:94:7c:41:ed:93:70:4c:
d8:cf:1f:33:b4:33:d9:d0:64:ab:af:82:1c:d2:a6:
33:1a:72:35:41:19:c4:f4:17:58:2c:61:1c:d8:ab:
e2:ec:33:c0:e2:6a:16:30:b4:29:39:8e:ed:c6:6f:
f2:ff:34:1f:f4:c9:24:b5:7e:c3:bb:58:83:79:e1:
f6:83:62:f9:6e:42:6e:c5:d0:40:76:31:35:ed:fe:
49:2b:a7:15:7f:61:7d:e2:c6:4e:f6:1b:56:a9:2b:
4b:a4:3e:49:a3:9b:42:97:57:51:09:fa:4a:57:b3:
6c:af:b1:40:94:b2:51:c0:eb:53:9a:bf:4f:45:37:
af:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:23:73:27:12:1C:92:30:FF:48:E6:4E:39:F4:61:29:A4:B6:EB:41
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS197537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.215.204.0/24
Signature Algorithm: sha256WithRSAEncryption
33:df:a4:96:4e:74:0e:fc:8c:60:1f:42:e2:c8:b7:58:42:68:
d0:af:99:55:53:3d:13:c8:66:8d:44:31:90:53:5b:e5:5b:81:
4c:c4:f3:33:61:ab:02:24:78:fe:32:22:92:48:6c:ec:ea:f3:
0c:4a:a1:a8:2b:78:49:eb:92:e2:07:07:0f:a0:8c:5b:5a:6e:
b3:89:c2:fa:b0:40:2e:ab:67:d4:fa:5d:b0:ce:b0:9b:8c:8c:
19:f1:2a:5e:e3:70:18:d8:39:e4:dd:98:c0:3e:56:95:0f:85:
84:e9:95:13:16:4c:47:6e:a7:38:bf:bb:e8:f7:ea:e1:e4:91:
f1:1e:9f:cf:fd:4e:70:d4:a8:56:32:b8:b2:32:01:59:da:34:
f6:3f:fc:8c:4d:d5:44:d9:5a:29:eb:b0:ec:67:4f:19:9a:d4:
7a:73:a7:3e:ff:d9:9e:32:74:79:c6:83:a9:16:f9:11:df:08:
fa:1d:0e:68:31:5b:8e:4b:36:d6:8a:3d:49:5d:de:be:49:15:
97:54:f9:46:fe:6a:3f:5f:9f:a8:82:30:a1:50:c3:8a:49:c1:
bd:52:cb:c0:96:54:7f:32:16:45:59:67:a7:6e:bb:af:cb:fc:
72:ea:31:39:d6:45:c4:1a:7b:f7:20:db:0d:45:10:b9:41:70:
99:e2:02:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:01:56 2026 by rpki-client