Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS202197.roa
File: AS202197.roa (raw, json)
Hash identifier: XgObnuuAuDt810Wvej/uI4blhuvtn0ExKpRylpR1kOI=
Subject key identifier: 19:5C:B3:37:FA:C1:3F:B7:82:79:41:DC:5B:88:F8:DF:E2:B3:0E:61
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 7C3697357E2CC198DD6064EBE2FFC811518DA477
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS202197.roa
Signing time: Wed 04 Nov 2026 20:32:45 +0000
ROA not before: Wed 04 Nov 2026 20:27:45 +0000
ROA not after: Wed 03 Nov 2027 20:32:45 +0000
asID: 202197
IP address blocks: 2a0e:8f02:21f0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:52:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:36:97:35:7e:2c:c1:98:dd:60:64:eb:e2:ff:c8:11:51:8d:a4:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 20:27:45 2026 GMT
Not After : Nov 3 20:32:45 2027 GMT
Subject: CN=195CB337FAC13FB7827941DC5B88F8DFE2B30E61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:89:db:ea:01:44:aa:2d:0d:7a:4c:a3:2e:c3:
90:be:77:0f:0f:a0:92:71:91:c5:ad:c8:87:4b:9c:
3e:61:b5:2a:1e:b6:fb:49:c5:8d:6d:34:33:dd:ce:
fb:3d:5c:cf:ce:b9:b2:af:64:10:a2:fc:cf:13:06:
5f:e6:e6:d9:b5:78:aa:a6:2e:cf:9b:dc:a1:30:61:
41:e0:25:e3:20:6d:10:bf:0e:87:af:7e:f5:fd:09:
3e:8a:8d:71:88:99:fe:4b:e9:c3:fd:7d:c5:cf:63:
e3:e8:16:c4:19:a8:1b:f0:6a:97:25:e7:47:ec:c5:
71:08:cb:02:53:4a:b6:45:1a:0b:14:37:b7:16:0a:
e6:c7:c9:7f:39:49:31:85:6a:fe:d1:6c:7e:7c:23:
cb:8f:2f:cc:67:6b:6f:4a:b2:f1:64:09:27:42:e7:
66:6a:5f:89:58:78:27:4d:34:1f:c7:65:59:f9:f3:
e1:86:2b:9e:54:a6:bf:bf:5e:63:98:f0:a3:92:3b:
fc:96:d7:bd:cc:b6:78:a0:e0:29:9b:6d:99:dc:7f:
95:4a:99:87:13:a1:37:92:04:2d:08:69:94:23:95:
7a:66:7c:a7:64:4c:ea:60:f0:cc:1a:d6:ba:a9:52:
0e:10:2f:65:cf:23:6b:b8:cd:3d:28:e8:58:de:a5:
8a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:5C:B3:37:FA:C1:3F:B7:82:79:41:DC:5B:88:F8:DF:E2:B3:0E:61
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS202197.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:21f0::/44
Signature Algorithm: sha256WithRSAEncryption
a6:7d:3a:09:36:29:f5:15:df:e5:fd:93:02:0a:30:38:35:0e:
f2:df:36:3e:9a:e9:43:dd:5b:a0:4e:3a:bd:ac:54:16:ba:b5:
5b:2c:a5:56:6d:2d:70:26:51:08:7a:86:ef:44:7d:1a:4c:f1:
ad:17:3c:a3:15:ad:c6:35:80:f3:9e:d7:45:e1:40:c4:16:7c:
5b:c0:d9:f3:31:7c:99:05:3a:c4:0c:94:f4:37:a9:46:16:65:
53:ae:57:6a:79:71:3f:fd:42:5e:b4:96:01:e8:71:16:99:69:
6d:f5:69:41:ab:ee:e3:3f:ee:43:47:c0:f9:5a:04:a9:23:55:
bb:51:a1:1c:a8:99:78:bb:1b:83:b2:49:41:bf:78:44:51:bb:
26:80:65:fd:29:c4:4d:d9:c5:d0:62:5b:ff:cd:81:ce:56:1f:
77:d5:d0:ca:3d:a0:1b:22:e3:2e:bd:b7:33:89:63:3c:c5:f9:
ae:2e:34:85:ef:6e:47:77:3a:ac:2b:96:ce:44:0c:a8:51:31:
c3:51:3d:68:24:7e:83:20:54:07:2b:22:a2:e6:cf:4a:3f:71:
ea:bd:f7:4e:6b:9b:7f:e5:ea:5e:78:33:86:51:d2:43:ed:39:
75:84:a0:cc:6f:f4:f0:94:31:e2:1a:64:79:73:66:cc:16:9c:
0e:d4:14:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:00:10 2026 by rpki-client