Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS197137.roa
File: AS197137.roa (raw, json)
Hash identifier: dxVDs5LbZqwFuwiewhnc87mIr2CbrnL6HRJmhGXnpHc=
Subject key identifier: 7B:66:68:14:63:9C:91:25:89:75:90:A6:95:AE:DD:5B:64:C9:A6:E0
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 38F4E5FD00A56DBA70CCFFD26ABB159AD4AE296F
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS197137.roa
Signing time: Tue 08 Sep 2026 12:41:47 +0000
ROA not before: Tue 08 Sep 2026 12:36:47 +0000
ROA not after: Tue 07 Sep 2027 12:41:47 +0000
asID: 197137
IP address blocks: 2a13:9500:1d4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 06:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:f4:e5:fd:00:a5:6d:ba:70:cc:ff:d2:6a:bb:15:9a:d4:ae:29:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 8 12:36:47 2026 GMT
Not After : Sep 7 12:41:47 2027 GMT
Subject: CN=7B666814639C9125897590A695AEDD5B64C9A6E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b3:b3:8a:e5:76:9d:dc:d7:57:81:04:78:30:
e2:34:a1:4e:05:07:d0:d0:b9:37:6e:eb:7b:cb:b2:
34:ee:93:c6:60:29:01:b2:68:14:d8:56:60:71:12:
24:2d:70:f4:f5:01:71:1e:30:8d:80:cb:13:02:28:
46:6a:ca:98:03:17:4c:f7:7d:df:bd:8a:1b:93:d8:
ff:4d:4a:fd:b0:0a:91:ba:86:bb:c5:04:b6:b8:0f:
64:88:06:7f:48:1d:f0:ab:ee:1b:df:a8:a0:fe:f3:
ce:bf:fb:f0:a2:f3:5e:98:8f:64:d9:6a:7b:b1:39:
13:1d:a7:40:e2:fc:45:b8:ff:af:95:54:e1:e4:b8:
f6:f4:61:eb:ca:39:ce:be:55:a0:a8:6c:51:37:3b:
f7:b1:02:ed:67:65:9c:34:c4:ba:5d:c6:fd:ab:94:
6a:03:2b:6a:c0:98:75:16:88:f7:fa:e1:56:0f:8b:
ff:eb:c9:2e:74:2e:a9:67:ad:4a:1c:b8:a8:c5:8c:
d3:e0:2a:1d:46:6c:ac:7f:f6:aa:41:8c:a3:44:26:
66:35:27:8e:42:d5:bf:1a:b5:9c:cb:ec:81:2d:48:
4c:d9:07:0a:cc:62:a3:77:1e:5f:18:a3:8c:a0:e3:
de:3d:97:1f:63:ec:44:56:0d:c7:53:af:5b:aa:1b:
4d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:66:68:14:63:9C:91:25:89:75:90:A6:95:AE:DD:5B:64:C9:A6:E0
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS197137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:1d4::/48
Signature Algorithm: sha256WithRSAEncryption
35:fd:ad:8a:e3:36:f3:6d:63:7a:5f:81:b0:39:94:d3:42:f3:
d5:91:be:44:79:63:3e:16:75:f0:23:55:3e:8d:d8:19:ba:e9:
e4:d8:ae:b8:52:8b:41:fa:4e:fc:34:d7:4c:86:5a:7a:b5:44:
cb:5f:c3:3d:5f:9b:a2:43:bd:de:b3:66:39:0b:c3:1d:2a:5e:
d3:74:09:c8:c1:2b:b1:00:f3:7f:5a:0d:ef:fe:e6:8c:38:c0:
7e:24:d0:e4:a8:f9:fb:2c:22:69:f6:b0:44:89:5b:9e:fa:51:
c2:f0:77:b4:20:96:87:1c:18:90:ad:19:d6:65:2c:de:3e:1f:
d8:7b:66:89:5c:e4:7f:bb:f5:16:23:5e:d6:bf:bc:b1:cc:30:
3d:25:67:ff:e3:be:54:ee:ac:ce:60:de:fa:70:cd:21:36:bc:
68:e2:92:d6:39:ca:14:f1:96:33:c8:d3:5c:43:ba:03:76:68:
c6:f7:37:52:da:72:af:5f:ce:b5:74:c8:a3:6b:05:b1:74:1a:
ec:7e:8e:61:ac:7d:2e:8e:4f:d8:c9:71:8f:d6:ac:4a:7a:51:
f0:53:76:fc:43:21:05:31:89:8e:bd:23:18:7b:be:ce:f5:ef:
4e:76:39:f9:ae:b3:43:51:f9:d2:ab:84:2f:3d:97:77:b1:50:
67:07:f8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:30:59 2026 by rpki-client