Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS197167.roa
File: AS197167.roa (raw, json)
Hash identifier: Hds54/ev+VMYBn4oUYSUrhEGyEoYtV1VYT6tuYEfmhE=
Subject key identifier: F7:15:43:DE:38:E9:A7:9C:58:FC:30:87:1F:28:8A:2F:8F:BA:1A:F3
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 37C062E8498728BE5B14E5EB9DD485454E5AF885
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS197167.roa
Signing time: Tue 08 Sep 2026 12:49:33 +0000
ROA not before: Tue 08 Sep 2026 12:44:33 +0000
ROA not after: Tue 07 Sep 2027 12:49:33 +0000
asID: 197167
IP address blocks: 82.22.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 06:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:c0:62:e8:49:87:28:be:5b:14:e5:eb:9d:d4:85:45:4e:5a:f8:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 8 12:44:33 2026 GMT
Not After : Sep 7 12:49:33 2027 GMT
Subject: CN=F71543DE38E9A79C58FC30871F288A2F8FBA1AF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:75:8c:0f:98:cb:51:65:2f:8c:09:fd:50:1d:
b7:dc:45:e9:5f:cb:dc:71:78:58:3a:27:83:18:4b:
9c:3e:33:7c:f8:e3:ed:d2:48:f6:9a:11:da:f3:4a:
8e:f3:77:20:1b:9c:16:fd:7d:be:1f:49:f7:37:59:
e1:00:b7:c7:c8:31:2f:1b:fa:38:2c:f5:2f:a2:88:
6c:f0:6d:6b:a9:6c:a3:46:8a:6d:a8:4e:6f:24:09:
d7:29:6c:d3:31:98:00:08:aa:c7:90:82:2f:37:47:
37:7c:9c:5d:1f:f9:c0:84:50:02:34:c3:f3:70:22:
2d:be:7f:ea:51:ec:4a:e0:e6:8c:23:f0:d7:5e:31:
75:7d:be:35:14:40:1f:b5:c2:51:c5:68:5a:85:66:
1d:11:72:8f:ea:bd:80:5f:dc:5d:64:34:39:e5:ee:
c7:a9:59:2b:b2:2d:1f:1b:b5:65:91:8a:45:7b:fb:
90:82:d3:69:29:7b:51:e3:0e:d4:48:80:e0:0e:1c:
bc:05:a7:b7:c0:d4:c1:ea:cd:83:8a:cf:0d:18:17:
be:85:f9:b5:2e:8b:ef:a5:dc:10:33:ee:a7:f1:ad:
2a:e6:63:10:7c:d8:c0:76:e9:f0:36:50:b2:b0:a1:
80:58:fe:6d:b5:19:cd:d1:08:5f:95:17:3d:cf:60:
84:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:15:43:DE:38:E9:A7:9C:58:FC:30:87:1F:28:8A:2F:8F:BA:1A:F3
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS197167.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.190.0/24
Signature Algorithm: sha256WithRSAEncryption
73:8b:60:92:25:12:30:0a:f2:70:e2:91:ff:81:0a:40:02:1f:
9b:28:c8:ca:52:4c:d3:1e:6b:74:c9:bb:e4:e3:9d:bb:3d:67:
80:5e:57:d9:44:18:79:55:6f:06:cf:62:d9:b9:9c:7f:84:42:
0b:e7:66:44:40:20:10:2b:f7:30:6b:43:5a:da:8f:a3:db:05:
d0:32:50:74:37:94:14:e7:57:d1:02:32:5a:4b:19:ec:38:5f:
eb:d2:19:b2:12:8b:77:bf:00:b2:49:a4:27:91:3e:2f:f5:65:
6f:6c:f4:d4:08:78:92:95:7d:da:c0:fe:be:f4:dc:11:cd:3d:
19:8c:1e:3d:3b:9c:3a:47:4a:bf:f6:70:91:85:af:c8:d2:65:
db:2f:91:19:9d:54:6b:8b:3f:e1:c4:60:6d:9b:52:ef:5c:e6:
59:7d:b3:cf:4d:9b:68:68:df:f8:e7:23:9b:5f:81:fa:4d:90:
e9:7f:e1:17:f7:52:25:18:3c:81:41:cf:9f:07:0c:d9:64:36:
41:d0:e6:f2:1a:36:0e:c5:12:cf:95:f0:0d:d6:3f:5c:8c:77:
5b:2d:e8:44:15:9f:09:cd:25:1d:76:72:49:5a:7a:36:f4:25:
91:ae:ea:b7:3f:9e:0e:9f:ee:12:86:70:ab:45:3f:8f:56:bb:
53:64:10:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:38:47 2026 by rpki-client