Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS197173.roa
File: AS197173.roa (raw, json)
Hash identifier: 6J7CbdvDGbUmYekeMaer0IwJsjCJ1e0DN4owsoGOShA=
Subject key identifier: CD:D1:4F:94:23:C7:0D:C1:C7:0D:02:B8:5B:D5:B4:D6:AF:4A:72:C2
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 7572BF9EAC8217DFD31DC8C10E3DEFBC90953347
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS197173.roa
Signing time: Tue 28 Jul 2026 12:00:15 +0000
ROA not before: Tue 28 Jul 2026 11:55:15 +0000
ROA not after: Tue 27 Jul 2027 12:00:15 +0000
asID: 197173
IP address blocks: 82.24.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:72:bf:9e:ac:82:17:df:d3:1d:c8:c1:0e:3d:ef:bc:90:95:33:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 28 11:55:15 2026 GMT
Not After : Jul 27 12:00:15 2027 GMT
Subject: CN=CDD14F9423C70DC1C70D02B85BD5B4D6AF4A72C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d0:62:b8:94:4f:e0:4e:be:15:03:16:28:7e:
c7:2a:bf:d1:a8:78:04:4a:23:6b:a2:6b:46:a4:9e:
59:1a:41:c4:6b:c2:56:01:3c:a6:73:9a:ee:30:59:
46:5d:0c:df:6f:a8:58:62:fe:b3:49:95:95:73:d1:
36:1a:89:c7:e6:df:30:fc:0c:d9:ed:7a:00:5b:42:
66:b4:86:f4:e6:f5:c0:ec:bf:73:3a:3b:da:cb:28:
97:36:8e:71:02:c2:d8:db:c3:eb:28:5c:63:2d:a0:
08:20:00:18:d8:79:eb:94:71:38:7f:12:ee:40:0a:
82:21:4b:d4:b2:4e:ec:44:1c:a7:19:5a:ab:02:66:
ab:78:5a:7b:67:ee:42:90:63:f1:48:98:13:59:a9:
19:89:56:ed:32:49:6d:05:a1:06:24:20:29:c5:29:
44:f4:43:d3:eb:c0:0a:0a:7f:31:76:e6:ca:7f:30:
c4:7f:a0:1a:15:3f:c2:68:2a:24:e7:d4:40:e0:61:
24:0b:86:9d:da:bd:a7:6e:d9:6d:53:aa:18:89:ee:
88:07:b5:9c:9c:74:49:fc:c7:4a:1e:15:70:5d:4b:
67:43:8c:9e:c5:14:ef:d4:87:0a:1b:36:08:59:b4:
bd:54:2a:28:f9:92:91:66:69:a5:42:4f:f7:a0:e5:
91:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D1:4F:94:23:C7:0D:C1:C7:0D:02:B8:5B:D5:B4:D6:AF:4A:72:C2
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS197173.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.24.72.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:a3:4a:1b:77:a4:1e:6a:3f:7a:4a:3f:2a:fe:b1:02:9c:03:
17:88:41:67:8e:a7:c2:de:c9:5b:8b:e0:cf:6b:95:65:e3:23:
c4:b7:5c:65:cd:1f:95:00:94:62:bb:ca:3e:92:fa:b7:89:68:
44:1a:a9:e4:82:b7:99:e9:fc:bf:72:12:61:63:1b:2b:51:6e:
d4:95:f8:c6:66:2e:4e:26:ff:b1:f2:92:6e:79:24:4f:a3:3e:
80:fb:c9:96:8e:3a:20:b8:2a:ff:cb:ba:1f:3e:1f:63:b1:d8:
1a:e4:a4:09:47:b4:00:4d:16:90:bc:50:23:88:33:c8:85:ed:
c8:3f:b2:32:2d:e7:91:72:1c:39:d8:b8:b7:93:d8:cf:53:ab:
5f:73:48:84:e4:27:ab:6e:73:6c:ad:c3:a9:5b:95:c8:ad:7c:
be:be:e3:23:73:03:d2:b4:8b:b4:f9:0d:93:e5:08:b5:ce:5e:
1f:01:82:ef:ea:4f:f2:47:61:f5:8c:16:81:f1:74:af:20:3c:
d7:5a:9d:ca:59:dd:ac:de:f1:49:87:f2:6a:93:d5:07:10:c2:
2e:ce:a0:93:db:43:d4:a3:37:ea:94:0c:9e:6e:a8:f1:5b:1f:
dd:d4:3d:0a:fb:11:7a:d3:cd:8b:bf:f6:8e:aa:9c:e7:83:f3:
6a:60:6e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:58:31 2026 by rpki-client