Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS197649.roa
File: AS197649.roa (raw, json)
Hash identifier: LwIphI/p18HjEMNfrKG6gkXbXgbhTblBMGUbxs0MLv8=
Subject key identifier: 7A:6E:10:C4:5B:C8:37:D8:E4:3E:FE:98:F1:D9:8B:13:F1:C0:7C:0E
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 349783BD82C2DF9F4AFC133DE7A4DECE9280FD98
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS197649.roa
Signing time: Wed 29 Oct 2025 05:55:10 +0000
ROA not before: Wed 29 Oct 2025 05:50:10 +0000
ROA not after: Wed 28 Oct 2026 05:55:10 +0000
asID: 197649
IP address blocks: 45.149.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:55:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:97:83:bd:82:c2:df:9f:4a:fc:13:3d:e7:a4:de:ce:92:80:fd:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Oct 29 05:50:10 2025 GMT
Not After : Oct 28 05:55:10 2026 GMT
Subject: CN=7A6E10C45BC837D8E43EFE98F1D98B13F1C07C0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2f:79:27:c0:cc:53:83:24:5b:42:c7:bd:6b:
c7:e8:22:41:16:3b:dd:2e:11:dc:e9:6e:13:ab:31:
0a:67:78:e1:36:a7:ce:79:c1:12:3b:ea:17:fa:d5:
a5:b7:16:7e:c9:b5:e1:2a:1a:1c:95:4a:8a:2b:1f:
63:d8:a2:c9:e0:04:a4:ae:07:00:95:23:3c:b3:59:
da:5c:88:c2:ca:6a:1d:8e:36:a1:b1:40:a8:3f:75:
0b:c1:44:82:5d:d9:83:c5:fe:07:8e:40:e0:f6:05:
4c:2a:fb:0e:2a:45:c4:bc:e1:03:4f:13:d0:92:af:
8f:fd:c3:76:bb:e6:78:02:a9:10:f6:14:50:b4:02:
15:9a:69:fc:61:5a:94:70:47:de:44:65:68:83:75:
dd:50:de:af:23:61:7d:1a:f9:ed:75:8b:83:64:a5:
8f:59:29:0d:cf:78:53:a1:b1:52:cf:cc:e0:f2:91:
cf:bf:68:a7:02:0b:08:49:eb:76:63:7c:49:66:15:
2f:87:fd:38:75:db:f8:cd:3f:36:51:62:e3:ce:60:
68:c8:7c:e1:5d:16:d8:52:82:f1:26:24:c7:02:34:
aa:ae:ea:70:5b:6e:48:b6:71:27:24:9f:e1:89:8e:
5c:c6:bc:74:9e:ad:62:68:db:d5:a5:08:e9:ad:f1:
6b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:6E:10:C4:5B:C8:37:D8:E4:3E:FE:98:F1:D9:8B:13:F1:C0:7C:0E
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS197649.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.101.0/24
Signature Algorithm: sha256WithRSAEncryption
92:5d:8d:6d:d6:5d:a2:48:6e:38:ba:08:87:9a:c6:4e:69:aa:
5b:2b:d4:f0:95:73:e7:44:54:37:28:7e:75:8c:68:dc:6a:f6:
80:90:1f:5d:57:25:37:73:77:92:76:43:cc:5f:91:ec:68:28:
ad:cd:2e:ba:5c:94:1f:66:fe:56:80:94:5e:14:65:19:ad:95:
5a:43:4e:2b:35:5b:f7:cf:46:d7:f4:14:31:c4:d1:ec:e7:c6:
91:8d:b5:30:af:a4:ca:8e:de:1e:08:63:8a:d1:3f:6d:f8:d5:
d4:e9:39:25:c3:58:8d:5e:91:7f:5a:ab:41:c2:ae:e7:d1:ef:
e6:0c:76:a4:f2:fa:c3:ca:57:82:6e:db:92:3d:02:55:4d:e7:
c5:c8:85:03:8d:46:c8:d3:8d:b9:3e:3d:e2:4a:79:d7:6c:1f:
06:c7:5e:5d:1e:a6:08:cf:4a:1f:06:15:1f:af:76:0a:16:b4:
7c:ec:ca:92:e4:9f:f7:bd:43:21:c6:e3:e7:b5:c8:93:0d:41:
ec:2a:83:bd:bb:01:67:6b:8f:1d:e8:f8:3a:d8:43:83:c1:56:
b2:2d:b8:db:6d:e4:80:23:26:76:65:16:b6:a7:31:f6:aa:a9:
4e:50:14:c4:f0:7d:f6:c6:e7:53:39:2a:ce:62:85:3b:d4:44:
e5:db:77:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:35:30 2025 by rpki-client