Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS197974.roa
File: AS197974.roa (raw, json)
Hash identifier: KEfd5ShAICz/NWIANHKgMTg91kVYKqSYrs4D6wcNmyQ=
Subject key identifier: 06:2F:82:A1:32:35:08:4E:76:45:DE:F9:B0:A9:C1:50:9E:84:C9:EE
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 371C9596302B99C4005B2146C347C183994A3B02
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS197974.roa
Signing time: Thu 17 Sep 2026 12:16:57 +0000
ROA not before: Thu 17 Sep 2026 12:11:57 +0000
ROA not after: Thu 16 Sep 2027 12:16:57 +0000
asID: 197974
IP address blocks: 94.118.67.0/24 maxlen: 24
94.118.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 04:53:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:1c:95:96:30:2b:99:c4:00:5b:21:46:c3:47:c1:83:99:4a:3b:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 17 12:11:57 2026 GMT
Not After : Sep 16 12:16:57 2027 GMT
Subject: CN=062F82A13235084E7645DEF9B0A9C1509E84C9EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a5:a0:2e:38:28:09:39:fc:3b:b9:74:f7:6e:
48:5b:82:73:ec:9a:40:39:9b:d6:c9:9e:67:91:92:
22:81:c2:7c:05:3f:05:21:de:61:1a:ca:46:b6:71:
8c:6d:a0:4c:45:77:62:66:92:95:2c:fc:16:80:66:
47:23:58:25:63:21:90:34:00:f7:88:cf:de:a0:7d:
5c:ee:80:97:7e:39:53:36:97:9d:60:03:0b:be:27:
03:90:e9:f6:34:19:de:f9:b0:fb:83:ed:c7:28:ae:
59:1d:ba:ae:0f:e5:ef:58:be:dc:79:b0:44:9e:e4:
08:86:3f:e8:d0:ff:ab:0c:af:f9:f8:cf:7a:19:53:
c2:90:7d:2e:d2:d6:ca:a4:18:fe:42:8b:c3:4e:45:
70:f3:01:d0:87:e0:cb:de:e0:31:64:8f:48:a7:44:
87:10:30:6c:e0:f3:aa:fc:0f:f8:36:7c:0a:52:b4:
fa:9e:3b:f7:9e:92:31:0a:17:60:46:47:0e:f6:4f:
fb:d8:e1:06:b4:a9:12:1b:56:1e:91:7c:8d:60:da:
ba:44:da:c6:b0:27:39:9f:47:f3:fe:5c:05:63:a6:
07:84:20:2e:7f:a0:9c:4b:ff:e4:6e:b2:c9:14:74:
2a:be:38:cd:ff:49:e9:19:55:42:c1:55:76:af:56:
c7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:2F:82:A1:32:35:08:4E:76:45:DE:F9:B0:A9:C1:50:9E:84:C9:EE
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS197974.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.118.67.0/24
94.118.69.0/24
Signature Algorithm: sha256WithRSAEncryption
01:99:89:82:ae:25:d3:a4:24:de:3c:bd:76:1e:ce:70:04:93:
14:43:4e:a2:ef:8c:34:74:75:74:6b:3b:70:4c:fe:7b:36:fa:
d2:77:42:b9:78:2b:4f:0f:52:e4:d1:ef:5a:83:fe:8f:e9:82:
4d:fe:de:63:48:b6:41:e2:38:20:f8:cd:92:59:91:50:db:b7:
76:63:e1:95:d0:7b:fd:a7:7c:04:88:27:e9:0e:1f:7a:6b:23:
ef:8a:ec:d0:fd:62:f4:eb:af:a9:8f:cf:ed:82:5e:c7:03:42:
a6:55:71:0c:d3:cd:fd:be:bb:e4:13:05:d9:70:62:10:ca:62:
b6:11:03:d5:11:e9:fb:9e:c6:c1:01:60:6a:7c:b4:50:43:54:
68:70:4c:78:45:d2:e9:f8:32:84:77:78:30:de:36:c5:1d:dc:
b7:c5:51:a6:f2:c3:a7:05:68:18:32:04:44:d2:54:c6:12:6b:
2d:ae:74:c4:14:25:0c:81:27:ad:7d:b2:09:22:bc:8a:db:d5:
13:e9:a5:2f:be:b6:3b:c3:cf:24:7c:bb:15:90:3c:d3:5d:00:
fb:44:dc:94:e9:75:53:23:76:b4:0a:df:6a:40:ce:2e:54:0c:
ed:ad:93:f9:b9:9d:33:4f:3b:0e:25:7a:08:ef:d3:a2:5c:14:
60:6e:de:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:05:29 2026 by rpki-client