Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS197555.roa
File: AS197555.roa (raw, json)
Hash identifier: iLXGh9DexHQdEQX/LtkZ8F9+wBdz3OcVpZmhi45Nads=
Subject key identifier: 81:5C:FF:30:A8:79:03:A7:63:03:18:FA:B7:7C:F4:FE:D4:E1:F7:E5
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 6F1F2BE678FA9DFEFB9F58F485FB68F619152363
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS197555.roa
Signing time: Tue 05 Aug 2025 13:29:48 +0000
ROA not before: Tue 05 Aug 2025 13:24:48 +0000
ROA not after: Tue 04 Aug 2026 13:29:48 +0000
asID: 197555
IP address blocks: 37.221.76.0/24 maxlen: 24
37.221.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:1f:2b:e6:78:fa:9d:fe:fb:9f:58:f4:85:fb:68:f6:19:15:23:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Aug 5 13:24:48 2025 GMT
Not After : Aug 4 13:29:48 2026 GMT
Subject: CN=815CFF30A87903A7630318FAB77CF4FED4E1F7E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:85:c6:9d:c8:78:c1:40:94:e1:8f:52:43:a2:
bc:86:4b:20:f1:2a:bf:69:7f:51:6f:79:83:d8:65:
41:a5:2e:cb:df:ae:25:0b:88:c6:e6:c3:3d:6c:e8:
e2:d9:c6:c3:e7:fe:1e:51:e0:81:6b:02:1f:30:2c:
1c:1a:68:fa:71:66:19:e3:6a:fb:15:79:d2:80:ce:
bb:b9:24:66:0a:fa:c1:25:77:04:54:fe:86:dc:1c:
40:cd:e9:e2:0f:ee:bc:7f:50:84:1f:64:ad:e0:40:
f3:6b:8b:bc:99:c2:e5:04:9a:c3:b1:a8:03:e9:00:
22:5e:18:3a:b7:7f:c1:e5:42:4f:35:9a:5b:7b:3d:
09:3e:a2:d0:3e:c8:ef:91:4a:65:ec:27:a8:b4:85:
3b:0e:92:1a:51:be:78:fe:af:5c:1b:9f:f1:2e:7c:
c9:3a:ce:20:73:c7:fc:07:e5:14:2a:dd:72:95:2d:
8b:78:41:e5:60:1b:b3:71:3b:4b:34:1d:ff:fa:23:
9b:0e:0e:a5:23:7e:7a:6d:58:ed:0f:a9:5a:9e:de:
e7:e5:55:ae:3c:00:57:cd:63:21:00:6f:34:cc:1d:
c8:4c:c7:e4:dd:2e:4e:57:cb:f1:dd:7d:24:60:2c:
43:8d:b9:50:a8:28:06:88:99:b6:6f:e8:48:36:43:
6b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:5C:FF:30:A8:79:03:A7:63:03:18:FA:B7:7C:F4:FE:D4:E1:F7:E5
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS197555.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.76.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:77:7e:cb:48:96:c9:e8:7e:8b:cb:76:e0:30:ca:da:1a:35:
5b:7c:b4:75:86:f5:1d:5b:0f:a1:11:17:90:87:3c:11:2d:e9:
4a:41:18:6e:12:01:8c:f8:c4:39:34:94:32:5e:a0:cd:85:93:
ac:29:a9:c3:ac:f2:23:1d:7a:29:ad:14:58:c9:1f:b8:11:48:
6d:aa:54:da:7d:69:a4:8d:fb:28:b9:a1:0f:79:83:83:26:5d:
d6:87:c6:94:fb:2a:37:c0:1a:4f:a5:9a:e2:43:5b:7b:c5:85:
48:85:ea:21:5b:2f:06:00:05:8e:e0:06:29:ff:59:72:3d:48:
fd:ef:1c:cc:fb:23:24:15:6f:6e:5f:33:4a:1d:fc:63:79:bb:
50:98:2d:82:f4:06:4b:b6:3d:11:2d:e6:8e:57:62:50:b1:ff:
37:3d:67:40:1b:e3:78:b4:08:2d:35:1f:d5:ea:38:e0:46:9d:
c2:9e:62:dc:71:af:bd:cb:ee:07:7f:06:0e:ba:c6:98:c8:d5:
06:23:f1:c1:3a:95:bc:0f:e5:e4:9b:82:28:46:a3:92:ac:12:
dd:2d:fe:62:4d:bf:25:c2:44:e5:7b:0a:11:ef:82:1e:0b:74:
1c:0d:43:f4:58:92:a6:12:7e:68:bb:a1:b7:6c:76:37:d4:27:
d4:03:7e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:23:44 2025 by rpki-client