Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS197173.roa
File: AS197173.roa (raw, json)
Hash identifier: DAKFy6BjSaE08J3m/jzXOvM0aQnctkIpTql5YJ1ZX9c=
Subject key identifier: 42:46:79:05:6A:54:DF:B8:AC:89:12:EF:CA:3B:EE:DA:A7:FE:E9:9B
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 01270CA76855A3BBDD9A25C043FBC84E64731438
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS197173.roa
Signing time: Mon 08 Jun 2026 09:17:27 +0000
ROA not before: Mon 08 Jun 2026 09:12:27 +0000
ROA not after: Mon 07 Jun 2027 09:17:27 +0000
asID: 197173
IP address blocks: 143.20.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:39:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:27:0c:a7:68:55:a3:bb:dd:9a:25:c0:43:fb:c8:4e:64:73:14:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Jun 8 09:12:27 2026 GMT
Not After : Jun 7 09:17:27 2027 GMT
Subject: CN=424679056A54DFB8AC8912EFCA3BEEDAA7FEE99B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f8:37:c7:53:06:cb:7f:e4:6e:ed:0d:40:e4:
8a:52:04:d3:fa:8b:07:4a:5e:09:bb:e8:8e:83:bb:
39:8b:df:50:37:83:a7:af:f4:8f:94:02:af:48:5c:
ce:2d:45:f8:4d:8f:18:7d:2a:c5:d7:73:cb:17:2c:
d1:87:7d:8a:dc:83:05:d9:be:7f:b7:1e:61:74:22:
9c:83:c9:8b:87:9f:92:c5:84:47:f7:43:54:f0:9f:
bc:eb:b5:79:42:c8:a0:a7:90:02:6e:41:c1:05:be:
22:a8:82:d1:c1:cd:c0:c2:46:4d:dc:f6:85:c2:01:
d3:86:54:42:f8:b5:be:7a:30:72:2c:be:89:83:9c:
70:39:87:3f:73:27:04:ec:24:bb:20:af:04:a9:d2:
c8:c5:3f:f2:2a:91:4c:29:9f:11:e6:50:fa:fa:a1:
c7:ba:04:44:07:70:fb:44:f2:cc:11:78:f4:6e:46:
04:dd:28:04:2a:f7:cf:14:e1:1c:46:2c:3d:cd:4b:
1a:7c:45:c5:92:06:d4:a9:15:0d:0d:2d:81:8a:fe:
bc:3a:e7:c1:8f:3b:a7:e8:41:1b:50:7d:70:2c:17:
bb:8a:0b:f5:7a:95:b1:37:79:5d:20:bc:5c:84:2f:
48:c7:97:3a:c2:70:b7:df:26:48:37:cc:0e:d8:05:
d8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:46:79:05:6A:54:DF:B8:AC:89:12:EF:CA:3B:EE:DA:A7:FE:E9:9B
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS197173.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.244.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:28:49:d0:70:9e:4e:e3:47:f7:3a:2a:59:b3:8a:6a:41:ef:
df:b9:26:a0:95:af:9a:1c:8d:0d:bf:b9:35:45:05:ee:41:73:
c0:00:90:94:79:92:2e:cd:68:cf:fb:26:fc:fd:29:2d:b2:14:
f7:c3:d8:9d:ba:6a:b1:60:a9:ef:63:95:71:90:28:9c:dd:b1:
af:0b:e7:df:c6:03:bc:29:e7:bf:04:4e:1f:2a:77:76:33:59:
ff:2d:57:c6:2b:c6:b1:68:8c:66:7f:2a:8b:59:af:05:db:d1:
4e:30:b7:3f:0c:ce:05:45:d3:65:43:55:e4:81:60:cb:bd:62:
6e:d2:08:6f:bd:4c:76:da:12:f7:f1:2c:ff:36:e0:a7:52:98:
f6:91:3b:c5:82:56:55:38:bb:74:d1:92:39:82:42:c9:29:5e:
bb:94:19:84:2b:29:b6:47:30:b5:a6:fd:7b:a9:1c:17:88:cb:
06:8b:2d:42:54:4d:7a:d6:ff:6c:7c:c5:28:89:ba:07:17:c1:
e1:df:85:7f:32:c5:a7:9a:62:ed:9e:d3:d7:a9:7a:f9:2c:16:
06:4a:84:ee:5d:c2:c4:82:64:47:a8:b2:a0:9e:ac:31:e9:ef:
c7:47:bf:49:ca:6d:39:97:a1:bb:74:0e:2b:fd:da:77:00:08:
c5:e1:ed:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:35:05 2026 by rpki-client