Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS197359.roa
File: AS197359.roa (raw, json)
Hash identifier: DB3hbuUfSGKAeU4A7fBmkYln5gfMVOIO9Mp2bwkSJkE=
Subject key identifier: 81:94:63:49:15:07:D5:25:16:C0:4D:BA:59:45:9C:C3:C3:2B:62:C8
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 38B152F844CE2BD6850250BBF27124633627C47A
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS197359.roa
Signing time: Thu 10 Sep 2026 08:50:01 +0000
ROA not before: Thu 10 Sep 2026 08:45:01 +0000
ROA not after: Thu 09 Sep 2027 08:50:01 +0000
asID: 197359
IP address blocks: 46.202.217.0/24 maxlen: 24
178.92.49.0/24 maxlen: 24
178.92.214.0/24 maxlen: 24
178.93.164.0/24 maxlen: 24
178.95.130.0/24 maxlen: 24
178.95.134.0/24 maxlen: 24
178.95.138.0/24 maxlen: 24
178.95.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:b1:52:f8:44:ce:2b:d6:85:02:50:bb:f2:71:24:63:36:27:c4:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 10 08:45:01 2026 GMT
Not After : Sep 9 08:50:01 2027 GMT
Subject: CN=819463491507D52516C04DBA59459CC3C32B62C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a0:67:49:e6:94:90:16:c8:97:fd:b1:62:c5:
dd:2e:68:8f:02:47:9a:b9:eb:0a:d6:e7:7b:20:df:
4f:66:d4:d6:9e:80:51:e8:55:6c:5b:c6:c2:19:9c:
c3:a0:8b:0e:e9:17:e7:6c:96:67:b5:33:23:02:eb:
e1:c5:0d:33:c8:65:88:88:38:d9:bf:ba:36:e9:7f:
cf:7f:54:32:ec:e1:5d:cb:82:a7:c0:49:a2:75:66:
e6:42:55:50:b9:31:a5:41:a0:67:96:7a:24:c7:e7:
ae:74:23:57:f5:37:d3:48:f4:a0:41:ea:6c:ac:f9:
a7:ab:75:58:4b:72:49:c8:45:1d:ea:31:01:7e:61:
66:ed:d1:83:88:74:74:b4:a2:3b:14:74:b1:6a:92:
6d:ad:f2:eb:5b:e8:b0:7b:b8:35:dc:9d:12:8e:14:
53:ba:38:21:96:f1:e1:50:2d:ca:ed:da:0d:bc:bd:
4a:b5:96:e0:c9:66:53:d0:97:6d:37:e7:df:e8:83:
f1:07:71:01:18:ae:b3:27:cf:df:73:5c:a7:65:c9:
a3:90:ca:3f:9d:00:e6:ce:d0:65:d2:01:57:63:b3:
0b:8d:84:50:ae:ed:c3:79:32:87:ae:1e:b2:1a:ca:
21:72:cb:43:4f:ea:a9:18:7f:ae:da:d1:cb:98:f4:
be:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:94:63:49:15:07:D5:25:16:C0:4D:BA:59:45:9C:C3:C3:2B:62:C8
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS197359.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.217.0/24
178.92.49.0/24
178.92.214.0/24
178.93.164.0/24
178.95.130.0/24
178.95.134.0/24
178.95.138.0/24
178.95.174.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:eb:e3:16:f1:9d:bb:56:15:61:2d:dc:e3:4b:37:91:af:c0:
b9:b8:dd:cf:18:0c:2d:01:1c:0e:ae:13:0e:54:36:4a:fe:f6:
96:c3:17:89:0f:8a:7c:07:17:7b:96:b0:6a:a0:52:5d:4d:9b:
d2:59:51:b9:a0:e5:fa:37:20:48:8d:d4:56:1e:02:b4:41:e0:
d8:4c:6d:ea:63:78:01:13:41:95:c3:77:57:97:8b:98:15:10:
5f:7c:8c:52:17:12:30:a8:68:93:01:73:f0:2d:a5:7e:ab:26:
23:92:19:d5:33:50:d4:0e:3e:9c:f3:d3:81:68:4a:38:ae:ac:
48:f0:a4:2c:d6:a3:b0:1f:9b:09:4f:46:7b:90:28:ac:e9:15:
86:13:a3:cb:50:2a:3c:bc:6b:5c:a3:ec:58:43:2e:92:c1:3a:
53:f6:07:b1:a2:15:f6:8d:52:70:35:4d:85:18:5e:fa:ac:93:
38:0b:a0:47:56:06:b1:9b:47:86:d1:46:03:9d:7d:c8:3a:f3:
5c:40:2b:8d:e3:1a:41:10:cb:e2:75:5b:cb:84:ee:f4:fe:f6:
c7:31:1c:02:53:6b:d0:e2:13:fc:52:c6:3e:b9:ef:94:16:43:
31:0e:04:fc:b4:93:26:d2:4d:72:a1:27:e9:8c:81:fa:d0:17:
52:53:43:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:12:28 2026 by rpki-client