Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS197715.roa
File: AS197715.roa (raw, json)
Hash identifier: OCw1p//icLhgQ6SiKg81HI2IpvtDtWTq6TjHXZ2PB5Q=
Subject key identifier: F6:C7:E8:0C:B1:6A:E6:1F:BD:A3:43:53:0E:32:A2:FD:BD:7C:1C:DC
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: AD16C77366F02893454CCB4EEF40D9A8C1AC74
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS197715.roa
Signing time: Thu 31 Jul 2025 12:00:23 +0000
ROA not before: Thu 31 Jul 2025 11:55:23 +0000
ROA not after: Thu 30 Jul 2026 12:00:23 +0000
asID: 197715
IP address blocks: 95.134.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
ad:16:c7:73:66:f0:28:93:45:4c:cb:4e:ef:40:d9:a8:c1:ac:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jul 31 11:55:23 2025 GMT
Not After : Jul 30 12:00:23 2026 GMT
Subject: CN=F6C7E80CB16AE61FBDA343530E32A2FDBD7C1CDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:9c:7f:08:5d:3e:c7:44:fe:8e:42:4c:c1:86:
23:e1:f0:4a:a1:39:18:a1:78:76:74:9e:3d:ee:15:
32:f0:45:5c:96:ce:f1:99:12:e0:41:75:aa:85:23:
77:b7:0a:48:bf:4e:39:21:8b:49:c3:e5:9f:16:a0:
97:30:64:86:e9:0d:03:5d:b3:63:ae:8b:2d:28:77:
d6:b8:b0:e2:24:8a:b9:ef:ef:a0:d0:de:9d:c5:e0:
fb:36:15:b6:11:5b:48:29:8a:c2:19:e1:1f:09:ec:
ff:54:ba:a5:2a:ee:38:18:3b:c6:34:0f:ab:93:d4:
84:95:6b:23:8b:c5:5d:ea:cc:43:6e:b4:40:12:ae:
54:83:0a:a8:f4:9c:24:8c:cb:bb:44:16:84:ad:59:
ee:2c:2d:91:f1:c6:7a:9c:0d:84:8e:27:fc:c1:00:
87:67:3d:a5:bf:00:c4:56:fa:ea:c2:99:5f:71:77:
f3:42:0d:b8:9e:f0:58:8e:7d:66:30:25:eb:48:6a:
40:9a:06:13:35:27:c0:7e:26:cc:03:f6:e6:6c:6d:
a9:a3:c4:7f:29:81:a6:12:30:11:b6:cc:a5:b1:ad:
4b:1c:98:20:b5:90:7f:89:c3:8a:84:9b:75:7b:a1:
30:b8:3b:9e:21:4d:9c:7b:8b:5a:8e:86:6e:58:d1:
b8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C7:E8:0C:B1:6A:E6:1F:BD:A3:43:53:0E:32:A2:FD:BD:7C:1C:DC
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS197715.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.134.130.0/24
Signature Algorithm: sha256WithRSAEncryption
64:75:2d:15:4f:ec:5f:ff:89:85:82:dd:6a:7e:e2:fa:df:09:
6c:8c:bc:bd:03:db:28:36:92:ef:6d:fe:97:a9:9d:6a:03:68:
03:25:ed:37:18:b5:b7:ff:e1:6c:14:26:60:f5:a4:e3:f7:5e:
f8:92:e5:8f:df:e3:20:a0:e9:eb:c4:10:59:fc:c0:aa:a2:62:
c7:d7:35:dd:1e:78:40:e2:43:24:50:2b:90:5c:14:61:a3:e4:
ee:88:68:f1:89:fb:a6:a0:99:71:57:7a:eb:71:c5:07:a2:0c:
19:41:7f:6f:4b:b9:2f:40:d2:eb:df:1e:de:4d:b4:10:a4:51:
4a:78:22:02:7d:40:10:57:b8:12:37:93:02:5c:d8:05:ce:36:
e2:38:62:7f:9e:15:2e:e8:a8:87:55:5d:a4:6a:1b:93:ff:39:
b1:c4:dc:4a:89:c3:57:25:b1:95:10:48:9d:0e:9e:d1:da:a5:
ff:46:02:54:2d:4e:f7:32:c3:8b:45:8e:b4:4c:16:27:80:fb:
e6:c4:cd:5c:8d:ee:ef:c6:b8:8b:91:c9:eb:ee:1e:48:f4:20:
1e:ff:fd:c5:5a:e6:b0:08:03:a2:e1:dc:ea:24:a1:58:d2:a0:
b5:71:59:b5:66:eb:9a:c2:6e:c7:04:16:ee:45:89:14:94:83:
f3:f1:fc:f6
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUAK0Wx3Nm8CiTRUzLTu9A2ajBrHQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNTA3MzExMTU1MjNaFw0yNjA3MzAxMjAwMjNaMDMxMTAvBgNV
BAMTKEY2QzdFODBDQjE2QUU2MUZCREEzNDM1MzBFMzJBMkZEQkQ3QzFDREMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJnH8IXT7HRP6OQkzBhiPh8Eqh
ORiheHZ0nj3uFTLwRVyWzvGZEuBBdaqFI3e3Cki/Tjkhi0nD5Z8WoJcwZIbpDQNd
s2Ouiy0od9a4sOIkirnv76DQ3p3F4Ps2FbYRW0gpisIZ4R8J7P9UuqUq7jgYO8Y0
D6uT1ISVayOLxV3qzENutEASrlSDCqj0nCSMy7tEFoStWe4sLZHxxnqcDYSOJ/zB
AIdnPaW/AMRW+urCmV9xd/NCDbie8FiOfWYwJetIakCaBhM1J8B+JswD9uZsbamj
xH8pgaYSMBG2zKWxrUscmCC1kH+Jw4qEm3V7oTC4O54hTZx7i1qOhm5Y0bitAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQU9sfoDLFq5h+9o0NTDjKi/b18HNwwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMTk3NzE1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX4aC
MA0GCSqGSIb3DQEBCwUAA4IBAQBkdS0VT+xf/4mFgt1qfuL63wlsjLy9A9soNpLv
bf6XqZ1qA2gDJe03GLW3/+FsFCZg9aTj9174kuWP3+MgoOnrxBBZ/MCqomLH1zXd
HnhA4kMkUCuQXBRho+TuiGjxifumoJlxV3rrccUHogwZQX9vS7kvQNLr3x7eTbQQ
pFFKeCICfUAQV7gSN5MCXNgFzjbiOGJ/nhUu6KiHVV2kahuT/zmxxNxKicNXJbGV
EEidDp7R2qX/RgJULU73MsOLRY60TBYngPvmxM1cje7vxriLkcnr7h5I9CAe//3F
WuawCAOi4dzqJKFY0qC1cVm1Zuuawm7HBBbuRYkUlIPz8fz2
-----END CERTIFICATE-----
Generated at Mon Aug 4 13:56:28 2025 by rpki-client