Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS199415.roa
File: AS199415.roa (raw, json)
Hash identifier: 23Kxt2MKAtqVggVPcsEVNL2ej7p239aoNaHrvfn6bxI=
Subject key identifier: 44:90:20:8D:83:CA:A1:DE:BE:3A:E1:54:FE:FB:CB:C9:D7:8E:41:E2
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 790EF3198463A7171B91DBE6D6E2D19103E497C5
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS199415.roa
Signing time: Wed 15 Apr 2026 12:47:24 +0000
ROA not before: Wed 15 Apr 2026 12:42:24 +0000
ROA not after: Wed 14 Apr 2027 12:47:24 +0000
asID: 199415
IP address blocks: 141.11.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:0e:f3:19:84:63:a7:17:1b:91:db:e6:d6:e2:d1:91:03:e4:97:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Apr 15 12:42:24 2026 GMT
Not After : Apr 14 12:47:24 2027 GMT
Subject: CN=4490208D83CAA1DEBE3AE154FEFBCBC9D78E41E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:76:fa:67:69:54:1d:ed:ab:09:e2:88:de:a8:
28:95:d2:1b:51:b1:05:9f:cf:64:24:14:59:2f:db:
49:1f:10:84:84:e6:ee:b2:cb:b9:d3:60:2a:28:20:
39:cd:70:58:4e:e7:f9:bd:a2:37:18:6e:77:18:c4:
d8:01:67:b1:45:09:ed:c7:bb:3f:9b:66:c9:35:10:
83:08:d9:a1:03:50:b8:45:82:dd:44:6d:8f:e7:83:
49:15:77:a5:d5:a6:de:87:9d:ef:31:8c:d6:7f:a7:
33:54:28:0b:9d:33:36:86:2b:bf:40:10:ee:08:64:
7f:c9:4e:f5:70:68:ab:51:19:0b:62:1f:89:49:e2:
4b:c4:c5:48:52:95:99:5d:15:87:a7:6b:23:85:5f:
ed:5e:c5:43:4a:1b:35:1c:66:ac:85:49:c1:87:5b:
0a:cf:02:0e:96:65:24:af:26:ff:d1:f3:7e:f3:cf:
8a:78:2b:63:5e:2a:f5:d9:4c:20:d3:28:ad:e7:cb:
ce:e7:99:9f:d7:f9:c4:a9:1a:bd:69:cc:6d:9a:8b:
2a:11:fe:74:5c:0f:c4:98:fa:5c:8c:ff:2b:4c:c0:
86:d6:f9:9b:94:8f:30:46:8c:53:2c:01:da:b8:f4:
c0:68:f6:70:95:6d:8d:a8:4a:f5:2c:a6:09:79:43:
6a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:90:20:8D:83:CA:A1:DE:BE:3A:E1:54:FE:FB:CB:C9:D7:8E:41:E2
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS199415.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.103.0/24
Signature Algorithm: sha256WithRSAEncryption
02:99:ed:ad:d1:1f:46:61:de:48:ec:2b:af:10:f5:dd:8f:3c:
15:96:46:04:2f:f0:17:62:55:eb:1d:b3:b3:6d:7a:8f:e4:06:
40:2f:cb:fa:b8:fb:82:85:50:1d:1e:72:0c:63:ee:ef:80:43:
4f:ac:58:f7:3a:5f:dc:1a:70:71:5e:98:cf:7c:8c:4d:24:79:
49:e8:b7:0d:9f:bc:44:4d:23:97:67:da:b4:21:ee:73:d3:4e:
3d:c0:4d:93:1e:6a:82:17:05:92:f5:a3:a9:70:a5:f0:27:3a:
98:32:ff:e7:df:d7:16:c6:00:27:a8:11:a0:9b:20:5f:5c:5a:
21:8e:e2:82:1e:fa:4c:63:2b:8a:31:34:13:0f:ad:1d:8e:6b:
05:91:47:eb:be:75:c5:a2:e9:ee:07:3b:eb:23:37:e6:3f:1a:
63:5a:4f:b0:69:64:93:f5:29:4f:0a:ec:b3:59:8e:5a:bc:0d:
47:b2:98:39:21:e8:58:e3:a2:6c:54:7c:e8:30:5c:7c:c9:6a:
cc:f1:d6:cc:af:ff:f0:ba:86:ff:0f:db:29:ff:2d:6f:18:90:
bd:00:3d:09:e0:42:3c:71:97:3e:ee:01:c8:c4:c4:24:2a:ac:
c8:93:f8:67:18:50:cd:4b:3b:d6:03:48:d4:17:20:52:24:e8:
10:bb:5e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:37:34 2026 by rpki-client