Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS199439.roa
File: AS199439.roa (raw, json)
Hash identifier: csjcvZlZOLoL9IO8N4oT3lVoKJmuz41OeW4/LBs4sSE=
Subject key identifier: 92:4C:8A:DF:07:75:18:0B:01:07:B2:A5:6D:A2:82:F4:9F:02:D3:99
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 1E093BFA61CB3394E3A17C59B20F2A543E1E2D37
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS199439.roa
Signing time: Mon 02 Nov 2026 12:47:51 +0000
ROA not before: Mon 02 Nov 2026 12:42:51 +0000
ROA not after: Mon 01 Nov 2027 12:47:51 +0000
asID: 199439
IP address blocks: 141.11.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 05:04:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:09:3b:fa:61:cb:33:94:e3:a1:7c:59:b2:0f:2a:54:3e:1e:2d:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Nov 2 12:42:51 2026 GMT
Not After : Nov 1 12:47:51 2027 GMT
Subject: CN=924C8ADF0775180B0107B2A56DA282F49F02D399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8c:46:8d:dc:12:d1:71:20:17:51:e8:dc:8c:
02:2e:09:cc:b0:11:21:a3:45:64:7c:32:1d:bc:7f:
d4:c3:f6:3a:e5:7d:73:5e:4e:d0:3c:6d:0c:83:11:
fc:44:b5:de:ce:18:14:7d:85:65:b4:a8:07:3a:74:
8e:15:71:eb:2e:58:e6:03:87:8e:e4:c3:6b:fc:33:
98:ac:9b:cf:5f:dd:fa:55:46:99:60:4f:7b:c4:0d:
98:40:6f:bd:e6:be:8e:40:90:bc:1e:ae:44:50:12:
1d:51:6f:4f:9e:bc:62:9f:08:85:64:d5:b5:81:34:
47:f4:82:5f:55:a4:9f:24:a5:e9:c7:9b:1a:51:be:
d0:c0:34:42:18:83:2d:b6:18:85:60:3a:76:4c:17:
38:7b:0e:f3:81:16:db:a9:0e:e0:50:6d:da:91:c5:
4b:db:a6:7b:52:40:e2:41:cd:da:e1:89:cd:49:7a:
09:f7:b2:c6:17:f0:03:a6:29:31:d2:31:8a:c0:79:
c8:e3:12:57:fb:34:88:35:ae:8d:74:30:a8:9c:67:
b3:9e:32:c0:64:fa:fa:46:b3:39:66:ea:b9:77:b1:
b7:cb:71:e9:01:ba:48:e7:1c:38:ad:6a:00:d7:4a:
8d:05:5c:b7:80:1d:7e:59:c5:0a:d4:1b:d4:7a:a4:
eb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:4C:8A:DF:07:75:18:0B:01:07:B2:A5:6D:A2:82:F4:9F:02:D3:99
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS199439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.102.0/24
Signature Algorithm: sha256WithRSAEncryption
73:2f:f5:1a:f4:45:24:b0:ca:ca:26:85:8d:d4:2f:f3:f5:d8:
5a:cc:57:f4:7d:d3:df:92:81:81:68:1e:07:85:22:c9:ed:d4:
8c:5c:60:17:68:b4:06:c3:f9:88:dc:bd:d7:8d:03:43:6d:52:
18:69:77:0c:21:9a:2d:88:27:23:4e:68:ab:48:a8:68:b6:a0:
d4:89:ef:c2:4f:1c:6d:7e:71:94:3b:e7:f1:17:08:c4:d6:3d:
38:4a:86:90:df:cb:63:29:68:f1:4e:37:d6:80:78:57:3a:40:
34:e9:40:03:a6:b3:4b:a4:50:bb:76:c7:f1:0c:9e:cd:57:98:
ac:5a:e6:de:c2:6d:ff:99:b7:27:f0:9c:6d:9a:82:07:77:af:
b5:ca:f9:49:13:b9:dd:bb:59:e1:c5:96:41:9d:3d:97:92:5c:
bf:89:8f:66:e4:be:12:51:41:53:93:b4:6b:94:2e:d2:14:75:
df:d0:7a:96:84:2c:f7:2e:56:81:4f:89:4b:75:c9:3f:d2:d2:
75:4a:8d:9e:b5:db:31:6c:00:64:d1:f7:fe:04:c2:5e:a0:f1:
85:49:5f:83:4a:4a:95:e6:11:7c:bf:fd:f4:4c:61:46:c3:0e:
a1:47:da:01:80:d2:73:0c:39:3e:61:a2:7f:b7:bd:a3:90:f8:
4f:6b:8d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 16:21:49 2026 by rpki-client