Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS219139.roa
File: AS219139.roa (raw, json)
Hash identifier: qeEc2EAEKy1+wmzZb0IgVitoJTb1SVRNUCtMGutayYo=
Subject key identifier: 02:F9:E9:0D:84:59:00:40:24:42:3F:76:64:22:B4:22:66:7E:A7:90
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 71FB73764DFB4EAA3955515FD0E7260E7600DA6A
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS219139.roa
Signing time: Mon 27 Jul 2026 11:02:30 +0000
ROA not before: Mon 27 Jul 2026 10:57:30 +0000
ROA not after: Mon 26 Jul 2027 11:02:30 +0000
asID: 219139
IP address blocks: 141.11.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:23:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:fb:73:76:4d:fb:4e:aa:39:55:51:5f:d0:e7:26:0e:76:00:da:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jul 27 10:57:30 2026 GMT
Not After : Jul 26 11:02:30 2027 GMT
Subject: CN=02F9E90D8459004024423F766422B422667EA790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:63:5b:f0:57:ce:67:cd:8c:db:1a:a2:a6:6b:
c4:ff:b0:e2:57:ed:7d:5a:60:b6:9a:b8:9f:8d:23:
d2:14:91:46:45:2c:aa:0f:51:08:ec:34:67:e3:64:
01:a5:27:29:02:91:a1:e2:36:93:53:16:c2:cb:64:
4e:b8:b2:30:af:0f:c3:49:b5:0e:1c:0b:c1:4e:fe:
0e:8d:12:71:67:2f:b5:5d:b9:40:fd:e2:80:c3:88:
1b:55:80:0b:66:bb:02:74:35:a8:7a:6c:76:b4:15:
c9:30:c6:f6:e4:33:95:a0:70:2f:fd:61:a0:63:88:
e3:44:5e:da:49:0b:34:88:cf:30:2d:b8:e5:99:25:
53:f9:a2:b9:0f:63:8e:d8:d8:31:86:32:3e:bd:63:
e2:44:d8:55:65:27:53:3a:d7:bb:ca:8a:a0:39:6d:
1e:7d:f7:ab:bf:52:ea:81:52:f9:f8:a2:e6:c2:7e:
28:2d:02:3e:60:9d:a0:41:04:37:01:a4:c3:7b:9b:
62:39:e6:86:59:9c:1e:b1:11:b5:c9:b6:26:af:4c:
91:be:23:63:07:32:d9:bc:73:5e:b5:45:97:de:5a:
8c:96:32:89:9c:04:d9:5b:ca:c5:b1:51:a6:91:19:
71:ce:38:cb:84:0f:3e:52:f7:dc:3c:e2:25:2a:00:
23:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F9:E9:0D:84:59:00:40:24:42:3F:76:64:22:B4:22:66:7E:A7:90
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS219139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.65.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:ac:1a:3d:75:1c:f6:30:ca:e8:49:b2:19:68:49:1d:0c:12:
5e:ee:f7:d6:8e:e5:73:06:d6:45:fb:05:8c:cd:33:e0:9b:c1:
a6:c0:49:9d:db:ae:1b:84:61:d5:90:5c:c2:4d:df:4f:66:a0:
1a:5b:b4:9a:85:d3:e2:fd:d9:67:18:64:29:d1:9f:0d:d3:0e:
a2:8c:99:11:72:a7:b8:6a:3d:b1:e5:88:04:4f:23:7a:91:d6:
9e:eb:9d:dd:84:f3:fc:89:95:0d:c8:1e:9b:c0:91:00:4e:d7:
d3:c2:f8:1e:30:75:78:3d:f0:7e:ab:1a:56:17:95:98:9c:13:
61:a0:21:9d:ec:ec:88:7c:bf:93:66:08:b7:de:7b:a3:71:11:
fa:cc:96:78:dd:90:5f:6a:cf:bd:b2:c5:9d:9c:b5:c8:eb:97:
ce:21:dc:7d:eb:d1:88:c0:92:18:fe:d6:51:9e:c1:2f:95:4c:
de:c9:7b:11:3e:a4:f2:4e:8f:94:46:eb:1a:79:6e:fb:a6:9b:
3c:a3:48:2d:4a:4e:1c:2e:64:05:81:d0:4a:32:5f:ba:c3:24:
53:4d:94:bd:ea:49:8e:5b:70:16:3d:8d:8a:77:39:83:c5:01:
2b:03:5f:3c:65:aa:8e:19:6f:fd:fb:52:43:6a:3b:ca:33:00:
c5:c3:37:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:49:14 2026 by rpki-client