Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS197195.roa
File: AS197195.roa (raw, json)
Hash identifier: 3nl8lvfMPWpIOZEEL8P0YL9MjCDky3YT8KB+3vcm+o4=
Subject key identifier: E3:CC:8F:66:50:08:FA:6E:4C:1D:88:36:9B:17:5D:4F:E6:EF:49:BD
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 40E8606D10B0A8D4E0AE2FE2B19FC0BFB60E7D8F
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS197195.roa
Signing time: Mon 28 Sep 2026 15:30:03 +0000
ROA not before: Mon 28 Sep 2026 15:25:03 +0000
ROA not after: Mon 27 Sep 2027 15:30:03 +0000
asID: 197195
IP address blocks: 141.11.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:e8:60:6d:10:b0:a8:d4:e0:ae:2f:e2:b1:9f:c0:bf:b6:0e:7d:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Sep 28 15:25:03 2026 GMT
Not After : Sep 27 15:30:03 2027 GMT
Subject: CN=E3CC8F665008FA6E4C1D88369B175D4FE6EF49BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cc:a6:7b:86:ab:da:09:30:fb:48:e7:a0:9e:
a7:4c:2e:c8:ca:ee:a2:07:15:2e:13:6a:06:41:6e:
40:60:f1:9e:48:db:bd:b1:6b:de:c3:7c:cf:0a:0b:
d5:32:e5:41:6e:5c:df:b5:a6:ab:9c:ed:70:50:82:
62:a0:52:33:59:84:4e:80:65:d6:37:42:cc:72:2d:
e7:8a:e8:df:d2:f5:1b:aa:d3:b1:01:33:86:dc:52:
40:47:f3:c5:07:4f:a1:42:9c:59:fd:19:df:97:51:
2e:8a:68:01:e9:1b:4e:e5:36:04:37:66:26:60:d6:
b3:8c:a1:6a:de:ec:7b:c1:c1:90:e2:5c:e6:a4:29:
3c:d7:3b:55:4a:0d:1c:4c:e2:78:fd:eb:ec:ea:87:
25:04:4c:99:b5:54:31:51:af:cd:72:c5:1f:9e:b2:
0d:db:ea:aa:49:a9:46:cb:94:aa:f5:22:57:3b:57:
21:3b:c8:41:58:51:bf:b2:06:e1:92:f1:5f:ba:75:
7d:a4:08:98:b8:b8:36:c4:06:30:48:a5:5a:b4:0e:
4e:57:7a:fc:47:c4:6d:02:39:a4:78:02:2b:4c:ce:
67:1d:84:b3:bf:80:48:cf:cf:a6:6d:99:95:3c:4d:
fe:83:f2:b0:82:38:79:3b:bd:30:2d:f5:0d:37:b4:
fa:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:CC:8F:66:50:08:FA:6E:4C:1D:88:36:9B:17:5D:4F:E6:EF:49:BD
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS197195.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.144.0/24
Signature Algorithm: sha256WithRSAEncryption
11:63:92:bd:28:34:b2:d1:b1:4b:61:09:3e:d4:6c:1c:cd:f5:
37:6b:3a:64:63:6c:30:65:02:b1:5e:ca:ce:5b:09:e7:0f:f6:
44:ca:1e:5b:63:00:d2:07:ed:cc:4c:4e:8c:9e:c6:2e:d7:c5:
97:6e:68:95:fc:6c:35:4f:4c:a8:94:07:65:94:56:dc:96:b6:
fa:66:de:68:dd:57:4a:06:c3:07:7d:33:95:eb:d5:0a:00:7b:
84:75:30:b8:40:18:ba:ce:6b:aa:ee:eb:13:4c:97:7d:41:78:
e7:d8:4d:6e:1f:70:2a:bf:4d:de:69:28:cf:95:eb:2d:a8:63:
c4:e7:7b:2d:e7:fb:36:59:5a:3a:27:85:04:c4:66:b3:50:03:
64:58:d8:41:98:27:2e:1b:d5:bc:0e:ee:b9:6c:63:11:06:96:
b9:c3:aa:93:79:f4:2f:9c:95:0e:2c:0e:bf:68:64:9f:d6:01:
0c:f7:65:b2:c3:f3:41:3e:50:22:d4:17:e7:0b:4b:95:66:b1:
d8:1e:cb:86:30:fc:a5:13:65:41:91:a0:33:e5:7f:5d:93:cf:
6c:87:4a:a5:76:ec:32:60:e0:a4:e3:40:90:b6:44:c7:da:41:
4c:c2:2d:33:d7:36:72:d9:0f:d9:08:16:78:d4:d4:68:f7:66:
73:b7:b2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:20:22 2026 by rpki-client