Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS199176.roa
File: AS199176.roa (raw, json)
Hash identifier: NNU3iyS7Cs22uTHmo/G7sWmFJLUdR1j3pSSR/sQvLec=
Subject key identifier: 62:88:AB:1D:C2:5C:04:67:13:AC:6F:1C:4C:2C:F7:AC:E9:B2:8E:A3
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 430DC626495231E9AD41AB6CF2044571EB368699
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS199176.roa
Signing time: Mon 04 May 2026 07:07:44 +0000
ROA not before: Mon 04 May 2026 07:02:44 +0000
ROA not after: Mon 03 May 2027 07:07:44 +0000
asID: 199176
IP address blocks: 141.11.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 May 2026 07:33:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:0d:c6:26:49:52:31:e9:ad:41:ab:6c:f2:04:45:71:eb:36:86:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: May 4 07:02:44 2026 GMT
Not After : May 3 07:07:44 2027 GMT
Subject: CN=6288AB1DC25C046713AC6F1C4C2CF7ACE9B28EA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7a:e4:12:16:fd:d9:33:eb:f5:fb:af:b3:33:
19:63:84:bc:20:a2:9c:ed:cd:ac:a2:0a:d8:ab:ed:
f0:f0:63:45:b7:12:b0:91:d1:f9:d8:ac:77:f7:c9:
b5:46:c7:ea:28:45:18:b8:a1:4b:8a:92:e3:d7:48:
0b:1b:e3:09:f1:70:cb:8e:2a:ee:bd:72:4e:f4:0d:
bb:77:0d:2b:80:67:50:29:e8:80:c0:36:18:9e:e4:
a7:1d:dc:4b:1d:27:4f:f7:08:b2:ba:b0:77:eb:bc:
fa:e8:0f:cd:8e:ab:d3:3e:fc:96:80:33:56:0e:f7:
13:39:60:75:07:0c:45:e5:ca:de:bd:3a:ec:43:df:
2a:3d:a8:86:a5:78:40:cd:a6:73:d6:76:0a:1a:f0:
61:c9:4f:b5:89:cf:7e:e7:1a:10:9f:34:fe:fe:cd:
ee:ba:e8:a6:75:9d:15:70:e6:83:76:23:17:92:8d:
17:e7:fc:6e:fa:2c:8f:ff:01:7f:f4:af:57:23:36:
ba:eb:11:6f:52:8a:9f:5d:67:1c:0f:92:9e:27:78:
3e:c3:38:b1:e9:ec:e1:9b:0f:01:10:f8:76:58:5b:
be:5f:3d:62:ac:f9:76:1b:87:cb:87:6c:1a:01:c0:
f5:62:1b:58:85:24:56:e6:c5:c2:39:de:fb:c9:78:
ea:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:88:AB:1D:C2:5C:04:67:13:AC:6F:1C:4C:2C:F7:AC:E9:B2:8E:A3
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS199176.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.92.0/24
Signature Algorithm: sha256WithRSAEncryption
64:f8:e5:15:ac:5e:96:e8:17:f0:75:fb:52:aa:10:06:67:0c:
8c:71:b8:83:5b:99:0e:99:4c:e5:3e:eb:e3:05:84:65:fb:31:
9e:29:03:5f:b9:93:9a:07:35:ec:c8:03:74:4d:c1:ae:6f:f8:
d6:b8:d7:df:1a:97:53:b6:81:f3:22:49:2b:a1:95:ea:ce:74:
4f:e1:94:33:d4:f8:f7:c5:71:5c:eb:6d:60:14:33:1e:0a:e4:
72:b7:79:f7:d4:e6:11:e5:3b:1e:e0:67:4a:e9:77:ed:df:93:
fc:7f:40:21:dd:9f:6b:e8:03:a5:b4:56:73:62:66:3c:fc:62:
35:57:38:47:7a:20:44:8e:b5:c3:11:0b:33:28:d8:31:e7:cf:
b0:38:a4:83:cf:ff:d3:51:32:98:d1:52:81:a6:e7:fc:e5:5c:
32:72:79:2b:a9:b2:72:84:68:ff:5d:58:cd:13:84:31:32:d6:
95:f9:22:35:e0:bf:bd:09:b4:d4:6f:37:dd:b3:0a:0b:bf:39:
6e:c5:62:88:7e:10:92:35:0b:ae:c1:11:a0:89:24:c8:b6:f6:
7d:68:b6:a1:3f:42:ca:25:d1:a0:da:2c:bd:45:15:e2:fe:4c:
65:d4:10:98:c6:f0:d2:ec:4c:f0:7b:40:ec:e0:18:86:70:61:
84:cd:60:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 10 15:48:58 2026 by rpki-client