Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS199415.roa
File: AS199415.roa (raw, json)
Hash identifier: w3Of00JxU33WlsJw7dhYbOp3DIkFGZeNyAjbib7hX30=
Subject key identifier: 66:AA:40:1A:D2:8A:B0:33:79:79:F0:EC:A7:0B:89:5B:CB:D4:0C:A8
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 7328A9CCF786E65F94D24DE0985F4B5A13D0D91B
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS199415.roa
Signing time: Mon 12 Oct 2026 18:36:58 +0000
ROA not before: Mon 12 Oct 2026 18:31:58 +0000
ROA not after: Mon 11 Oct 2027 18:36:58 +0000
asID: 199415
IP address blocks: 141.11.103.0/24 maxlen: 24
141.11.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 03:23:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:28:a9:cc:f7:86:e6:5f:94:d2:4d:e0:98:5f:4b:5a:13:d0:d9:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Oct 12 18:31:58 2026 GMT
Not After : Oct 11 18:36:58 2027 GMT
Subject: CN=66AA401AD28AB0337979F0ECA70B895BCBD40CA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1c:7f:4d:3a:5d:7f:29:a2:56:f8:11:6b:63:
ab:c9:79:37:c6:9b:eb:0e:a0:42:0f:fd:9d:e2:72:
11:99:16:a8:76:cd:ba:ec:b0:60:18:43:52:8b:5f:
c0:8b:61:a0:36:d8:5d:c3:c7:c2:14:6e:d8:44:69:
dc:4e:e1:ec:0e:7f:5d:f6:e2:78:ac:cc:63:97:e7:
b7:5c:35:0d:3a:99:c8:f2:b6:9d:89:4c:f0:23:a0:
01:82:1c:0c:1c:c3:e9:36:62:9f:7e:59:e4:37:e3:
b1:d6:6e:93:a4:cb:75:8c:d7:69:cf:30:b4:ac:2b:
3b:eb:c3:e9:86:31:bc:4b:a9:8b:e3:d8:7b:ce:fd:
2b:9c:12:7a:c4:ee:b5:0e:ba:60:ec:dd:a8:40:e0:
d1:09:07:ab:f4:4a:b7:85:16:2d:61:a2:73:54:81:
ca:48:3c:da:b8:0c:37:9d:d5:d2:6a:a8:14:35:36:
8a:b4:5b:5a:1c:f6:39:5e:df:97:ee:81:f8:ed:65:
f3:74:c1:cc:4d:f3:fa:cf:2f:5f:29:ed:69:7b:a0:
9a:05:36:c7:42:2c:f8:6c:d7:8b:3e:c5:7a:1c:47:
8c:b1:ba:b5:04:6a:ce:a7:19:93:91:25:be:c0:1f:
23:9a:02:c5:ab:6f:fb:fc:41:c7:f9:ab:16:25:ae:
73:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:AA:40:1A:D2:8A:B0:33:79:79:F0:EC:A7:0B:89:5B:CB:D4:0C:A8
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS199415.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.103.0/24
141.11.234.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:7e:4f:fa:22:21:9f:73:9d:38:d5:59:de:7c:2e:f0:70:b3:
72:e5:2a:43:e5:ef:aa:66:46:73:2a:41:48:ec:3b:8b:64:74:
37:f0:17:1e:25:09:b6:14:3b:fd:42:b5:48:18:a5:8c:b7:d7:
94:7d:1e:7c:58:64:ca:40:21:7c:be:97:5d:b0:32:6e:a9:18:
57:2b:89:53:04:0f:85:08:6b:15:cf:0d:bc:50:84:f5:b6:56:
e2:df:8c:e3:3c:4b:a1:83:7a:29:6f:a0:39:a4:31:a9:e6:ec:
87:3c:fc:10:a1:88:48:dd:3b:63:6e:3c:83:8a:fe:f2:10:16:
48:dd:3f:28:73:24:83:9b:1e:42:ae:f9:f7:e3:8c:62:19:35:
0a:5e:3a:3d:1d:3d:cd:81:b3:5e:05:2f:92:88:40:6a:e5:f2:
dd:a3:79:33:64:cb:41:28:22:39:4a:3c:af:fe:99:c2:c1:fb:
f5:14:90:80:f4:5c:85:31:12:7d:54:f3:d9:84:c8:d8:e1:19:
e5:97:f8:fe:4d:9b:c8:b6:97:23:6b:0b:66:0b:01:7a:6a:e4:
75:66:31:ca:18:6e:3f:19:bc:70:7b:ba:b4:45:ea:29:b5:95:
7f:7d:3f:cb:45:b3:0c:d5:3a:9b:f7:02:19:87:c4:c9:46:a8:
69:71:e4:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:41:06 2026 by rpki-client