Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS199439.roa
File: AS199439.roa (raw, json)
Hash identifier: QNQfSjLHDPWMo13+7OW3tCbHuvVD/G5jDZInp7nPWms=
Subject key identifier: 4C:A9:02:FF:92:DF:77:D8:B0:32:AC:5C:44:38:17:6E:6F:AE:36:86
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 722A109C2BE6D1C6A2E35FE7DBBCE60F39F22D4E
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS199439.roa
Signing time: Thu 03 Sep 2026 17:49:32 +0000
ROA not before: Thu 03 Sep 2026 17:44:32 +0000
ROA not after: Thu 02 Sep 2027 17:49:32 +0000
asID: 199439
IP address blocks: 141.11.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 12:33:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:2a:10:9c:2b:e6:d1:c6:a2:e3:5f:e7:db:bc:e6:0f:39:f2:2d:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Sep 3 17:44:32 2026 GMT
Not After : Sep 2 17:49:32 2027 GMT
Subject: CN=4CA902FF92DF77D8B032AC5C4438176E6FAE3686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cc:1e:92:c9:9e:55:32:e8:0b:df:02:c3:06:
50:e7:8f:67:30:5f:d5:f4:37:41:e9:cb:ce:6f:05:
4a:9e:67:d8:81:ae:af:71:7a:53:5b:52:93:44:d9:
36:0b:58:50:6f:e1:20:bb:2e:f9:57:da:48:03:4a:
01:30:9b:6b:ae:28:9f:20:e3:d3:a1:c2:74:eb:73:
35:66:35:24:cf:c9:f8:a9:36:ec:cb:e3:9c:24:f7:
ab:b0:f8:25:e4:43:d4:a0:48:fc:a5:2e:86:10:1d:
33:e2:11:ab:f4:ba:1e:c8:c4:44:3e:d0:d9:13:64:
23:89:4e:2f:78:de:ca:bd:31:99:a1:71:ef:ab:2a:
75:99:da:98:31:72:0b:1d:1b:f0:ee:d0:59:40:d6:
7f:a8:f9:06:52:d4:54:df:0d:1e:15:1b:7d:2e:df:
39:d1:5b:bc:d7:66:96:7b:00:f7:a7:c6:ef:39:5b:
de:69:91:6f:24:1c:3c:f8:b4:54:79:08:0f:3e:41:
ca:cc:30:58:31:be:db:dc:a6:2e:d8:ab:54:6c:80:
97:cb:a2:e5:07:1e:20:da:c6:6e:97:0d:a1:8f:f6:
66:f0:6c:3c:74:ff:c5:31:a8:18:bd:06:0a:10:7e:
57:d0:25:de:d6:90:fe:08:7e:dd:02:a4:c8:d5:94:
ea:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A9:02:FF:92:DF:77:D8:B0:32:AC:5C:44:38:17:6E:6F:AE:36:86
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS199439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.102.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:53:9d:d4:90:50:c1:83:12:04:22:d7:e4:06:fa:0c:e1:19:
dc:5d:9f:f4:d7:9b:ca:b9:09:3c:c6:ac:11:ad:b1:ef:27:cc:
5a:75:e3:21:0f:61:fd:80:2e:68:26:81:cb:fe:fa:b5:28:a5:
09:af:30:3a:eb:15:76:a3:68:fe:48:e8:d5:d6:d4:d3:73:e5:
77:05:06:b2:66:b5:ec:c7:37:a5:b3:3d:48:29:dd:26:f3:96:
f5:ae:b2:f0:fd:89:8f:d2:5e:d0:39:a7:36:eb:af:34:7b:e3:
56:1a:2b:41:1e:0e:c5:cf:05:ab:ac:16:7d:c5:8c:e0:13:dc:
b6:29:3e:b7:e2:71:63:29:e3:bd:73:c1:7c:8a:04:c5:78:66:
76:ec:b2:85:63:f2:35:f7:07:d2:b0:fd:aa:33:b5:c8:f3:c4:
5d:30:e8:e8:b2:8a:15:69:87:12:0d:91:e1:92:78:18:50:28:
cd:68:85:ff:12:1a:01:36:c6:9b:b8:79:e7:be:72:03:17:a0:
ff:02:27:bb:18:76:d5:d7:3f:68:de:48:13:d3:0a:71:9a:9c:
c6:4e:4b:42:95:a7:5f:18:f2:10:6f:90:c2:d6:5a:fb:c5:1e:
9b:46:79:dd:59:3b:ac:4f:74:4e:b1:04:45:99:2b:dc:1e:10:
de:a2:84:1f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUcioQnCvm0cai41/n27zmDznyLU4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yNjA5MDMxNzQ0MzJaFw0yNzA5MDIxNzQ5MzJaMDMxMTAvBgNV
BAMTKDRDQTkwMkZGOTJERjc3RDhCMDMyQUM1QzQ0MzgxNzZFNkZBRTM2ODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvzB6SyZ5VMugL3wLDBlDnj2cw
X9X0N0Hpy85vBUqeZ9iBrq9xelNbUpNE2TYLWFBv4SC7LvlX2kgDSgEwm2uuKJ8g
49OhwnTrczVmNSTPyfipNuzL45wk96uw+CXkQ9SgSPylLoYQHTPiEav0uh7IxEQ+
0NkTZCOJTi943sq9MZmhce+rKnWZ2pgxcgsdG/Du0FlA1n+o+QZS1FTfDR4VG30u
3znRW7zXZpZ7APenxu85W95pkW8kHDz4tFR5CA8+QcrMMFgxvtvcpi7Yq1RsgJfL
ouUHHiDaxm6XDaGP9mbwbDx0/8UxqBi9BgoQflfQJd7WkP4Ift0CpMjVlOrtAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUTKkC/5Lfd9iwMqxcRDgXbm+uNoYwHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMTk5NDM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjQtm
MA0GCSqGSIb3DQEBCwUAA4IBAQCmU53UkFDBgxIEItfkBvoM4RncXZ/015vKuQk8
xqwRrbHvJ8xadeMhD2H9gC5oJoHL/vq1KKUJrzA66xV2o2j+SOjV1tTTc+V3BQay
ZrXsxzelsz1IKd0m85b1rrLw/YmP0l7QOac26680e+NWGitBHg7FzwWrrBZ9xYzg
E9y2KT634nFjKeO9c8F8igTFeGZ27LKFY/I19wfSsP2qM7XI88RdMOjosooVaYcS
DZHhkngYUCjNaIX/EhoBNsabuHnnvnIDF6D/Aie7GHbV1z9o3kgT0wpxmpzGTktC
ladfGPIQb5DC1lr7xR6bRnndWTusT3ROsQRFmSvcHhDeooQf
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:23:26 2026 by rpki-client