Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS199741.roa
File: AS199741.roa (raw, json)
Hash identifier: pXFoc5OFrm0Iy4kV19s4g1NnAMQ0ZfhSWpchHXQ0+mI=
Subject key identifier: 5E:6F:13:3A:DA:17:71:39:9C:40:46:4C:9A:61:55:2D:B8:33:78:34
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 4507E49CFC4115290932D3C96FFD31CBDCAD960B
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS199741.roa
Signing time: Wed 12 Aug 2026 07:56:26 +0000
ROA not before: Wed 12 Aug 2026 07:51:26 +0000
ROA not after: Wed 11 Aug 2027 07:56:26 +0000
asID: 199741
IP address blocks: 141.11.214.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:07:e4:9c:fc:41:15:29:09:32:d3:c9:6f:fd:31:cb:dc:ad:96:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Aug 12 07:51:26 2026 GMT
Not After : Aug 11 07:56:26 2027 GMT
Subject: CN=5E6F133ADA1771399C40464C9A61552DB8337834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2e:03:53:5c:9f:e1:fb:2c:67:1a:d1:9f:ed:
73:33:c4:06:c5:18:45:ff:9e:b7:39:48:c1:36:0d:
77:b5:a0:d0:23:08:57:2c:97:3b:30:0e:22:ca:ee:
bb:0c:0a:b5:d2:cb:e7:a7:ef:14:85:27:95:9e:e9:
e5:0f:41:b5:5c:de:ad:c2:39:98:ac:d7:86:1a:3e:
ba:b2:f6:ec:f9:ef:f7:e7:de:a2:d2:bc:cd:17:7a:
ca:ce:1d:18:94:94:fe:dd:fa:13:87:19:dc:69:83:
9b:36:fa:7a:18:98:50:e1:a1:6e:86:5d:a8:8d:b3:
53:b4:07:fd:10:26:a8:6c:d0:db:44:80:44:ee:94:
29:a4:ba:5a:20:cf:48:40:e5:59:8e:42:59:e7:6c:
76:82:9c:74:ae:21:25:42:11:cc:5b:c5:bb:4b:1f:
18:bd:46:e8:4c:59:ef:22:ac:b9:3f:d2:e2:7b:32:
95:c4:3e:5d:fe:e7:87:21:17:4a:65:b6:37:39:fe:
7f:2b:bb:79:58:6b:af:f6:50:39:83:0d:25:cd:41:
a7:30:01:d1:5d:69:b6:cf:f9:0b:ba:66:bc:d9:f7:
1e:32:ee:b8:be:07:b8:5e:67:e2:ce:d6:c3:2b:be:
50:07:d2:3b:cb:cc:ea:57:27:d1:83:cb:ae:f7:bb:
e1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:6F:13:3A:DA:17:71:39:9C:40:46:4C:9A:61:55:2D:B8:33:78:34
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS199741.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.214.0/23
Signature Algorithm: sha256WithRSAEncryption
82:bc:0c:9d:3d:db:c6:f6:68:99:9c:b8:72:da:e6:2e:39:1d:
1e:7b:8c:1d:6a:01:99:ee:e3:d7:fe:6b:f6:a1:77:27:9c:98:
f1:18:72:45:17:1d:09:4c:c9:a5:a7:09:50:58:46:20:a2:6a:
b5:46:4e:ec:32:06:44:c8:af:a5:22:b0:4e:a0:4a:eb:01:80:
9a:d3:8c:66:5e:93:a1:ad:35:0a:57:41:a6:ec:55:4f:4a:5e:
7a:db:c2:dc:b8:21:aa:48:b2:89:c2:a9:12:41:f7:b9:98:d1:
b3:29:af:bb:92:3a:d8:2c:e4:3c:b6:74:a9:64:23:7a:de:6b:
2f:5b:8d:c0:07:60:0e:97:51:53:bc:2d:6f:33:69:17:6e:1e:
4c:4b:18:42:3e:83:8b:70:07:61:26:d9:10:57:ce:b6:4c:d2:
a1:00:1f:64:3f:a2:fc:39:65:bd:59:b8:8b:e9:7e:54:69:97:
e6:2a:fc:74:30:f4:3e:3a:39:d2:79:d6:7c:77:c2:1d:c3:45:
85:c3:63:a6:ac:b9:dd:50:53:4e:72:6f:5d:17:84:bc:80:ad:
77:bd:73:08:7d:ca:f2:46:0d:b3:f5:f2:1d:9d:e5:63:dc:02:
41:6e:8b:fa:e6:ee:34:dc:d7:20:92:34:58:38:89:54:cb:e5:
c6:52:40:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 10:30:58 2026 by rpki-client