Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS219001.roa
File: AS219001.roa (raw, json)
Hash identifier: dZkI9Uyt0ygw8v8Q1YkP/ihFZJi1F81PNC8AfzEkkTI=
Subject key identifier: C1:E8:4F:45:AB:63:FA:0F:F9:7F:CA:F1:47:BE:C2:3F:E8:C2:AE:B6
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 459059023D7072E7EC9D9EFA5D03BF3492A9032F
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS219001.roa
Signing time: Fri 09 Oct 2026 22:56:30 +0000
ROA not before: Fri 09 Oct 2026 22:51:30 +0000
ROA not after: Fri 08 Oct 2027 22:56:30 +0000
asID: 219001
IP address blocks: 141.11.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:90:59:02:3d:70:72:e7:ec:9d:9e:fa:5d:03:bf:34:92:a9:03:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Oct 9 22:51:30 2026 GMT
Not After : Oct 8 22:56:30 2027 GMT
Subject: CN=C1E84F45AB63FA0FF97FCAF147BEC23FE8C2AEB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d8:8f:e6:b7:92:33:7d:c5:56:6b:33:d7:5c:
7d:e6:07:c7:98:4f:58:bf:ec:c8:0a:9d:7b:03:3c:
12:0f:fa:89:09:cf:ca:5d:58:84:a6:f6:5f:bf:66:
cc:3c:7c:a4:3b:80:f3:5a:bb:6b:a1:db:1f:ba:e0:
0d:15:dc:9c:5f:bc:27:da:f2:19:2f:04:1f:12:c4:
6f:47:28:41:fe:e1:20:a0:55:01:b6:f2:49:ab:42:
1a:3a:35:7f:51:b1:df:64:f5:8c:cd:d9:f2:91:87:
0a:7c:ef:52:1d:f2:50:63:0c:01:c8:ca:61:43:d0:
a4:3d:4d:a1:f1:b8:23:f9:bf:0f:e3:ee:cc:93:3f:
53:d1:50:d9:a0:f3:e8:2a:1a:66:34:29:62:7c:c3:
c5:57:70:cd:f2:f6:f3:a5:d6:62:42:e9:f6:a5:ab:
2d:b5:e4:44:a0:98:3e:3e:63:d2:cf:17:06:45:d1:
3d:68:04:e3:d2:2f:e2:9b:9e:c1:a2:0b:9c:a9:d2:
1a:75:2e:fd:01:24:70:e7:a5:9b:b4:d3:23:d9:b9:
24:07:b3:5f:0f:70:6d:2b:95:27:7d:70:5c:e7:6e:
8b:16:82:3a:fe:f2:3f:c2:ce:78:37:de:e2:ed:3e:
b2:25:ae:3d:04:5a:21:cb:2e:a0:a9:6f:f7:81:88:
d5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E8:4F:45:AB:63:FA:0F:F9:7F:CA:F1:47:BE:C2:3F:E8:C2:AE:B6
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS219001.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.66.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:ed:c6:d7:a5:0a:34:5e:fa:ce:2a:ee:f2:f2:10:04:10:4f:
f3:82:30:4f:01:08:12:5d:b2:b4:c3:c6:ab:b7:8b:8f:e5:28:
22:b2:9f:f5:d5:29:07:2c:8f:75:03:30:a5:ca:0f:5b:57:22:
6b:f1:0b:33:12:91:ff:73:28:68:4a:99:a1:bd:df:ab:f4:bb:
99:2d:cc:3c:f8:bf:51:1e:4b:98:f0:86:87:cb:f6:d8:7a:fc:
f1:23:d9:04:16:33:bb:2d:6d:38:87:ab:cd:d0:4c:c0:26:8e:
1f:d2:a3:a1:a3:7f:1f:99:e7:04:f0:84:82:90:a4:7a:75:f0:
8d:6d:8b:40:e0:b3:1b:9c:44:6f:35:d6:d8:39:72:ec:90:2b:
21:9d:f4:83:31:de:62:bf:5b:02:1b:80:54:29:be:5e:90:8b:
27:7d:db:d1:42:82:a9:8a:51:76:88:81:8a:62:e5:50:45:3f:
03:b8:80:4a:ae:ab:ac:45:e8:42:70:32:56:80:d8:2d:3f:60:
00:ba:4c:cc:06:1a:73:fd:56:2f:78:8b:bc:c8:b8:94:30:a5:
70:6e:6f:f1:c0:96:c1:ed:10:df:7b:58:9a:b3:75:f6:ce:9a:
09:51:79:0a:50:be:5d:ab:81:9b:a6:26:6b:70:24:07:58:1e:
0d:7f:3e:41
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIURZBZAj1wcufsnZ76XQO/NJKpAy8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yNjEwMDkyMjUxMzBaFw0yNzEwMDgyMjU2MzBaMDMxMTAvBgNV
BAMTKEMxRTg0RjQ1QUI2M0ZBMEZGOTdGQ0FGMTQ3QkVDMjNGRThDMkFFQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC12I/mt5IzfcVWazPXXH3mB8eY
T1i/7MgKnXsDPBIP+okJz8pdWISm9l+/Zsw8fKQ7gPNau2uh2x+64A0V3JxfvCfa
8hkvBB8SxG9HKEH+4SCgVQG28kmrQho6NX9Rsd9k9YzN2fKRhwp871Id8lBjDAHI
ymFD0KQ9TaHxuCP5vw/j7syTP1PRUNmg8+gqGmY0KWJ8w8VXcM3y9vOl1mJC6fal
qy215ESgmD4+Y9LPFwZF0T1oBOPSL+KbnsGiC5yp0hp1Lv0BJHDnpZu00yPZuSQH
s18PcG0rlSd9cFznbosWgjr+8j/Czng33uLtPrIlrj0EWiHLLqCpb/eBiNWDAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUwehPRatj+g/5f8rxR77CP+jCrrYwHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMjE5MDAxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjQtC
MA0GCSqGSIb3DQEBCwUAA4IBAQC77cbXpQo0XvrOKu7y8hAEEE/zgjBPAQgSXbK0
w8art4uP5Sgisp/11SkHLI91AzClyg9bVyJr8QszEpH/cyhoSpmhvd+r9LuZLcw8
+L9RHkuY8IaHy/bYevzxI9kEFjO7LW04h6vN0EzAJo4f0qOho38fmecE8ISCkKR6
dfCNbYtA4LMbnERvNdbYOXLskCshnfSDMd5iv1sCG4BUKb5ekIsnfdvRQoKpilF2
iIGKYuVQRT8DuIBKrqusRehCcDJWgNgtP2AAukzMBhpz/VYveIu8yLiUMKVwbm/x
wJbB7RDfe1ias3X2zpoJUXkKUL5dq4GbpiZrcCQHWB4Nfz5B
-----END CERTIFICATE-----
Generated at Tue Oct 20 22:20:22 2026 by rpki-client