Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS219084.roa
File: AS219084.roa (raw, json)
Hash identifier: Kww6gcQk7/bKlnpC1ICIk+PGTDo3essFHwxODZ1aokI=
Subject key identifier: 30:E6:E0:D6:BE:6D:12:80:A1:39:9C:33:5F:4E:1D:11:3E:3C:F9:62
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 7FE3B5B4DF66B19ACF5AD46B6548FCABAFF04CD1
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS219084.roa
Signing time: Sat 12 Sep 2026 20:06:07 +0000
ROA not before: Sat 12 Sep 2026 20:01:07 +0000
ROA not after: Sat 11 Sep 2027 20:06:07 +0000
asID: 219084
IP address blocks: 141.11.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:e3:b5:b4:df:66:b1:9a:cf:5a:d4:6b:65:48:fc:ab:af:f0:4c:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Sep 12 20:01:07 2026 GMT
Not After : Sep 11 20:06:07 2027 GMT
Subject: CN=30E6E0D6BE6D1280A1399C335F4E1D113E3CF962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a4:61:cf:07:0d:f3:18:94:14:6f:bf:58:01:
49:52:86:2b:e5:a8:25:1a:21:de:1d:38:d9:d4:db:
0c:61:a2:d6:57:b5:22:0d:21:d6:36:5a:35:94:91:
11:86:59:e0:63:26:aa:07:95:89:25:68:f5:f5:fd:
d8:30:62:12:67:5f:95:3e:e6:c7:8e:68:e6:9d:7b:
9f:5a:99:8a:16:1e:b7:22:c6:7a:e0:43:6a:31:99:
61:23:6f:46:d7:22:4f:8c:1a:92:5e:1f:28:b6:ee:
32:72:17:d5:9c:d2:ad:f1:fe:e7:b3:bf:71:0c:2a:
18:e6:1c:10:d1:d7:5e:4a:0a:2f:e0:c0:e9:26:20:
f2:3d:90:c6:42:57:1d:ed:74:2f:be:78:fc:86:96:
64:6e:29:d8:8f:36:d9:b0:54:36:6d:5c:a8:1e:71:
9a:a6:0b:f2:05:1b:a4:5a:ff:d2:bd:ec:4b:85:c4:
2f:63:c5:20:8d:e6:df:90:d9:ca:0f:5a:0d:1e:41:
a6:f1:88:c9:27:7f:5a:e6:d9:c0:ca:71:db:65:56:
07:ec:2e:4e:19:67:c5:93:d3:42:c9:68:ba:bf:75:
ee:e4:78:8f:99:56:5d:d7:48:fe:ac:1b:71:18:42:
5d:18:b9:49:db:95:7c:2d:6a:df:5f:4f:a3:f0:61:
77:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E6:E0:D6:BE:6D:12:80:A1:39:9C:33:5F:4E:1D:11:3E:3C:F9:62
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS219084.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.94.0/24
Signature Algorithm: sha256WithRSAEncryption
66:38:3d:58:1a:73:2f:27:bd:ee:4d:2c:ae:c8:00:b0:5e:23:
77:ef:34:f9:ae:f9:f4:82:c5:8e:09:8f:75:41:77:eb:c7:3f:
1f:e4:2c:64:5e:83:b7:62:2c:1c:1b:b9:bf:87:b9:c6:12:38:
82:d5:27:5a:9b:d8:49:eb:64:28:79:06:e6:a4:45:ab:15:da:
aa:2d:a4:b0:3b:96:68:99:38:eb:cc:c7:f3:8c:e5:d2:45:f2:
94:ad:97:9a:bc:e5:1e:0a:e5:da:5c:fa:ce:ad:5f:8d:ac:e4:
7f:c0:e4:c7:1e:61:ce:35:19:08:3f:ec:29:3c:ab:2c:dd:bc:
ca:93:e2:09:ea:87:ee:fc:6b:6c:4e:e1:0a:f3:c0:de:3e:db:
86:a2:1e:3d:f8:d6:e5:76:8f:fa:d3:9b:f8:76:0d:02:94:c6:
a4:33:2f:65:05:00:82:49:13:01:70:55:f0:bf:b2:3b:1c:a8:
6d:93:af:8e:8b:f4:0b:4e:15:7a:9c:5b:58:e4:a3:e2:f3:10:
ab:d3:95:4e:bf:6e:57:cb:b4:a9:86:88:7c:3a:cd:eb:5a:5e:
58:8b:bc:01:58:b4:83:46:a9:ba:8b:67:91:af:61:4c:f6:e7:
25:8f:84:06:8c:62:e2:21:21:35:4e:12:df:42:e8:fd:56:7c:
b7:11:3a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 08:16:42 2026 by rpki-client