Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS219105.roa
File: AS219105.roa (raw, json)
Hash identifier: sCNxSoJFhW4KZe7AvWOB91UvetsNrye8R0PX09gfkCY=
Subject key identifier: 99:70:7D:FC:86:AB:A3:B9:0F:48:1D:B9:F5:80:43:1E:41:C2:74:86
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 42F8EECF943CC4D2F13ECD9EC753AA68C9893F7C
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS219105.roa
Signing time: Sun 11 Oct 2026 19:34:27 +0000
ROA not before: Sun 11 Oct 2026 19:29:27 +0000
ROA not after: Sun 10 Oct 2027 19:34:27 +0000
asID: 219105
IP address blocks: 141.11.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:f8:ee:cf:94:3c:c4:d2:f1:3e:cd:9e:c7:53:aa:68:c9:89:3f:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Oct 11 19:29:27 2026 GMT
Not After : Oct 10 19:34:27 2027 GMT
Subject: CN=99707DFC86ABA3B90F481DB9F580431E41C27486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8e:3f:da:76:b5:f6:6b:a7:3c:2e:1a:bd:a7:
f2:c8:d7:00:20:a6:6e:ed:02:90:98:d6:12:03:80:
97:f1:9d:43:f9:9e:f7:d7:ef:e3:1b:e1:12:f0:79:
4a:15:1f:92:a8:25:84:2b:15:55:41:75:6a:62:0c:
5b:d3:8a:61:71:73:a1:62:b4:4e:88:e5:2e:10:7e:
64:d4:a6:64:94:16:75:f0:5d:5b:a0:66:1c:f8:5f:
0f:ae:41:c7:4d:db:15:d9:8f:93:79:69:36:32:5f:
04:10:c8:4f:3b:69:e1:c7:f0:d9:2b:5f:c7:59:f2:
3e:87:d1:bb:0f:cd:62:bd:aa:b2:5c:aa:8b:ad:ca:
bf:a5:04:1a:61:cf:4a:53:33:c8:56:f3:37:9e:50:
e5:40:a1:1f:7e:00:72:30:f8:65:15:88:3d:73:97:
67:03:c0:ed:0f:bf:83:07:d4:0b:34:e9:ef:78:49:
a1:19:f4:39:49:d7:7c:cd:4b:61:aa:e4:a2:a8:b9:
7a:5d:81:b5:a4:76:e4:ac:39:e6:20:bd:03:9d:fd:
95:81:ec:14:08:76:d5:33:66:25:66:08:ce:41:0d:
68:42:f9:fd:7c:b1:cc:63:0c:9a:a5:0a:03:1e:73:
0d:51:32:cd:a2:33:c9:be:8b:02:60:fe:e9:3d:fa:
39:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:70:7D:FC:86:AB:A3:B9:0F:48:1D:B9:F5:80:43:1E:41:C2:74:86
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS219105.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.235.0/24
Signature Algorithm: sha256WithRSAEncryption
12:bd:10:3b:8f:b4:de:21:8c:e7:49:6e:b2:4a:b5:26:a7:34:
ec:47:25:fa:82:d5:80:e3:22:60:40:2d:80:79:e3:7b:0f:20:
9e:ee:f1:f4:c9:96:13:a6:f5:34:1b:aa:ed:3e:b6:ee:b7:63:
88:a7:31:d3:48:f1:4d:53:19:4d:07:98:d3:09:34:51:1f:e3:
df:ba:dd:e7:fa:50:55:1e:bc:68:06:fc:27:cf:b0:38:6f:0a:
64:7a:58:01:43:cc:f5:66:68:37:da:c5:03:44:8f:24:47:3f:
6f:aa:ed:66:a8:85:83:a4:c6:e0:52:be:e5:f7:ad:a8:cf:06:
59:35:59:43:2b:15:80:4c:c4:06:96:5b:ea:e0:4f:74:77:4d:
15:0e:23:bb:3f:0d:9e:b4:34:33:28:55:63:92:7a:9c:62:f1:
67:89:c7:a2:54:e4:78:26:bf:14:1b:47:18:d9:25:8a:65:08:
fa:9b:0d:3d:62:47:be:f3:01:bf:b3:8e:a4:c1:58:12:1b:14:
29:7c:82:46:65:5f:24:3d:d1:aa:9e:76:80:a6:c5:46:0f:af:
4b:c8:eb:b6:d0:85:52:0f:9e:91:c4:e5:2c:b3:d4:5d:1d:24:
54:87:16:5e:52:53:68:9f:d4:75:34:3c:e0:a3:5e:50:94:e4:
fe:c7:f5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:20:20 2026 by rpki-client