Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS219427.roa
File: AS219427.roa (raw, json)
Hash identifier: pJTMqyqs6TArrBsQDCegSwEsWDFnbR4WFIoMkESasvA=
Subject key identifier: E3:0D:63:77:58:C1:7F:33:84:60:D3:5E:83:C3:99:C1:92:B5:32:EE
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 19D6AB9FCAD6F13CA099ABA03149F4E456C1D6F8
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS219427.roa
Signing time: Tue 11 Aug 2026 08:03:46 +0000
ROA not before: Tue 11 Aug 2026 07:58:46 +0000
ROA not after: Tue 10 Aug 2027 08:03:46 +0000
asID: 219427
IP address blocks: 141.11.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 08:55:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:d6:ab:9f:ca:d6:f1:3c:a0:99:ab:a0:31:49:f4:e4:56:c1:d6:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Aug 11 07:58:46 2026 GMT
Not After : Aug 10 08:03:46 2027 GMT
Subject: CN=E30D637758C17F338460D35E83C399C192B532EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6e:b1:57:16:eb:c6:80:75:47:dd:db:d6:9d:
04:1c:ba:75:b9:90:d7:9c:ef:48:ca:c6:27:f8:b7:
f1:e7:4a:ab:04:f3:42:18:5c:3b:e9:cf:43:6a:83:
0f:aa:25:a9:5b:98:ee:e8:65:74:53:2f:ae:01:65:
81:24:2a:18:52:b0:76:21:02:92:4b:9b:18:06:1d:
2d:09:0b:4a:1c:e9:db:8e:30:14:71:80:be:a6:41:
6d:21:8c:c9:1c:e9:8d:e6:d3:d1:ee:72:82:97:4c:
1a:be:74:9d:27:a0:78:7b:8d:04:d8:9a:71:06:eb:
e9:d3:d2:08:28:0e:14:e9:8e:e7:b0:55:28:87:b3:
60:cf:4c:6a:2c:fc:c3:52:58:18:29:29:7d:f1:79:
c1:c0:c4:22:84:25:8d:74:41:df:ac:07:8b:50:2a:
33:21:ea:49:c7:d8:e3:b6:03:29:7f:87:ec:b7:1b:
b1:5a:69:5e:4a:26:ba:a4:82:b6:e5:69:e3:61:0b:
2d:00:fe:3f:ac:0b:e9:8c:11:94:d6:b8:06:8a:8c:
b9:55:28:08:68:75:b2:5c:92:57:e3:42:c9:8b:ef:
c3:39:a0:b8:1f:4c:a6:bf:e3:03:0d:95:e1:15:df:
b2:ed:ef:0b:b1:35:09:f3:6c:0c:01:1e:35:8f:25:
e5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:0D:63:77:58:C1:7F:33:84:60:D3:5E:83:C3:99:C1:92:B5:32:EE
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS219427.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.94.0/24
Signature Algorithm: sha256WithRSAEncryption
19:35:d7:72:08:21:cd:04:77:86:d5:0c:77:7d:09:43:4e:d5:
4a:9b:c7:9c:5d:bf:87:9d:03:cd:ca:74:1c:c1:06:7a:e0:d8:
17:f2:30:a4:39:2d:e0:df:1f:d3:0e:75:70:46:f5:c7:c6:13:
e7:c0:39:19:74:70:90:de:9b:a0:ea:0c:1e:a2:6d:54:36:53:
57:3f:f3:05:b2:7f:05:53:8e:44:2e:70:a3:2e:f7:42:9d:3a:
8f:f8:95:74:81:04:a6:4f:b0:7d:8f:44:26:2e:f5:5b:0f:7f:
3f:64:f9:cd:60:6e:be:7b:e4:06:31:62:6a:7d:3b:fb:41:5b:
86:b3:7b:f7:d9:5a:9b:31:0b:30:c2:c6:50:c6:c0:ee:b3:10:
76:7c:ff:0e:8f:79:2c:31:f1:15:c0:0f:83:76:b7:8e:cf:1e:
55:6a:10:f0:f4:8d:2a:3a:64:d7:19:ac:4e:d6:de:65:dd:36:
c4:51:8f:8b:6c:ea:f8:c6:e3:3e:5f:36:8f:c0:52:56:d5:29:
03:12:aa:6d:7c:7a:9a:6e:fa:c3:ee:32:b1:be:48:ac:d9:71:
73:d7:50:83:a2:b5:f2:ad:8c:3d:33:9f:a5:72:e2:46:ef:4a:
59:26:a8:b1:58:6f:d2:80:7b:c4:4f:7b:ba:0b:b4:16:81:8f:
4d:4d:e1:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:22:59 2026 by rpki-client