Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS399641.roa
File: AS399641.roa (raw, json)
Hash identifier: dKAXF+9qhnz9c/DdKEVzpYcJs34XrkXaTh6psMfuf88=
Subject key identifier: B6:9F:BC:68:6F:7B:2B:92:0B:35:72:3B:09:62:5D:D0:E2:E3:0B:ED
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 174605E2CCF94CC4382EBB201A73125257A586D4
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS399641.roa
Signing time: Tue 01 Sep 2026 16:49:31 +0000
ROA not before: Tue 01 Sep 2026 16:44:31 +0000
ROA not after: Tue 31 Aug 2027 16:49:31 +0000
asID: 399641
IP address blocks: 141.11.19.0/24 maxlen: 24
141.11.30.0/24 maxlen: 24
141.11.176.0/24 maxlen: 24
141.11.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 14:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:46:05:e2:cc:f9:4c:c4:38:2e:bb:20:1a:73:12:52:57:a5:86:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Sep 1 16:44:31 2026 GMT
Not After : Aug 31 16:49:31 2027 GMT
Subject: CN=B69FBC686F7B2B920B35723B09625DD0E2E30BED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:db:0f:12:78:d2:f5:c7:75:38:fb:f6:cd:3a:
d6:fe:0b:b1:7c:96:b5:0b:f4:b2:34:89:39:65:12:
4f:2e:dd:3e:50:78:ea:7c:00:fd:06:e0:c9:d0:0e:
3d:de:38:6a:e0:3e:38:88:19:7e:08:6e:f9:0f:19:
88:1e:98:b7:00:dc:e1:0d:d2:1f:54:00:be:1f:2c:
a2:9c:3f:95:91:16:00:92:b3:15:06:cc:2b:81:5f:
bc:4c:d3:b1:65:0e:fb:2d:b6:92:53:cf:15:5a:91:
f6:cd:fb:39:81:fb:85:06:39:eb:13:f6:37:ef:db:
51:2c:43:d8:b7:fa:d8:0d:6b:ba:b5:bb:4c:8f:af:
7b:a8:c6:eb:4d:54:53:44:f7:0b:eb:02:20:c8:45:
50:d3:64:31:95:6b:0f:d8:84:ff:e7:16:8a:24:0c:
75:1f:10:df:20:32:c6:b9:3b:5a:84:bc:ff:4d:2e:
66:ce:61:e8:14:6c:9f:5b:7b:49:35:e8:33:3d:89:
97:c4:85:5f:ed:3a:78:5f:4d:2a:93:b1:a1:78:12:
7b:75:64:60:ff:50:96:08:16:23:c0:c1:06:29:70:
ae:c6:6d:a1:7a:71:61:32:31:c0:91:18:30:f0:b5:
46:90:cb:75:02:4d:16:6b:bd:20:3a:d1:fe:bb:58:
ef:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:9F:BC:68:6F:7B:2B:92:0B:35:72:3B:09:62:5D:D0:E2:E3:0B:ED
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS399641.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.19.0/24
141.11.30.0/24
141.11.176.0/23
Signature Algorithm: sha256WithRSAEncryption
36:85:09:49:7d:71:2a:47:93:26:f0:5d:a8:cd:87:9f:8c:99:
4b:78:b3:49:eb:d2:85:31:10:db:cc:ea:16:30:d7:83:07:af:
14:40:ec:5e:a9:06:b9:84:a9:e0:cc:92:0d:38:58:03:ee:1d:
01:2b:0d:41:1f:76:eb:cb:39:f3:91:09:62:c1:8b:c3:f8:64:
39:d3:33:9c:30:f4:56:78:47:b0:c2:50:10:81:c0:32:c3:1a:
91:9e:d8:75:bf:a2:01:85:3d:1d:b2:41:b2:24:16:bf:27:e5:
0f:00:f4:6d:bf:f6:f7:2d:89:aa:72:cf:0a:84:ad:60:f6:03:
b8:32:3e:ba:70:45:49:7a:8a:56:90:55:26:f8:c1:ef:ab:a0:
87:6f:d7:ff:c7:57:fe:db:12:8a:9e:80:69:ef:63:52:a3:3c:
78:10:ce:85:9e:2b:41:ff:00:14:c4:5d:39:fc:da:7d:50:91:
3b:47:3a:be:50:c8:3f:20:93:72:28:3a:93:f2:09:ed:2c:d1:
6e:21:1e:bc:6a:82:59:6f:4e:40:4a:bc:bb:d4:ce:92:25:62:
5f:dd:5d:7c:98:e2:ad:a4:93:50:7b:74:3d:40:13:bb:7a:1b:
20:65:ba:6f:2e:16:ae:15:1e:b4:4e:e4:31:e2:f1:dd:0a:bf:
98:11:a7:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 21:07:41 2026 by rpki-client