Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS199439.roa
File: AS199439.roa (raw, json)
Hash identifier: rRG9ZfTt2bMggPWq7XGlI4FLWHUmmUSs41JBR9eNLMY=
Subject key identifier: 17:17:BC:35:05:42:78:D0:27:C7:88:C0:CD:A5:CB:15:B7:FC:F4:8F
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 7AB85FC4C1F98D95FB32804265088A14D6D8B9B4
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS199439.roa
Signing time: Thu 02 Oct 2025 16:55:08 +0000
ROA not before: Thu 02 Oct 2025 16:50:08 +0000
ROA not after: Thu 01 Oct 2026 16:55:08 +0000
asID: 199439
IP address blocks: 141.11.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:b8:5f:c4:c1:f9:8d:95:fb:32:80:42:65:08:8a:14:d6:d8:b9:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Oct 2 16:50:08 2025 GMT
Not After : Oct 1 16:55:08 2026 GMT
Subject: CN=1717BC35054278D027C788C0CDA5CB15B7FCF48F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bb:71:54:11:cb:00:08:67:8c:45:49:bc:9d:
7d:c2:82:6f:6a:00:d0:0d:3e:e6:18:ea:fe:c0:30:
68:d3:39:32:a5:39:3b:22:b3:6f:ba:cd:d8:73:f1:
87:36:01:67:d8:b4:66:2c:dc:14:58:a8:a4:35:ae:
53:5b:02:e9:09:2f:69:38:ca:fc:de:30:59:9f:1f:
85:c3:1e:6b:08:c3:4a:ef:fb:0e:69:ed:15:a4:e9:
86:5e:67:a6:48:a4:48:bb:00:60:ce:27:35:ba:aa:
4c:f9:9a:68:29:06:f9:81:10:21:55:5a:38:c9:e0:
24:b1:c0:5f:22:51:9d:70:3a:9a:0b:d4:6f:37:d0:
3c:b3:31:dd:55:ab:8f:99:3a:c9:08:59:c6:46:95:
f2:d4:c0:51:a3:7b:13:b5:22:d3:9c:01:62:66:fa:
f1:33:25:a4:6c:af:07:2f:60:ca:fd:b8:ca:c2:d6:
cc:47:b9:4a:c7:88:d4:c6:6d:ee:87:db:9e:10:07:
08:7a:81:78:bb:11:c6:0b:b2:26:1e:fb:2c:de:9a:
12:1b:1f:44:eb:d5:01:64:04:eb:c1:8c:ff:7d:de:
bc:ce:9a:cd:e8:b5:bd:6a:3f:ed:81:e8:ac:cc:29:
78:90:1b:cc:d9:1b:a9:96:39:14:28:f6:0d:71:dd:
f1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:17:BC:35:05:42:78:D0:27:C7:88:C0:CD:A5:CB:15:B7:FC:F4:8F
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS199439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.102.0/24
Signature Algorithm: sha256WithRSAEncryption
98:8e:fc:93:5c:02:d1:23:8a:7b:7b:e3:7b:64:bb:00:ec:ed:
e6:6c:97:f2:ce:9c:d2:13:8f:d6:b0:e4:7b:12:a4:b6:33:67:
94:b6:80:f6:89:55:85:f3:b6:f4:15:fd:33:ac:14:5f:16:2e:
59:8f:33:b3:b0:f2:76:26:aa:b8:ee:46:2a:2e:45:65:d9:16:
42:9c:4f:14:79:b6:6a:71:f9:c2:f2:70:ee:48:5e:39:5e:ca:
bc:01:7a:7d:8f:45:0e:7a:78:6f:61:ba:bb:47:22:7a:5e:66:
22:4d:93:43:e6:3b:cb:63:b5:da:f3:c7:da:5d:39:77:3b:ce:
5d:65:1c:a1:c0:90:5e:5f:cc:7c:69:7f:54:a0:6d:7b:15:fd:
8f:83:49:5c:87:d5:c8:46:e6:a3:2e:86:37:bf:e9:76:d3:dd:
7c:98:76:c8:4f:d9:30:06:43:7a:0b:d7:a4:88:0b:9f:80:e7:
76:89:39:f8:9d:e8:73:2a:66:5e:42:a5:b9:2c:13:e4:ca:aa:
86:6b:b0:1f:fd:17:77:df:aa:0f:be:74:37:a2:3e:fe:9a:53:
69:7a:fa:99:8d:40:70:f1:4d:42:5d:a1:5f:ab:c4:1e:bf:59:
f2:96:71:e8:2c:47:05:83:b7:65:90:5a:34:ad:3c:5f:76:8d:
2e:d6:ff:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:13:03 2025 by rpki-client