Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS219160.roa
File: AS219160.roa (raw, json)
Hash identifier: iDiJUz6aCabiVQjDln2INuUXqGgLlpHABjblcEyWHNk=
Subject key identifier: C3:D5:A1:C6:F4:25:51:81:BD:42:FC:A8:35:F4:F7:F9:D2:C0:F2:73
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 5DCA87CC926A08C3D50DBEE81C52B2A61044D424
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS219160.roa
Signing time: Wed 23 Sep 2026 06:16:31 +0000
ROA not before: Wed 23 Sep 2026 06:11:31 +0000
ROA not after: Wed 22 Sep 2027 06:16:31 +0000
asID: 219160
IP address blocks: 141.11.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:09:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:ca:87:cc:92:6a:08:c3:d5:0d:be:e8:1c:52:b2:a6:10:44:d4:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Sep 23 06:11:31 2026 GMT
Not After : Sep 22 06:16:31 2027 GMT
Subject: CN=C3D5A1C6F4255181BD42FCA835F4F7F9D2C0F273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:28:b3:6e:c6:39:58:f0:20:20:6d:ba:29:e1:
78:01:3a:17:c4:08:48:14:84:69:53:52:b6:c6:e3:
33:2b:e6:98:2f:b8:1f:7f:22:db:56:4c:09:7f:fd:
81:71:b5:99:a8:f3:3f:2f:ab:a0:3a:7c:ab:78:55:
1d:c8:fd:44:bc:f2:9a:23:32:97:ac:4d:89:83:e5:
02:79:cf:35:74:84:ad:12:5b:9f:59:ab:0e:3a:5a:
02:0c:84:09:b6:cf:e0:62:2d:2d:9b:0c:31:dc:eb:
65:58:be:35:d8:31:db:4f:94:3a:cb:88:9d:2a:08:
8f:d4:59:06:57:6f:a8:d7:b0:2f:d6:74:da:40:d4:
2a:16:7a:9e:b6:2c:70:e5:c6:96:22:ee:55:83:7f:
ab:4d:8c:6b:8a:1b:62:a2:10:ab:ba:78:a0:eb:da:
8b:1a:2d:9c:f6:dc:fe:cb:4d:a3:74:33:34:e7:66:
e2:10:c5:17:24:47:5a:aa:24:4e:cf:5d:58:15:10:
0e:c3:4a:bd:0c:d1:f9:8f:7f:31:35:6e:ef:81:c6:
d8:91:d8:ff:8d:3c:5a:86:de:1f:a6:90:d9:26:a2:
cb:26:73:65:a6:92:b6:3f:eb:87:9c:0c:81:27:c4:
67:1c:fc:9e:4b:58:2e:6f:6e:04:c4:c3:60:08:40:
d5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D5:A1:C6:F4:25:51:81:BD:42:FC:A8:35:F4:F7:F9:D2:C0:F2:73
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS219160.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.182.0/24
Signature Algorithm: sha256WithRSAEncryption
76:7e:72:6b:1f:34:c8:d3:3c:f5:5a:2f:38:d1:eb:0d:54:07:
47:ca:77:dd:87:7e:d3:a0:2b:7f:df:05:08:45:6e:00:10:f3:
ee:d7:44:47:dc:2e:7c:65:c0:70:80:83:d4:a3:7c:5a:c9:e3:
2b:8e:3c:26:07:55:e9:6a:7b:19:b1:48:94:b6:23:6a:bc:40:
46:c7:8e:02:07:ea:5c:18:06:1c:76:52:da:15:6a:f4:84:47:
79:48:96:fb:7c:59:d0:c8:8b:83:ed:96:f4:9f:21:74:f4:89:
37:4a:5e:e3:a6:52:a6:dd:a1:c2:2a:d2:19:9b:2f:90:6a:43:
7b:ed:96:0a:ca:62:15:19:dd:92:10:16:78:e2:24:6a:70:bb:
13:1a:3a:02:75:52:6b:12:4c:a0:12:55:f0:4b:d5:e4:62:c6:
93:dd:3b:9b:2e:ba:0d:fa:e9:47:99:ea:b2:cc:55:d3:e3:eb:
31:36:85:62:17:52:8f:5d:fa:0e:77:86:b8:0b:f9:b6:70:bd:
44:68:e2:11:4a:76:26:96:c5:a9:0e:1c:3c:c1:4f:21:41:2f:
30:60:5a:81:ee:c4:1b:8a:4a:02:69:a4:13:7b:22:c3:c4:7b:
0a:82:0c:6e:4a:b5:37:34:2d:d6:06:27:97:8b:66:99:4d:92:
bb:a9:5b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:13:39 2026 by rpki-client