Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS219447.roa
File: AS219447.roa (raw, json)
Hash identifier: 8DVI0CHb8H95MZK9eWS9klHun5tQlTDHzLlpE/0KIpE=
Subject key identifier: 84:44:EC:6C:32:89:7E:51:97:10:E3:44:A6:C2:01:A7:9B:41:91:04
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 3E0805ADDAD917DE16E1548DF9FE2331E3042A02
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS219447.roa
Signing time: Wed 28 Oct 2026 09:10:43 +0000
ROA not before: Wed 28 Oct 2026 09:05:43 +0000
ROA not after: Wed 27 Oct 2027 09:10:43 +0000
asID: 219447
IP address blocks: 141.11.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 00:33:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:08:05:ad:da:d9:17:de:16:e1:54:8d:f9:fe:23:31:e3:04:2a:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Oct 28 09:05:43 2026 GMT
Not After : Oct 27 09:10:43 2027 GMT
Subject: CN=8444EC6C32897E519710E344A6C201A79B419104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c9:48:76:a8:f6:01:f2:ec:f9:94:54:16:87:
55:5c:19:a0:d0:f5:4d:ba:00:46:f4:22:35:12:f9:
4c:f1:5f:02:9e:b9:a0:dc:28:45:02:ec:bd:60:8f:
96:60:6e:f4:b7:41:7d:04:4f:01:8c:40:d8:74:19:
b7:92:a3:1d:2d:e5:78:42:22:ab:1f:23:24:f4:0f:
14:9a:5a:b7:52:5f:14:a3:e4:0a:cb:01:2b:72:6e:
92:79:a3:b5:23:da:e5:ea:a3:1d:62:51:7f:42:6f:
a8:90:b7:03:19:48:5d:cc:97:d8:26:6f:91:65:02:
73:66:69:a8:9d:2a:c5:b2:80:05:de:7a:11:72:31:
9f:74:c1:b1:b0:7a:d4:40:92:2f:a5:2a:13:cf:71:
82:56:11:ba:7a:e2:6f:a9:a9:c6:8c:32:a3:ef:7d:
14:52:e9:13:e7:d9:e6:8d:f1:d9:0a:9f:c9:be:7d:
60:5f:77:92:0c:94:c0:f0:77:ac:bd:a9:2f:f4:b9:
76:e3:04:6c:f0:45:b5:59:b0:98:8a:e4:7f:b8:ab:
0f:39:b5:65:fa:05:02:d8:2b:02:de:48:47:6a:4f:
6b:ac:b7:d2:94:77:de:b1:3c:6b:f2:3c:30:fe:79:
52:97:9f:03:9b:19:e8:c6:ca:68:d1:77:47:e9:af:
45:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:44:EC:6C:32:89:7E:51:97:10:E3:44:A6:C2:01:A7:9B:41:91:04
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS219447.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.67.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:92:68:38:cc:86:cd:c3:55:22:45:4b:2d:e6:60:44:22:5a:
b1:d0:fc:10:92:23:cd:31:42:3e:60:9f:0d:9c:05:6e:95:42:
0e:b4:66:1a:fd:ce:ee:e7:a9:08:39:11:f0:5f:40:0c:44:f2:
3e:0e:65:15:a3:0e:fd:75:95:7e:87:e3:e4:da:36:fb:44:37:
9d:ae:53:13:cd:a0:53:68:48:d5:28:41:ff:c8:2a:2a:66:ad:
0b:f5:47:26:bd:86:5b:3f:f3:90:3e:3f:38:c2:45:9d:69:65:
2a:9c:5e:2a:14:87:1d:71:e8:f3:d3:69:fd:04:ea:32:1c:85:
9f:55:77:75:f8:ce:cf:f6:26:f3:78:dd:8b:db:05:76:a3:6d:
87:7d:e8:83:4b:1c:f7:dc:cb:66:c1:de:b1:79:8b:b6:a1:41:
2e:cc:29:8f:4a:6d:77:a6:72:e9:45:77:1b:65:c5:10:82:a3:
26:25:23:66:01:2f:a6:23:c1:d9:ee:69:87:bc:c9:b1:32:b3:
ac:40:dd:19:21:65:92:3c:d9:ae:e5:9b:3d:28:c3:28:29:63:
98:4e:f3:b1:05:0b:9d:cd:b5:69:a9:67:83:fc:11:c4:94:86:
0e:4f:cc:c7:0f:31:d2:ac:7b:1f:c9:e6:3b:54:a6:1d:04:e4:
74:4c:76:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:22:11 2026 by rpki-client