Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS1.roa
File: AS1.roa (raw, json)
Hash identifier: LMYwZ3xIkgKXOj15+KODWfQPb36Hch9IYKc88gGB6P8=
Subject key identifier: 67:52:A1:A8:50:D8:93:6F:4B:BE:5E:27:5D:D8:9C:5A:39:53:DF:AC
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 0CF842CED477073F10AE9C7DF49A841D91CF8267
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS1.roa
Signing time: Fri 26 Jun 2026 08:10:36 +0000
ROA not before: Fri 26 Jun 2026 08:05:36 +0000
ROA not after: Fri 25 Jun 2027 08:10:36 +0000
asID: 1
IP address blocks: 141.11.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 21:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:f8:42:ce:d4:77:07:3f:10:ae:9c:7d:f4:9a:84:1d:91:cf:82:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jun 26 08:05:36 2026 GMT
Not After : Jun 25 08:10:36 2027 GMT
Subject: CN=6752A1A850D8936F4BBE5E275DD89C5A3953DFAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:94:f7:1e:69:95:9a:36:b0:c5:9f:d2:1c:af:
42:6d:f1:74:46:35:69:24:de:a0:e7:55:7f:5b:96:
05:f3:d0:75:8f:4f:a1:83:d4:86:80:96:34:8f:b3:
15:34:0e:db:0c:d5:b6:29:39:39:37:1a:da:9b:9f:
12:73:d7:31:cf:25:45:a5:8c:73:46:33:1c:8c:34:
78:37:2b:d1:4f:3e:ae:eb:ed:a5:b8:5e:78:d6:c3:
34:d1:b3:59:62:52:34:92:d6:44:3e:92:69:6a:4f:
70:bb:93:78:db:30:d4:0d:0b:c3:67:fe:80:44:48:
c7:60:28:20:17:41:d1:eb:08:a5:81:87:0e:0c:74:
b4:50:d7:88:b4:74:40:a0:f3:87:1a:9e:57:b4:f6:
7e:bd:d8:c6:bb:05:f5:7a:2e:96:3b:f5:a0:27:29:
df:ef:db:05:77:05:ce:03:0b:e0:6d:ed:c9:c2:91:
ba:19:44:9e:7d:06:2b:ac:c9:29:c9:71:d7:14:5f:
df:74:77:02:8f:12:a6:7d:57:fe:02:86:87:24:e5:
95:e6:85:06:87:95:0d:91:5c:8e:e2:fa:68:6d:d1:
3e:e7:45:31:7e:cd:8b:d6:e0:65:74:ab:50:ed:00:
ae:63:9a:a3:ba:7b:5a:a3:4f:18:36:14:57:f4:f0:
09:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:52:A1:A8:50:D8:93:6F:4B:BE:5E:27:5D:D8:9C:5A:39:53:DF:AC
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS1.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.210.0/24
Signature Algorithm: sha256WithRSAEncryption
69:02:29:87:93:83:6c:81:23:a5:28:4f:fe:10:3b:4d:ff:ea:
c9:df:8f:41:e2:a0:9e:43:eb:d7:13:a3:57:9c:74:da:dd:3e:
b8:6b:c3:49:28:52:05:cb:9a:bf:4a:2f:6b:ea:f1:73:89:de:
f3:b6:44:e6:fa:f6:9c:68:82:7f:9e:bd:f4:bf:0d:a7:12:f9:
8a:f6:cb:fd:e1:00:5f:72:f2:e7:99:31:de:19:fc:a7:a4:46:
c3:5d:4c:6e:61:66:e9:30:2e:7c:7a:78:91:f5:95:dc:5a:7a:
97:d2:2e:21:2d:71:3d:bc:24:d3:87:ed:bc:83:37:14:02:72:
be:89:f9:ea:78:d4:d5:58:40:30:43:df:e4:7c:b4:08:b9:7a:
67:03:54:e3:0e:16:df:f7:f6:5d:f0:6c:e8:5c:fc:16:d6:be:
40:e9:63:21:79:07:a1:0e:65:97:10:39:f2:1b:18:be:78:1f:
6e:35:43:3e:aa:fb:a0:5c:fd:ca:5d:0a:99:9f:d9:b8:34:bd:
bd:b0:c5:46:1f:31:16:7d:be:0d:77:b7:62:c7:de:7c:99:d5:
be:db:bf:84:08:05:50:86:84:66:a2:57:e0:d8:fd:8c:19:ca:
dd:f0:33:a5:77:d7:3e:ea:9c:70:bd:53:ff:7a:4b:55:ce:d3:
ab:09:38:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:06:11 2026 by rpki-client