Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS135402.roa
File: AS135402.roa (raw, json)
Hash identifier: FkFI07X+tdABRtEr7ORAa6kkZJjsgfaubRGMtZ7Sbqo=
Subject key identifier: FF:80:FB:E9:5D:AE:AA:41:EA:AD:DE:1A:AF:47:A6:65:C3:57:AF:1C
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 7DE98ABD87DCA3C13163CC32F8A5FC19C7A920B7
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS135402.roa
Signing time: Tue 01 Sep 2026 07:09:18 +0000
ROA not before: Tue 01 Sep 2026 07:04:18 +0000
ROA not after: Tue 31 Aug 2027 07:09:18 +0000
asID: 135402
IP address blocks: 141.11.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 05:11:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:e9:8a:bd:87:dc:a3:c1:31:63:cc:32:f8:a5:fc:19:c7:a9:20:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Sep 1 07:04:18 2026 GMT
Not After : Aug 31 07:09:18 2027 GMT
Subject: CN=FF80FBE95DAEAA41EAADDE1AAF47A665C357AF1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:05:2e:9b:79:51:d1:c1:8e:25:e1:92:59:8c:
d9:24:3f:bb:fb:d5:a7:1d:74:03:5b:b8:07:0b:5c:
52:ae:f3:c8:62:4e:1d:f5:1f:5c:15:9b:19:65:54:
88:26:01:e5:2b:67:0d:4a:9b:8b:43:ef:e7:36:5e:
a8:a4:66:96:40:c0:2c:1d:2f:1f:3b:18:0b:1c:14:
fa:c5:74:45:ca:4a:9c:f3:63:59:ad:85:aa:af:8d:
fe:4f:05:c6:86:9e:a8:0c:d1:6a:2f:14:fc:7a:1b:
e9:36:7a:04:48:f7:52:13:60:99:2d:7a:38:44:e1:
9b:49:56:df:6a:2a:07:ab:3d:50:3d:d3:1c:0b:29:
5a:5a:ba:c5:6c:31:04:80:47:02:31:22:6f:fe:67:
6e:4d:30:68:7c:7b:57:2e:84:7e:18:cc:8c:57:62:
f2:a1:5a:9f:c2:37:21:4d:24:95:35:4a:f8:56:4d:
c8:41:db:fa:bf:ac:b9:5c:2a:78:37:47:78:41:c4:
dc:73:24:cd:5b:68:8e:b8:c8:6d:85:2a:6a:4a:69:
9c:f5:b7:0a:97:0f:9f:b1:90:3a:1e:87:bd:bb:13:
85:1a:ae:20:d7:89:c3:41:ed:e9:61:eb:ca:77:28:
07:2e:62:34:b7:24:42:71:ab:5b:01:9d:c5:f8:34:
aa:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:80:FB:E9:5D:AE:AA:41:EA:AD:DE:1A:AF:47:A6:65:C3:57:AF:1C
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS135402.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.218.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:57:57:ab:7a:82:b4:b2:6d:40:96:41:97:40:33:a1:d8:69:
f5:ad:4f:16:c8:29:7a:df:15:b4:5d:21:27:3c:5e:f7:51:c8:
85:6d:c1:50:e0:d5:5f:cd:c5:e0:c0:ca:2b:82:89:fe:49:95:
34:ef:51:25:c8:16:d9:fa:3d:8c:44:5f:c6:e6:67:c5:53:f1:
5b:6d:4c:68:f4:b0:b6:60:14:a6:c1:a7:a9:82:19:79:b4:2c:
8d:09:5c:ec:28:95:40:22:e7:0b:82:3d:ab:bc:2a:d3:9c:9f:
ee:10:23:c6:c6:da:03:55:14:39:e8:0a:e4:34:87:cb:6a:c2:
3c:c9:cd:60:b5:37:19:49:dd:ef:19:2c:a9:92:86:cc:ae:9f:
7c:61:f8:73:38:aa:7a:80:2f:cb:6f:06:75:a5:a6:fb:ff:05:
af:31:ee:48:91:ed:34:4b:a7:87:55:57:d8:9f:1a:2d:2c:8b:
90:fa:50:25:ed:af:9c:20:4e:fe:af:5e:26:96:56:62:1a:aa:
e2:5a:e0:3e:45:1b:02:56:7e:de:46:6b:3a:c2:8f:be:3d:04:
cc:bd:1f:d9:b9:28:b1:f2:e7:1b:a2:6c:d8:04:fb:d9:ad:ed:
9c:99:dc:95:20:10:b2:99:17:6e:8f:96:3a:16:06:3c:2c:bf:
21:df:81:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 18:50:50 2026 by rpki-client