Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS141957.roa
File: AS141957.roa (raw, json)
Hash identifier: a5ji8AyQ8GyYLBKc4ng6+8/jMx73vFiGA4duXwdR8UU=
Subject key identifier: DB:D2:33:12:EF:B8:CE:69:3D:0F:8C:7B:51:8B:F5:4A:E7:E7:BD:85
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 1B7DCDCBDB0BE11A638D315C30D58D28403778C6
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS141957.roa
Signing time: Wed 20 May 2026 03:07:20 +0000
ROA not before: Wed 20 May 2026 03:02:20 +0000
ROA not after: Wed 19 May 2027 03:07:20 +0000
asID: 141957
IP address blocks: 141.11.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 17:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:7d:cd:cb:db:0b:e1:1a:63:8d:31:5c:30:d5:8d:28:40:37:78:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: May 20 03:02:20 2026 GMT
Not After : May 19 03:07:20 2027 GMT
Subject: CN=DBD23312EFB8CE693D0F8C7B518BF54AE7E7BD85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6f:3b:fe:9b:1d:be:5c:95:55:bc:b7:74:2c:
d5:58:2b:7b:73:7a:6f:5f:79:ea:fb:ee:bc:5f:79:
fa:e0:38:8e:11:fd:10:6d:c9:a2:ce:fa:27:b0:a7:
82:cc:90:22:e9:dd:fe:5b:3c:5f:a6:3b:c8:9a:f4:
5a:da:d4:eb:15:2d:31:28:29:39:69:96:80:95:b1:
a7:89:79:75:bf:13:8c:9d:12:54:80:38:fd:42:d3:
96:e3:f0:f6:a4:e7:2e:95:d7:14:55:18:7b:7f:14:
e1:9f:1c:ee:95:3b:dc:80:0d:0a:b1:51:1f:32:af:
7d:56:d2:53:c7:63:68:cc:34:ab:d9:0c:ee:b9:f8:
4c:fd:26:42:62:1f:9b:8c:08:1f:db:c9:4b:de:a3:
d5:f5:df:93:74:44:33:10:82:a0:31:d4:23:57:be:
a4:e0:0e:45:06:ce:27:57:e9:a3:c1:fd:2f:63:f0:
7a:66:c8:9a:8c:e9:b1:c9:5b:9c:b1:5d:df:df:d6:
2d:c9:57:9a:f0:88:27:49:d6:b9:ac:45:fe:07:25:
2f:88:d1:3f:3f:f5:a2:d3:c4:f7:9b:b0:17:d5:c3:
87:3e:df:54:1b:e5:11:27:30:0b:6e:05:c0:4a:51:
37:2c:ad:2d:67:f4:da:05:5f:92:a4:b7:39:aa:fd:
4a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D2:33:12:EF:B8:CE:69:3D:0F:8C:7B:51:8B:F5:4A:E7:E7:BD:85
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS141957.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.137.0/24
Signature Algorithm: sha256WithRSAEncryption
d9:2b:af:4f:33:2f:20:24:8d:99:5a:ca:7c:6f:1f:ab:1d:08:
d7:4a:af:24:e9:3a:ed:7b:a2:3a:93:3e:66:b3:db:02:b7:a6:
2b:e9:26:5e:b5:ee:05:02:33:45:22:94:e5:3e:91:07:94:68:
35:26:57:f9:fd:30:53:86:ce:02:c7:3c:03:89:6e:51:73:f2:
44:83:26:92:12:ae:2f:7a:7d:ce:92:2c:17:ee:bf:5c:e8:92:
86:d0:f6:b7:6b:cc:45:09:17:e3:ab:45:b4:0a:11:48:f7:92:
7e:00:25:de:da:29:5e:c5:a7:c9:9f:d0:bc:5c:5f:41:7d:e7:
52:d1:71:b3:6a:68:f4:56:76:19:16:5a:e1:af:50:88:52:c0:
6f:5d:fa:a6:5e:bc:dc:94:57:2a:1c:4b:d4:ee:14:94:31:eb:
72:e8:e1:e5:a1:b9:08:15:ef:2f:08:9d:6a:53:b7:62:3f:01:
07:89:79:c9:17:73:6f:81:d9:05:bf:65:ab:eb:b6:35:6e:25:
9c:c8:f9:2a:27:5c:f6:c2:84:03:73:90:aa:f6:63:04:ef:ec:
f5:d2:dc:fc:5d:9b:44:fa:53:0e:82:d8:b9:1a:e9:00:2a:32:
b2:57:5a:86:5a:72:c7:e1:f8:31:f2:e2:d5:3c:ec:13:f2:2f:
b3:bc:5f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 02:27:30 2026 by rpki-client