Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS151338.roa
File: AS151338.roa (raw, json)
Hash identifier: udVmDggR+3MyFDpFjQiwnOx5zzOOURGR/lmWFdldodA=
Subject key identifier: A4:95:90:70:F2:AF:59:4C:AB:A4:95:63:28:59:FA:51:2A:69:FB:6C
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 55A375CE58A0F51B80A932E662858DB58196A04A
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS151338.roa
Signing time: Tue 06 Oct 2026 00:05:39 +0000
ROA not before: Tue 06 Oct 2026 00:00:39 +0000
ROA not after: Tue 05 Oct 2027 00:05:39 +0000
asID: 151338
IP address blocks: 141.11.132.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:a3:75:ce:58:a0:f5:1b:80:a9:32:e6:62:85:8d:b5:81:96:a0:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Oct 6 00:00:39 2026 GMT
Not After : Oct 5 00:05:39 2027 GMT
Subject: CN=A4959070F2AF594CABA495632859FA512A69FB6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c8:a2:26:2a:fe:cb:7b:d5:40:67:0a:71:b7:
d4:6c:ff:d6:6c:f5:1d:e0:d6:5f:47:4f:04:0b:95:
a2:73:13:72:5a:9e:ba:b7:4d:e5:d4:0e:de:8c:db:
96:cc:58:87:49:2c:7f:29:5a:77:6d:20:03:41:1e:
6f:b3:7f:07:9c:dd:8f:fe:c9:8f:67:b8:4b:57:39:
04:df:82:ee:a1:04:7e:f9:35:78:12:1e:48:f8:a8:
26:70:30:50:ad:c4:a0:08:6e:f4:f5:6c:f0:07:24:
8a:93:c6:17:23:45:6d:82:14:46:8d:7e:e5:5c:7b:
9f:62:e7:a6:58:f8:e6:33:d6:91:c6:25:a3:14:55:
63:fe:0c:b8:c8:ba:c1:aa:27:20:95:9e:2e:19:da:
6a:39:d5:f3:69:e6:49:4d:6d:44:84:ca:81:f2:71:
1d:e2:7c:7d:1c:97:63:cf:66:a5:cb:77:5e:c6:ad:
5f:36:e1:0d:1f:93:1f:d9:ff:f2:dc:7f:2c:33:db:
8a:81:6e:6e:c2:6a:d8:24:60:5d:b5:9b:94:18:92:
63:07:ad:b9:02:db:70:f2:fa:42:c1:d9:45:d9:a5:
f2:1d:c2:2a:8f:7e:a2:1b:40:09:54:48:a5:63:a2:
a0:67:43:3a:b1:56:29:c1:a6:3f:4e:ae:55:68:56:
d1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:95:90:70:F2:AF:59:4C:AB:A4:95:63:28:59:FA:51:2A:69:FB:6C
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS151338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.132.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:11:65:53:28:b8:ef:65:a4:21:a2:dc:d2:31:59:dc:26:43:
3d:8a:75:14:32:28:b3:b0:2f:58:1b:25:75:5b:9a:4f:a2:c0:
5f:14:ea:f9:de:02:98:2f:66:fe:80:e5:7d:4e:b8:cb:d1:a5:
90:ad:cd:e6:b6:de:59:fe:eb:90:39:9d:3e:4f:20:62:bf:62:
03:e0:95:76:e6:c5:e2:95:e1:8d:0f:95:e4:b9:22:0d:d2:2f:
c5:55:8d:a6:bc:f1:44:d9:a9:c3:60:b1:64:f5:e9:9e:35:f2:
1a:be:cf:cb:b9:f0:54:f7:e3:0a:4c:69:f9:cf:b5:9f:9b:12:
81:ba:6e:e2:1a:93:23:4d:6a:8f:87:2a:7c:44:41:5a:0f:dd:
b0:d0:a5:08:88:f0:8a:30:23:a6:b8:80:10:b4:d1:c7:3e:16:
d7:06:da:1e:aa:f1:16:8a:5e:ac:01:60:77:0d:6e:b8:4b:d9:
a2:f5:aa:68:cc:af:4e:c4:51:69:63:b7:3b:d8:b0:90:aa:89:
42:c7:7d:88:0c:e2:59:a5:02:c9:e3:86:03:d1:5c:91:2f:36:
68:a2:c3:cc:78:2c:10:3f:e6:00:37:17:76:40:65:34:2f:d8:
32:e7:a9:1c:db:79:d3:93:88:e9:a1:5c:ba:c7:66:20:74:74:
ad:49:8f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 11:06:19 2026 by rpki-client