Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS399073.roa
File: AS399073.roa (raw, json)
Hash identifier: Wnx3IJ+us5cwXTLQJH0GdhkGbORysx/bovXQYMbrRRM=
Subject key identifier: A0:42:1F:CE:61:C0:FB:0C:16:81:A6:99:03:13:EA:14:17:A6:7C:76
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 22A38BC2104D8C2039BB221EA674152DC58BB305
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS399073.roa
Signing time: Wed 15 Jul 2026 09:49:11 +0000
ROA not before: Wed 15 Jul 2026 09:44:11 +0000
ROA not after: Wed 14 Jul 2027 09:49:11 +0000
asID: 399073
IP address blocks: 141.11.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:a3:8b:c2:10:4d:8c:20:39:bb:22:1e:a6:74:15:2d:c5:8b:b3:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jul 15 09:44:11 2026 GMT
Not After : Jul 14 09:49:11 2027 GMT
Subject: CN=A0421FCE61C0FB0C1681A6990313EA1417A67C76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e3:8c:0b:05:5e:f4:6e:a1:2a:03:df:e5:8f:
f4:f3:7f:65:f4:74:51:4e:c0:4a:83:e5:a4:62:e3:
6f:4d:6c:a1:b7:54:e3:f4:73:2d:0f:7f:47:df:5d:
8a:4e:23:86:fc:8b:e3:cb:e1:c6:8b:c5:e2:e1:71:
ee:06:f4:f3:ff:5e:0a:0b:c8:b7:19:ca:17:b8:90:
d6:ea:89:08:6f:fb:60:80:2e:29:0b:31:3a:be:ed:
f2:45:29:c1:97:18:9b:a5:ea:72:62:ce:1a:0e:f4:
d4:88:01:18:9f:e6:de:4e:b6:a0:62:75:d8:a4:30:
f0:0e:e2:b3:c8:2e:92:3b:05:ce:05:1d:51:5c:82:
c3:46:2e:fb:08:3d:8a:1f:aa:0d:83:97:b0:11:c1:
f8:10:9f:14:80:fb:12:12:cb:1e:41:7f:27:7a:48:
8f:60:aa:f0:4b:9d:18:8c:51:13:87:f1:ab:45:09:
7d:94:d8:da:46:66:b0:15:ef:3a:93:18:ff:37:98:
77:66:99:b4:8a:ef:c9:2d:81:dd:78:93:be:bc:d7:
27:a5:21:ca:a8:c5:6c:08:d8:68:df:62:62:44:58:
09:ee:54:81:32:94:57:97:4b:92:7e:2b:32:c9:4a:
74:35:8d:66:d9:0a:9c:2c:95:ea:1f:0d:a2:1a:5c:
9c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:42:1F:CE:61:C0:FB:0C:16:81:A6:99:03:13:EA:14:17:A6:7C:76
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS399073.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.173.0/24
Signature Algorithm: sha256WithRSAEncryption
51:d2:a8:e0:a6:61:7e:3c:ef:05:cc:68:b3:06:05:a9:04:22:
91:24:d7:2c:73:f4:85:ad:9f:a5:fc:be:0d:3e:29:bd:5a:b6:
23:cd:4e:69:91:36:4b:ab:48:40:94:40:64:a2:0f:0e:9d:6b:
c8:bd:94:b6:e9:6c:b0:4f:90:2f:3c:82:a8:bb:86:67:22:e9:
a4:ec:1e:c4:c7:27:96:44:c5:9b:07:14:95:70:6a:bf:c1:6c:
b0:a9:c3:10:f1:38:46:d5:b2:32:72:4c:d5:57:c6:db:64:2f:
f8:39:8f:2d:70:93:92:a6:d1:c1:a7:09:89:07:c3:d2:36:6d:
68:29:11:74:5b:24:a5:20:bb:30:ce:d9:02:39:9b:f7:9e:c8:
33:7e:5f:45:cb:fb:4b:91:1d:ec:47:bc:44:bd:9d:df:ad:d5:
8b:3f:7b:30:e5:68:ff:76:52:a6:5b:09:f9:4e:61:ce:a0:8f:
9e:25:28:03:61:53:98:2d:c9:46:84:1f:1e:8e:6b:b6:dd:46:
12:a3:10:85:95:0c:e8:e9:7f:44:b5:3d:82:a8:2d:a5:c4:15:
23:04:e8:7e:b4:89:9a:b6:04:e9:5f:9a:47:eb:ad:ed:8f:85:
e0:0d:b5:d0:27:3b:d3:fe:82:4a:1e:14:1a:32:bd:eb:97:ca:
37:50:6b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:42:21 2026 by rpki-client