Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS402215.roa
File: AS402215.roa (raw, json)
Hash identifier: iSiijOgJtXb9/fVoiwdMStGHXI5A/MmB4ggdEjO8gyU=
Subject key identifier: 87:0D:04:DB:2F:E2:14:41:19:CF:57:CB:09:CC:FC:59:A1:7B:E1:FB
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 05C36BE41324E8028C27A9F042E557C470DB11D7
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS402215.roa
Signing time: Mon 10 Aug 2026 09:58:28 +0000
ROA not before: Mon 10 Aug 2026 09:53:28 +0000
ROA not after: Mon 09 Aug 2027 09:58:28 +0000
asID: 402215
IP address blocks: 141.11.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 12:33:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:c3:6b:e4:13:24:e8:02:8c:27:a9:f0:42:e5:57:c4:70:db:11:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Aug 10 09:53:28 2026 GMT
Not After : Aug 9 09:58:28 2027 GMT
Subject: CN=870D04DB2FE2144119CF57CB09CCFC59A17BE1FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:40:44:92:4f:73:a1:c0:93:82:e4:00:26:51:
0c:1d:6a:2e:38:2b:66:79:40:13:8d:5c:1c:d0:0c:
cb:ad:a3:fa:a2:e3:e8:a4:ed:f4:52:46:54:67:a1:
b5:22:af:db:84:9f:88:b1:d9:8f:4a:82:f0:70:97:
5c:81:90:e2:d7:e1:1f:ab:c2:ac:f7:dc:84:4d:b5:
2f:45:e2:2f:a5:6a:c4:e4:5f:a4:f5:22:7b:5e:60:
88:c0:09:a6:ed:97:0e:53:0c:5d:72:32:39:dd:08:
18:c2:a7:9b:0a:9b:49:5b:85:b2:92:27:fb:34:62:
25:fb:6a:74:db:06:7b:56:27:17:36:93:2a:55:51:
5d:62:12:2a:78:a8:04:3b:8a:63:3a:59:f5:30:c9:
f3:db:df:81:76:77:52:8f:3c:08:90:f2:a3:51:df:
6c:d1:ab:e2:94:b4:1b:99:6c:fe:96:97:1a:22:ad:
2e:bc:82:b6:38:ed:e0:8d:7f:32:55:ac:0e:58:f6:
a8:1e:0c:cd:20:3f:44:95:09:e3:55:ee:c2:75:b6:
80:41:3c:43:48:26:b4:50:9a:d9:ba:01:3d:4e:77:
6e:bc:24:b4:b8:ff:f4:51:3e:62:1d:78:eb:25:e4:
26:e5:55:38:d7:d6:2e:5a:79:98:7f:e2:45:ac:82:
7f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:0D:04:DB:2F:E2:14:41:19:CF:57:CB:09:CC:FC:59:A1:7B:E1:FB
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS402215.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.79.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:04:4f:26:41:61:8d:80:53:00:14:0e:84:b0:00:57:f4:34:
c5:11:98:35:0f:e7:48:c5:59:fa:35:77:75:db:a8:2b:8a:b6:
24:ce:5c:6d:cf:ec:bc:5b:97:42:e5:c3:0b:d6:fe:ee:86:ed:
b3:72:a3:43:c8:78:f2:15:ab:40:02:43:c9:a1:1d:60:93:22:
fc:d4:5e:3f:72:87:1b:01:ac:07:34:de:51:0b:8d:cf:3b:61:
43:cf:03:9b:53:82:8d:7f:c3:c2:05:b7:20:06:32:5e:b3:d2:
06:51:69:ab:bb:0a:93:ab:12:02:de:24:74:cb:ae:3e:33:f5:
11:85:49:10:bd:f8:07:05:fd:d2:2c:60:5d:91:9b:55:c4:02:
52:52:e6:d0:1d:6a:18:16:8b:e7:f4:02:2c:82:ad:cc:71:88:
6c:67:26:93:63:a3:49:4c:02:ac:ad:ad:3c:96:6a:42:2c:a2:
3d:4c:2c:48:16:14:4a:f9:d3:15:f0:e6:ce:95:38:4e:41:79:
74:e2:fb:43:d1:b6:43:23:78:11:f9:c7:b8:46:c3:4c:b0:17:
52:b4:d0:c2:d1:10:33:53:58:ee:13:72:6f:52:09:b5:45:5f:
62:5c:e0:f1:46:c9:ee:a5:6c:fd:5f:eb:41:5b:5a:17:2a:78:
77:16:54:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:27:12 2026 by rpki-client