Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS402265.roa
File: AS402265.roa (raw, json)
Hash identifier: GpktftGsbOZoi+4oyJ5hcGPAOf9z7FsspLLymngXzvg=
Subject key identifier: ED:4A:DF:38:C1:21:FF:11:1A:9C:45:79:E7:78:A5:B2:E7:BC:54:8D
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 5B771C0BAD2BC47C8B7103AC506A8F72F4D43E1C
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS402265.roa
Signing time: Tue 18 Aug 2026 08:08:46 +0000
ROA not before: Tue 18 Aug 2026 08:03:46 +0000
ROA not after: Tue 17 Aug 2027 08:08:46 +0000
asID: 402265
IP address blocks: 141.11.31.0/24 maxlen: 24
141.11.159.0/24 maxlen: 24
141.11.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:77:1c:0b:ad:2b:c4:7c:8b:71:03:ac:50:6a:8f:72:f4:d4:3e:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Aug 18 08:03:46 2026 GMT
Not After : Aug 17 08:08:46 2027 GMT
Subject: CN=ED4ADF38C121FF111A9C4579E778A5B2E7BC548D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a7:9f:1e:66:ec:d7:4b:44:64:40:02:f9:bb:
68:e4:71:eb:64:fb:14:f7:0c:c9:3c:f3:33:ec:0c:
78:6a:d9:f3:62:44:8c:bc:21:92:69:75:5d:ae:cb:
ec:a1:62:c7:84:ce:22:e5:a3:f9:07:7d:56:e4:5d:
2c:14:e5:8a:79:e5:71:c4:1c:ae:25:9e:81:42:ec:
12:9e:38:2e:57:4e:9a:fd:ae:79:5c:d9:97:7f:f6:
6f:de:d2:43:21:2b:c9:ef:93:0b:38:31:42:31:90:
06:85:18:f7:cf:c4:16:e6:07:8b:b1:10:d2:60:ce:
04:d8:e3:4f:4f:33:7c:e7:3a:6a:bc:28:19:33:e1:
0f:3f:90:5b:fc:c1:10:33:7f:ff:12:d6:81:00:13:
8b:e2:f1:11:3c:15:97:a8:b9:e4:f6:dc:a2:12:5e:
99:c5:82:16:ec:e9:f5:ef:a9:69:63:ec:03:27:79:
9e:bd:36:a6:50:1b:bf:9d:28:ca:f0:a9:33:22:50:
ae:b2:77:f0:47:80:5b:5a:3c:80:54:4e:51:5b:37:
4f:82:69:98:3e:e4:f8:50:45:2e:55:34:15:89:a9:
94:ca:95:18:76:e1:89:5c:a2:9e:b0:98:a9:e1:8d:
5b:02:13:05:f7:16:26:c8:a9:35:c3:10:3b:6e:2a:
66:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:4A:DF:38:C1:21:FF:11:1A:9C:45:79:E7:78:A5:B2:E7:BC:54:8D
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS402265.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.31.0/24
141.11.159.0/24
141.11.182.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:de:d4:12:2f:93:a0:f1:97:b9:bc:d1:1e:4b:9e:4b:a8:21:
b0:fa:25:f5:09:c8:21:a7:f3:7e:47:24:5a:12:2a:2e:c7:85:
5f:93:fc:7d:0e:00:59:2f:d9:9b:06:de:c6:93:f5:aa:9f:fb:
28:9d:c8:0c:57:5d:4f:74:0b:96:f2:ed:81:76:3d:4a:bd:e5:
33:be:6a:0f:3b:93:0e:c7:3f:37:13:86:03:b0:c2:17:9f:06:
93:c8:eb:42:88:1a:29:47:da:fd:fc:3d:14:0b:b0:ed:9f:d4:
05:30:e7:24:a3:a1:cc:dd:26:47:72:51:d4:3b:37:a8:ed:66:
0c:6d:62:7c:e8:2a:fa:67:8c:90:04:c9:c8:84:e1:64:c4:e0:
af:51:9a:02:95:b7:fe:a8:a0:b0:3e:88:1c:22:a8:f3:b7:dc:
ae:5f:93:3d:9f:91:cf:c7:de:26:fd:f7:a4:12:4e:96:c7:07:
8c:49:14:9e:8a:94:89:26:56:c3:63:b9:72:69:ed:c0:82:61:
bf:a1:0a:b0:72:b2:97:e7:4c:82:c6:1f:82:92:cf:fc:14:7b:
91:75:fd:8a:27:ed:54:6e:5d:34:16:80:c5:23:8a:22:ce:c7:
2f:7a:91:58:c6:f8:a6:f6:67:6d:c3:86:1c:b4:10:f3:6d:70:
f0:19:6d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:51:57 2026 by rpki-client