Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS402487.roa
File: AS402487.roa (raw, json)
Hash identifier: ij71RWYs6dm/p5euaxPeS7Kxx1rIWRb7AcJMxtAPlzU=
Subject key identifier: 9C:44:AF:29:53:C6:E5:CF:7A:92:D5:D9:69:CC:DC:8E:3F:43:07:61
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 671146C63A391FFB70D185EFDD4DDBD311AAFCC9
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS402487.roa
Signing time: Mon 29 Jun 2026 08:19:20 +0000
ROA not before: Mon 29 Jun 2026 08:14:20 +0000
ROA not after: Mon 28 Jun 2027 08:19:20 +0000
asID: 402487
IP address blocks: 141.11.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:11:46:c6:3a:39:1f:fb:70:d1:85:ef:dd:4d:db:d3:11:aa:fc:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jun 29 08:14:20 2026 GMT
Not After : Jun 28 08:19:20 2027 GMT
Subject: CN=9C44AF2953C6E5CF7A92D5D969CCDC8E3F430761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c0:59:a0:23:6d:84:ff:40:e1:a7:95:a4:f9:
58:d6:f8:48:ca:8e:ee:5e:9a:5a:5a:8b:42:30:7a:
ad:61:33:f1:d8:4b:a2:b4:39:34:2e:10:d4:ef:9c:
58:ea:55:ce:ff:71:52:27:d6:81:87:62:ea:9e:a2:
ec:24:60:92:09:34:e4:5c:89:59:17:d1:36:2f:df:
f1:a7:b3:39:4e:9c:a3:8b:87:fc:0d:2c:dc:b7:0f:
ba:59:29:b4:38:ea:42:d5:35:03:ef:9c:45:c0:41:
55:a3:42:35:b3:b3:73:b8:57:3b:3c:5f:3b:e1:64:
d3:10:c5:47:ce:e8:60:35:98:57:97:20:84:e4:6b:
d7:80:70:94:e2:b7:fb:a9:6b:3a:da:67:93:17:11:
bb:ce:24:a4:6e:e2:96:8c:09:a4:bd:3a:ee:b1:90:
6b:75:01:e3:26:9a:54:76:24:b8:c8:d6:91:5a:80:
c8:bb:20:1b:93:67:06:a7:ef:ac:75:74:25:57:c3:
fc:54:58:77:dc:16:19:82:e3:45:fd:40:f8:53:3f:
19:4f:7f:83:dc:9d:9e:12:07:06:69:6f:0e:ae:8a:
f7:66:cd:dd:ca:69:ee:9d:08:c2:12:87:b2:10:e8:
8b:90:1c:47:63:1b:57:13:f0:cf:21:ec:1d:e0:91:
07:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:44:AF:29:53:C6:E5:CF:7A:92:D5:D9:69:CC:DC:8E:3F:43:07:61
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS402487.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.89.0/24
Signature Algorithm: sha256WithRSAEncryption
37:32:f4:70:cc:35:c0:a2:6c:7c:3f:34:fd:c0:95:b3:bd:fb:
ab:c6:0c:0d:f4:b5:90:71:56:d4:81:ef:5e:9b:2a:44:0f:10:
24:17:e7:c8:e4:86:be:2f:8c:01:28:a8:fe:4f:86:c2:c9:39:
b3:6c:49:96:83:f7:d1:38:f0:dc:1c:4a:71:27:92:26:92:f9:
a7:10:c3:00:5c:2a:71:6f:09:36:23:15:df:a3:f5:07:ea:a6:
51:da:8d:a8:44:22:5f:fd:42:07:43:15:a7:ce:3f:6b:ed:20:
e9:b0:f0:e7:bc:df:02:04:7b:ed:17:b8:18:d1:ae:76:b9:4c:
03:d6:31:3b:03:28:fb:cb:6c:10:6e:02:6d:66:2d:93:44:9e:
df:a6:0b:8d:de:5e:61:b8:e3:7e:6c:88:1c:b9:20:d2:91:97:
ef:12:6f:f8:ba:4c:c3:40:0b:c3:bd:44:d6:cc:c8:19:26:15:
c4:9e:cf:d9:e8:27:b1:33:8e:be:54:38:45:a4:1c:4c:68:7b:
15:69:bf:bf:2c:48:34:aa:1a:52:22:94:15:37:e8:9b:fb:6d:
9d:e1:ff:2c:5b:2b:2a:9a:e4:8e:f8:91:aa:05:b4:4d:28:b5:
27:f9:f4:8a:54:49:bd:6d:d3:70:2e:a3:7b:78:46:b4:bb:b3:
88:ba:59:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 15:30:25 2026 by rpki-client