Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS402904.roa
File: AS402904.roa (raw, json)
Hash identifier: 4Z72+3sM9nu2VXE5dBme3B+icBJlVB5pUX/FTHgVQxM=
Subject key identifier: 0E:74:EF:8E:7C:26:C2:C5:F2:02:57:77:6D:11:E2:C2:44:04:C8:9A
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 32B21F3CE86F78C5965FE4623D8AEE129948F70E
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS402904.roa
Signing time: Tue 03 Nov 2026 14:13:21 +0000
ROA not before: Tue 03 Nov 2026 14:08:21 +0000
ROA not after: Tue 02 Nov 2027 14:13:21 +0000
asID: 402904
IP address blocks: 141.11.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 22:05:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:b2:1f:3c:e8:6f:78:c5:96:5f:e4:62:3d:8a:ee:12:99:48:f7:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Nov 3 14:08:21 2026 GMT
Not After : Nov 2 14:13:21 2027 GMT
Subject: CN=0E74EF8E7C26C2C5F20257776D11E2C24404C89A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:1e:71:37:cd:1f:8b:7c:82:ba:48:b7:28:d6:
34:c3:57:e2:f7:7d:74:25:2e:42:a1:76:6a:67:3e:
30:44:07:4b:9c:3b:45:1e:05:de:dd:88:d9:36:cc:
dc:e3:a3:b2:ea:17:34:83:da:a7:84:9f:aa:b7:c9:
10:4b:76:6d:ef:37:d0:ef:c1:a4:6e:6a:10:60:e8:
1f:1c:63:d2:b5:71:95:e3:58:cc:73:61:c7:8f:c9:
86:4b:12:d4:d4:3e:08:e7:6f:c0:e9:8b:d6:26:aa:
08:0c:e2:cb:01:33:22:da:dd:79:3b:f1:91:f5:99:
c3:39:dd:96:bf:a2:f3:4e:30:8a:35:83:83:72:71:
66:19:20:63:4b:83:02:b2:02:69:6c:14:e6:9d:67:
43:42:e0:13:b2:1c:d2:b7:40:ef:e9:b7:b2:74:53:
35:22:d9:6f:46:20:03:36:10:d6:c0:b9:ad:a9:a9:
93:42:42:e4:8d:26:1e:c7:a0:6d:af:4e:67:34:81:
c7:9b:4e:a9:f2:e1:2f:42:96:0a:a4:f4:80:65:e9:
ec:cb:45:8c:eb:bc:82:84:21:4b:af:9f:57:5b:30:
e7:6e:86:80:65:9e:7c:87:bf:23:a7:f0:09:c9:4d:
dd:9a:cd:c1:fc:01:49:cb:07:a0:d7:88:42:07:e2:
1e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:74:EF:8E:7C:26:C2:C5:F2:02:57:77:6D:11:E2:C2:44:04:C8:9A
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS402904.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.157.0/24
Signature Algorithm: sha256WithRSAEncryption
43:24:ec:fe:e3:25:eb:8a:27:f4:0e:6c:44:95:56:93:22:e9:
67:11:06:52:72:7e:ed:23:2f:89:fd:a4:71:fc:2a:08:e2:74:
f9:eb:99:13:99:09:1e:ed:05:9b:87:9c:21:95:c4:1c:84:7f:
b5:e7:95:e1:78:40:dd:03:dc:1f:26:9f:a4:58:04:34:14:e0:
e9:6e:d2:c7:3a:ac:0e:02:4d:bb:5d:64:0c:84:5d:70:2a:2d:
fe:11:f4:f3:c5:11:f0:9c:09:40:30:29:1d:39:ff:9b:02:f3:
5f:04:0a:c9:93:d2:5e:8a:76:28:94:ce:06:2b:d3:53:67:12:
b2:44:d0:1d:bd:8c:6e:e0:12:e6:11:87:4c:c9:19:71:32:e8:
22:45:26:ce:05:73:be:e3:6b:93:c1:d6:93:fd:24:37:e9:35:
2f:ba:0a:0a:cc:d5:c7:72:6e:f0:f0:3e:f8:c9:38:bf:f4:e2:
be:ac:bc:97:9e:24:c9:c1:c7:74:15:e0:49:51:b2:c1:63:a6:
66:96:98:6b:39:22:d9:23:f9:da:f3:d1:cd:b8:fc:8a:1e:ad:
1b:bc:69:1f:55:4a:a3:0b:aa:ad:b5:de:1b:67:d8:25:d4:17:
49:10:2c:8e:18:90:6a:9a:ee:0b:f1:3a:29:55:f5:c4:b7:11:
36:dd:d2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 08:53:33 2026 by rpki-client