Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS41171.roa
File: AS41171.roa (raw, json)
Hash identifier: c9j3nf1EsZYCsiSzXZ7e+PTeksYwt33MU1CJo6V5hsU=
Subject key identifier: E7:C3:C6:3E:CD:48:AA:64:C3:85:B6:0A:BF:80:1A:09:4C:C8:9B:B2
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 5D45C90A574C97E64B7BCA005F423DF091678B75
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS41171.roa
Signing time: Sat 06 Jun 2026 06:49:14 +0000
ROA not before: Sat 06 Jun 2026 06:44:14 +0000
ROA not after: Sat 05 Jun 2027 06:49:14 +0000
asID: 41171
IP address blocks: 141.11.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Jun 2026 12:28:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:45:c9:0a:57:4c:97:e6:4b:7b:ca:00:5f:42:3d:f0:91:67:8b:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jun 6 06:44:14 2026 GMT
Not After : Jun 5 06:49:14 2027 GMT
Subject: CN=E7C3C63ECD48AA64C385B60ABF801A094CC89BB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2b:3a:88:19:8e:26:32:16:5c:3f:ed:39:61:
fc:c6:38:37:43:8f:1d:1c:a0:76:5d:d1:d7:ae:5c:
fa:ee:fe:70:39:43:4a:18:1f:58:77:5d:05:f1:71:
3b:7c:9d:00:bd:30:45:bc:9b:c3:00:8f:80:88:04:
3e:c2:fe:08:c5:34:c7:d3:47:be:ce:e4:95:f8:59:
51:36:52:6b:ae:9a:bf:c1:43:da:55:3f:52:c2:06:
c8:58:d3:60:b7:17:7d:ad:0b:06:f0:73:4a:65:9f:
d7:0c:86:a6:2c:7c:a1:5b:b6:9d:b8:4d:3e:b6:d1:
56:ec:f0:a2:cb:62:c2:51:9b:54:51:4f:0f:e5:9f:
9d:fb:0d:74:74:61:e2:ac:9f:6a:d6:33:02:d5:bd:
7a:fd:74:b7:51:05:6c:63:86:ab:15:b6:4d:1a:3b:
ef:2e:7c:36:5c:f8:d7:6b:1d:9c:59:e5:17:f5:3a:
9c:91:87:70:a1:57:40:c9:e7:82:4f:75:26:a8:11:
ef:8b:fa:e9:be:8a:3d:67:6e:93:ce:b3:b2:47:38:
ac:8c:b6:e2:29:71:eb:ef:c4:d7:3e:70:51:73:34:
72:fc:93:9b:8a:a8:38:30:a9:8b:66:fc:33:94:7a:
d1:28:ce:de:6c:c9:22:35:2c:02:9b:d1:a0:3a:17:
b6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C3:C6:3E:CD:48:AA:64:C3:85:B6:0A:BF:80:1A:09:4C:C8:9B:B2
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS41171.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.218.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:44:ce:43:c5:d1:71:8f:b5:6c:5b:b1:86:53:e1:72:f0:cf:
74:45:d1:3c:0e:5d:29:96:23:f3:08:af:41:55:e1:e3:c6:86:
25:d2:92:18:34:b6:0c:98:63:50:f6:3c:e9:fa:1b:cb:86:6e:
0c:4c:54:b7:63:df:76:ed:57:bc:c6:6a:bb:e1:c5:b2:8d:ff:
40:8a:88:80:69:af:13:d6:a7:e1:70:58:6e:a5:35:97:01:48:
b5:a2:a6:20:8d:35:5f:32:f2:5d:45:ac:3f:14:e1:3b:8f:d2:
65:a7:8b:16:5f:15:7d:a0:a9:08:c8:9b:5f:e8:26:db:d7:8f:
4d:3b:34:79:e9:c2:be:d9:1d:f5:24:ca:c6:e1:73:f7:25:5e:
5c:f4:df:23:5e:da:f8:5b:d5:a7:8c:85:f4:69:b3:c0:54:fa:
34:d2:b8:05:bf:70:99:e1:a5:a3:4c:bd:88:67:4f:c0:ad:7f:
0b:dc:e7:a9:5b:43:94:84:fd:f7:7b:f9:ba:dc:d8:be:87:8d:
bc:d6:35:be:9c:ba:98:46:70:89:a9:5d:bf:8c:d7:2d:d3:55:
95:ae:bc:78:de:18:f7:0f:76:8e:d7:c2:ef:59:ae:1b:3d:36:
a5:e4:b1:79:35:6d:e6:6f:ed:50:b4:2e:2f:3e:3b:0c:b1:2b:
e2:c0:0a:9c
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUXUXJCldMl+ZLe8oAX0I98JFni3UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yNjA2MDYwNjQ0MTRaFw0yNzA2MDUwNjQ5MTRaMDMxMTAvBgNV
BAMTKEU3QzNDNjNFQ0Q0OEFBNjRDMzg1QjYwQUJGODAxQTA5NENDODlCQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZKzqIGY4mMhZcP+05YfzGODdD
jx0coHZd0deuXPru/nA5Q0oYH1h3XQXxcTt8nQC9MEW8m8MAj4CIBD7C/gjFNMfT
R77O5JX4WVE2Umuumr/BQ9pVP1LCBshY02C3F32tCwbwc0pln9cMhqYsfKFbtp24
TT620Vbs8KLLYsJRm1RRTw/ln537DXR0YeKsn2rWMwLVvXr9dLdRBWxjhqsVtk0a
O+8ufDZc+NdrHZxZ5Rf1OpyRh3ChV0DJ54JPdSaoEe+L+um+ij1nbpPOs7JHOKyM
tuIpcevvxNc+cFFzNHL8k5uKqDgwqYtm/DOUetEozt5sySI1LAKb0aA6F7bhAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQU58PGPs1IqmTDhbYKv4AaCUzIm7IwHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTNDExNzEucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACNC9ow
DQYJKoZIhvcNAQELBQADggEBALNEzkPF0XGPtWxbsYZT4XLwz3RF0TwOXSmWI/MI
r0FV4ePGhiXSkhg0tgyYY1D2POn6G8uGbgxMVLdj33btV7zGarvhxbKN/0CKiIBp
rxPWp+FwWG6lNZcBSLWipiCNNV8y8l1FrD8U4TuP0mWnixZfFX2gqQjIm1/oJtvX
j007NHnpwr7ZHfUkysbhc/clXlz03yNe2vhb1aeMhfRps8BU+jTSuAW/cJnhpaNM
vYhnT8Ctfwvc56lbQ5SE/fd7+brc2L6HjbzWNb6cuphGcImpXb+M1y3TVZWuvHje
GPcPdo7Xwu9Zrhs9NqXksXk1beZv7VC0Li8+OwyxK+LACpw=
-----END CERTIFICATE-----
Generated at Sun Jun 7 19:09:40 2026 by rpki-client