Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS4593.roa
File: AS4593.roa (raw, json)
Hash identifier: 6mKwTbVWLRG9S7Cc8CaiBh0BbBTU9cG2ZWdm8CBLACk=
Subject key identifier: 81:3A:FB:03:C7:B1:96:02:CB:31:4D:50:3B:29:A0:95:2A:97:E8:CA
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 5F38D010B265A3BF6FDA384B04E8A0CB4196B3E0
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS4593.roa
Signing time: Wed 12 Aug 2026 02:29:01 +0000
ROA not before: Wed 12 Aug 2026 02:24:01 +0000
ROA not after: Wed 11 Aug 2027 02:29:01 +0000
asID: 4593
IP address blocks: 141.11.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 12:31:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:38:d0:10:b2:65:a3:bf:6f:da:38:4b:04:e8:a0:cb:41:96:b3:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Aug 12 02:24:01 2026 GMT
Not After : Aug 11 02:29:01 2027 GMT
Subject: CN=813AFB03C7B19602CB314D503B29A0952A97E8CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5e:6b:c8:f2:e1:74:27:de:fa:be:d2:89:d8:
7c:24:37:9a:0b:88:f9:1b:7f:93:28:40:f7:66:5d:
e6:96:26:fc:b3:0a:73:88:21:84:9a:49:63:d2:dc:
b1:18:bf:96:91:f2:bb:0e:44:d4:02:7f:75:8b:48:
09:ef:8d:bc:9c:8c:4e:55:32:45:97:74:45:50:41:
e7:0e:e7:a6:d1:fa:d3:ba:9d:71:10:c1:8f:db:ef:
33:95:07:54:5d:33:5d:a9:5d:55:9a:9c:50:31:09:
9c:c4:42:16:43:e5:22:7c:56:4e:f1:db:ed:df:af:
45:71:74:10:ab:7f:2d:17:66:94:a2:d8:7b:81:92:
e6:40:9d:ce:c8:22:92:ed:80:5f:73:c2:c6:9d:b7:
e9:6c:27:97:a6:73:d4:ac:b5:e9:98:73:94:da:cd:
83:aa:0a:ab:2c:17:26:26:b9:c3:f5:a4:82:75:9f:
97:f6:34:c6:53:c7:35:08:bd:48:6b:3a:f7:b3:17:
9c:3c:df:b7:64:c6:5c:a3:f7:74:fc:0b:1a:77:16:
a4:62:ee:28:53:83:90:35:13:cb:4f:6d:ff:f6:72:
96:68:3a:73:58:66:20:d7:7d:b3:25:00:32:fb:9e:
90:cf:ae:a6:60:4b:f4:fb:b7:83:a0:9b:d3:9f:32:
36:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:3A:FB:03:C7:B1:96:02:CB:31:4D:50:3B:29:A0:95:2A:97:E8:CA
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS4593.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.44.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:9e:f2:0d:98:22:a1:55:d6:1e:40:18:c9:68:d2:cd:9e:5d:
64:98:f9:01:85:b4:79:b5:d5:87:0c:00:05:26:65:08:82:a8:
e8:1c:6f:7d:fb:e5:5c:65:c0:ab:d7:c9:54:01:06:bd:a2:57:
31:bc:3e:e2:a7:7a:a8:26:4d:49:f8:65:65:0d:53:49:0f:92:
69:7c:e2:d6:d7:ae:b8:89:6d:25:8b:f7:47:88:d5:18:b9:78:
4d:22:dc:9e:34:94:79:2e:49:ef:89:5c:98:ea:48:e4:d3:c4:
dc:cb:a4:ad:16:dc:53:3d:75:55:a9:a8:45:a3:f6:46:5f:10:
40:b9:b1:e6:d6:2f:07:d6:d3:93:36:46:77:0f:bc:80:c8:20:
84:c3:77:af:49:e3:f6:42:b4:1f:16:6d:06:6b:b9:f4:2f:34:
4c:17:f6:c4:72:d7:00:50:77:4d:3b:fd:3e:fa:0e:5b:a8:12:
e4:57:91:a3:d4:f1:e5:db:38:10:ef:ab:c8:b9:78:01:4a:fe:
19:cf:31:0c:af:91:d8:66:88:a0:3c:b4:1a:d1:c5:d5:24:cd:
20:f8:0d:e3:8e:8a:f7:fc:d1:ae:2c:86:14:f1:55:bf:37:2b:
f7:38:31:f1:e4:cb:19:c2:02:84:2e:83:0c:cb:8f:63:23:ec:
0a:84:31:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:47:41 2026 by rpki-client