Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS53107.roa
File: AS53107.roa (raw, json)
Hash identifier: nqITtgSRLIcEHJQKs48gfuarZhsp4qHdEL3vom619dQ=
Subject key identifier: 83:4D:1C:2B:DF:D4:4F:FF:43:FA:81:EF:6C:72:F1:D8:72:A9:3A:A9
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 346BEBCEECCBE25CA6966DAE4DCAC07D399D7F67
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS53107.roa
Signing time: Fri 04 Sep 2026 05:12:57 +0000
ROA not before: Fri 04 Sep 2026 05:07:57 +0000
ROA not after: Fri 03 Sep 2027 05:12:57 +0000
asID: 53107
IP address blocks: 141.11.72.0/23 maxlen: 24
141.11.128.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 12:33:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:6b:eb:ce:ec:cb:e2:5c:a6:96:6d:ae:4d:ca:c0:7d:39:9d:7f:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Sep 4 05:07:57 2026 GMT
Not After : Sep 3 05:12:57 2027 GMT
Subject: CN=834D1C2BDFD44FFF43FA81EF6C72F1D872A93AA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:52:30:ab:1c:83:b7:54:ae:ac:59:a6:be:70:
c2:30:e0:bf:68:f1:34:c3:ca:7a:6f:a8:cf:43:c1:
a7:14:89:5c:53:25:be:31:c6:e0:cb:f8:c3:f4:a4:
27:02:c6:7a:7e:ce:70:bd:1d:b9:c6:9e:d7:a5:83:
fd:4f:3f:8a:9a:3b:c0:a8:71:c4:d5:45:9c:6c:75:
0e:56:d4:72:34:08:2b:f2:21:00:eb:a6:77:38:fe:
f8:bd:a5:48:89:18:cd:c9:e8:43:78:f6:bb:d2:71:
2a:56:46:f8:c5:91:98:63:4c:65:f0:3f:2d:4a:1d:
4e:09:03:4c:f1:58:09:ca:dd:a3:93:a4:59:92:44:
09:8d:5a:8b:6b:ea:59:1e:3b:17:67:27:f6:9a:e7:
e3:ef:0f:59:03:97:0b:95:89:58:e0:e1:4f:ad:4e:
0e:4e:1a:03:f8:90:25:d1:02:0f:ab:0c:e4:ab:7b:
e0:ce:71:9b:f7:ab:87:1e:5d:db:31:05:b3:94:c5:
f0:9e:8f:e7:2f:b8:16:52:a4:38:a2:66:ae:4a:2f:
d6:0f:19:23:25:af:40:5a:a4:14:b3:9e:e0:b3:84:
c0:c8:1c:ef:cd:dc:ac:cd:75:e2:02:7b:18:9d:b0:
d6:b6:5a:fb:13:5d:c3:b0:4a:4b:5e:40:1e:2b:58:
ca:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:4D:1C:2B:DF:D4:4F:FF:43:FA:81:EF:6C:72:F1:D8:72:A9:3A:A9
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS53107.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.72.0/23
141.11.128.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:1a:5b:02:6b:f8:cf:ad:59:c5:5a:70:56:5f:00:7e:c6:96:
39:95:cb:cb:7f:1a:df:0f:fe:13:06:77:0b:45:29:f2:a9:87:
c3:d5:c0:e9:a3:72:d9:a0:0d:88:40:15:9d:b9:91:76:54:a7:
7f:7c:a1:79:23:15:8e:38:8b:a7:6e:bb:6f:59:01:a3:76:6a:
46:05:9d:42:f0:5e:d5:ca:dc:d8:5c:22:bf:c5:01:26:29:db:
ad:19:d4:e9:af:f3:34:a7:e7:1a:cf:f1:e6:1a:4c:0d:ea:f5:
f4:91:d2:dd:e1:47:2b:91:aa:e3:4a:d8:3f:42:81:1c:8c:15:
b2:7a:cf:af:72:1b:43:1d:86:09:74:c9:fa:93:45:39:15:83:
86:28:a6:fd:5d:e5:34:b4:fe:98:4a:5b:0f:05:14:5a:04:ed:
20:65:a3:b1:0b:c0:b5:10:0c:9c:78:9d:2a:00:3d:1c:24:66:
c3:04:d5:c5:c3:26:f2:65:30:af:2d:47:3c:d9:79:fe:db:3e:
86:a2:88:02:f6:5a:a7:7c:f9:b3:aa:2c:c8:2c:3d:46:a7:be:
e8:3f:a4:13:e6:5d:e6:b4:6c:eb:55:b1:48:0a:e2:1b:e6:71:
ed:63:9f:1b:5e:d7:cc:7d:fe:62:39:c1:71:ea:d0:48:95:96:
c5:d1:95:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:26:50 2026 by rpki-client