Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS53107.roa
File: AS53107.roa (raw, json)
Hash identifier: hJ60f9jlsn9AbYFzFW5/1l4mg7ZxX5Jh0hAHu9XdnYo=
Subject key identifier: 61:74:D1:72:7F:DA:7A:C9:51:BE:12:90:92:90:B0:17:79:AB:04:41
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 50766270E7DD86F8C030BDB69D31F729E77F57B4
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS53107.roa
Signing time: Fri 20 Mar 2026 17:04:25 +0000
ROA not before: Fri 20 Mar 2026 16:59:25 +0000
ROA not after: Fri 19 Mar 2027 17:04:25 +0000
asID: 53107
IP address blocks: 141.11.72.0/23 maxlen: 23
141.11.128.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 24 Mar 2026 16:19:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:76:62:70:e7:dd:86:f8:c0:30:bd:b6:9d:31:f7:29:e7:7f:57:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Mar 20 16:59:25 2026 GMT
Not After : Mar 19 17:04:25 2027 GMT
Subject: CN=6174D1727FDA7AC951BE12909290B01779AB0441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ce:2a:fe:24:96:67:27:73:15:fb:14:62:e8:
5f:65:8b:c9:ff:fe:d9:b3:d4:aa:62:d8:00:ec:7a:
24:2c:5f:17:c6:79:dc:c4:a0:a2:56:15:52:a0:70:
6c:86:63:7e:49:b6:10:aa:e4:43:6c:ad:fa:24:fc:
69:51:f4:94:d7:ad:93:48:55:69:e8:e7:8e:11:8e:
c1:3d:6b:35:09:d5:f8:4c:76:d5:a4:f6:5a:74:d9:
c0:1b:72:ca:38:0f:ce:b1:3a:c0:43:07:03:6b:53:
7b:47:b4:f9:80:89:78:51:96:bb:6d:c4:aa:77:1c:
5b:a0:3b:b4:3b:5f:42:cd:0e:20:1c:ae:4a:80:c9:
c0:cb:6f:94:be:63:8f:9b:87:6c:98:70:17:a8:d4:
50:a7:83:85:a4:d6:c8:95:14:c9:c4:b8:f9:7b:89:
b7:46:b3:f8:f4:64:fc:a8:1e:72:e7:a7:48:71:50:
b9:3e:4d:c7:e6:56:19:4e:82:e5:5e:8b:1d:42:a7:
80:37:d9:ae:48:21:79:f3:d7:e6:07:42:27:03:89:
1b:85:78:d9:a4:05:ec:f3:a0:ac:ad:51:d7:5a:23:
39:05:80:e1:3d:bd:d6:e8:87:43:01:b6:b9:91:d2:
1d:b2:6e:3f:06:6b:af:e5:3c:6c:1c:3c:b9:1e:5e:
58:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:74:D1:72:7F:DA:7A:C9:51:BE:12:90:92:90:B0:17:79:AB:04:41
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS53107.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.72.0/23
141.11.128.0/23
Signature Algorithm: sha256WithRSAEncryption
c2:54:f8:f8:71:76:35:1d:3e:5d:cf:60:0d:59:95:d9:58:30:
19:64:91:91:d4:c2:19:f3:37:c0:be:f4:36:54:ac:81:b7:19:
38:19:f4:32:38:72:b6:a2:34:d1:7e:b3:23:0a:82:6d:fc:49:
7a:6b:fc:5f:ea:4e:fe:c7:f2:d9:85:26:5e:73:55:59:27:5b:
d2:cd:22:f2:be:89:9f:13:c3:e3:69:45:1c:04:47:ca:38:f5:
d8:5f:c9:64:46:06:03:c5:ac:98:db:e3:d8:e6:3b:87:21:b5:
eb:3b:e9:20:a2:36:fc:bc:cc:a5:0d:20:d5:9a:6e:77:f7:b9:
aa:8d:c1:33:b2:6c:69:9c:7a:3d:ef:bb:0f:9a:7d:f5:58:55:
de:29:3f:c5:11:7e:f5:e9:dd:7f:80:07:99:7c:25:a1:53:71:
08:b0:e6:40:9c:75:ef:ae:c8:7c:69:ca:c2:3f:c2:7e:0a:9f:
a8:8d:19:e0:97:f4:f2:2f:a4:35:13:21:2f:2a:de:cc:ab:76:
18:01:71:67:56:c6:5c:26:76:e8:a3:eb:d5:5c:8a:13:9a:1b:
45:7a:11:26:bb:5d:9d:f4:ef:d7:c5:6f:0a:e6:f6:51:ec:ee:
d5:0e:4a:09:b8:40:8b:ef:97:38:c5:b4:61:0b:f4:17:47:49:
3c:e7:68:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 22:56:48 2026 by rpki-client