Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS7488.roa
File: AS7488.roa (raw, json)
Hash identifier: 0kAR+4b/j1Vcnv7lbjf59THhPzUXM3RoswnFLJEMM7w=
Subject key identifier: 62:E1:7B:6F:AC:A1:1B:17:CA:AE:4B:67:6B:B7:86:AA:39:EC:55:9C
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 1BD78C9FCEE571D051D4D4536E8CCB0B8BBB6346
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS7488.roa
Signing time: Sat 08 Aug 2026 21:09:31 +0000
ROA not before: Sat 08 Aug 2026 21:04:31 +0000
ROA not after: Sat 07 Aug 2027 21:09:31 +0000
asID: 7488
IP address blocks: 141.11.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 12:33:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:d7:8c:9f:ce:e5:71:d0:51:d4:d4:53:6e:8c:cb:0b:8b:bb:63:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Aug 8 21:04:31 2026 GMT
Not After : Aug 7 21:09:31 2027 GMT
Subject: CN=62E17B6FACA11B17CAAE4B676BB786AA39EC559C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:94:29:81:61:74:77:f6:4b:0a:eb:84:c7:d0:
63:fb:ef:ee:c6:43:da:79:b2:51:de:10:f4:95:08:
27:f2:2d:54:d4:b6:22:d7:26:d6:66:33:5d:fb:1d:
bc:b3:44:b1:5b:b4:e7:2d:74:6f:41:82:6a:0c:52:
be:b4:f1:dc:21:92:1b:d9:fa:db:08:98:b5:50:5a:
dd:e2:37:53:bb:89:54:9d:d3:03:39:0b:27:ed:e4:
ca:b8:a7:b0:4b:9a:85:97:de:9c:c6:88:41:db:be:
45:4b:d7:89:09:8c:3f:20:ce:ba:4b:25:02:bc:52:
12:4e:0b:33:5b:59:07:92:93:bb:ef:4a:66:4f:ac:
92:e5:56:93:05:42:23:b1:90:96:76:1b:29:8c:d6:
4b:a7:6e:01:1e:42:ad:9a:dd:c6:39:16:ad:2b:a0:
4b:e4:46:43:c3:9a:df:f0:41:6b:24:2e:04:e4:9a:
67:20:f6:18:0e:f3:c4:fc:d9:05:f0:a9:fb:9c:ba:
d3:fd:c8:64:09:ff:a1:52:5a:6b:b3:b5:6d:6b:56:
87:9c:66:84:41:4b:21:d7:41:d8:74:b8:03:fc:9a:
1a:0b:13:ea:b8:22:d1:d0:33:0c:55:fe:ec:44:e3:
fd:f0:dd:fd:f3:2e:b9:2e:34:9d:96:47:e2:f2:44:
ec:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:E1:7B:6F:AC:A1:1B:17:CA:AE:4B:67:6B:B7:86:AA:39:EC:55:9C
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS7488.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.50.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:4c:31:0b:82:f2:a5:86:0b:99:f1:ba:b2:cc:3f:ad:3f:ca:
8a:92:80:4d:3f:5f:07:31:8a:6a:44:ab:21:6c:d9:2d:8f:8c:
c6:82:19:1c:fa:b0:10:1d:c7:f2:23:8d:36:7f:a1:b6:7c:f7:
1c:fa:35:72:7a:4f:e9:f6:85:f0:ad:fd:32:01:e7:ed:c7:c4:
2b:91:b3:68:50:83:9d:84:98:76:e3:04:4b:da:0a:75:f2:e0:
23:1b:84:f2:bc:aa:ed:2b:08:4f:f8:67:b1:33:01:b0:5b:b4:
b3:6e:c3:03:ed:57:7e:da:01:9e:aa:9b:91:19:8b:63:9c:2f:
a2:e0:be:97:88:83:b8:29:96:05:93:27:c8:03:37:cc:3e:58:
73:a8:ff:0b:cf:51:b4:4a:2c:af:e4:f8:f8:0d:bf:28:e9:87:
ab:f1:66:ad:d6:9c:1a:78:12:f2:0a:0e:95:9e:0c:30:50:30:
88:1a:bb:e3:c5:fb:8a:01:43:04:37:4b:67:d2:6e:98:c4:17:
0b:ec:79:df:7e:e1:83:27:3e:dc:2b:52:9b:c7:61:3b:14:e0:
d8:6b:93:a8:a3:38:ee:3f:30:23:ea:45:cc:71:ae:d2:76:df:
b1:17:4d:76:36:ef:3c:23:13:b6:ce:ad:45:fd:20:16:69:5c:
77:14:67:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:20:14 2026 by rpki-client