Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS137897.roa
File: AS137897.roa (raw, json)
Hash identifier: wxI/5uqlxdjMtMNr7SDC1oeN9eUg3PMNhfARh3Zd9q8=
Subject key identifier: 57:F4:AE:39:3C:5C:5C:43:29:D7:91:F4:40:22:87:FA:B8:06:5F:93
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 1F881345C12073DD35ABC6E2DA7EF466E067A641
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS137897.roa
Signing time: Sun 19 Oct 2025 06:05:55 +0000
ROA not before: Sun 19 Oct 2025 06:00:55 +0000
ROA not after: Sun 18 Oct 2026 06:05:55 +0000
asID: 137897
IP address blocks: 141.11.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:88:13:45:c1:20:73:dd:35:ab:c6:e2:da:7e:f4:66:e0:67:a6:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Oct 19 06:00:55 2025 GMT
Not After : Oct 18 06:05:55 2026 GMT
Subject: CN=57F4AE393C5C5C4329D791F4402287FAB8065F93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d4:d4:00:22:b1:5a:a1:75:e6:e5:29:92:0c:
f3:51:0d:d4:02:1d:d5:2c:ad:be:50:e9:ef:58:df:
39:a9:73:e7:e0:ea:d2:23:8c:61:b9:f5:a4:11:fc:
2c:1a:59:34:9c:b4:25:55:9f:f9:d9:72:dc:dd:b1:
e2:b1:52:7d:7c:0f:22:2b:a9:4d:03:cd:89:c2:23:
33:c2:bb:8f:bb:12:7f:83:59:ca:4c:f8:1f:26:32:
cb:f7:18:68:03:2f:cf:b8:bc:44:a1:67:da:19:23:
64:9e:8d:c4:87:48:e8:a1:bc:c9:c5:aa:d1:1c:bb:
ca:8e:b8:8b:13:ca:05:7a:a3:db:7f:dc:04:95:68:
97:c8:3b:5c:e0:fc:81:f9:e6:d2:ff:a2:c5:96:42:
34:64:49:d0:a1:d6:70:9c:a9:14:e7:d5:8d:e7:b5:
69:9a:ff:2c:33:b5:f0:b1:62:ad:b1:17:12:59:9f:
77:cd:ba:9a:6f:73:82:d4:18:0b:ac:bc:ea:eb:e7:
d3:50:2d:aa:66:b1:79:b4:54:42:f2:fc:d5:2c:47:
9e:e3:4b:61:81:73:9e:1d:e0:34:cd:32:4a:28:cb:
cc:c8:b3:1c:fa:b3:76:86:c4:fb:28:af:9b:20:a1:
10:fc:14:ad:46:05:78:2e:62:a3:a1:1b:c2:6b:d0:
d5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F4:AE:39:3C:5C:5C:43:29:D7:91:F4:40:22:87:FA:B8:06:5F:93
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS137897.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.199.0/24
Signature Algorithm: sha256WithRSAEncryption
89:df:ea:56:92:1c:fd:d0:20:00:4e:00:dd:4f:c9:5d:c5:4c:
39:b2:2a:b9:17:b3:84:4c:93:ed:e0:d5:42:66:35:0d:73:54:
f3:93:01:d4:e2:c0:5f:44:a2:6b:c3:ac:fe:bd:ca:b4:09:7b:
01:e9:3c:cc:c1:50:de:3f:15:bb:52:5e:b6:5e:6f:8a:e1:59:
78:99:b2:70:9a:4c:d7:c3:5b:9e:1c:bc:32:02:3b:96:64:20:
9c:6f:d9:eb:00:d2:ab:10:86:35:14:58:3f:35:9a:37:ff:42:
03:3f:60:c1:6f:76:da:26:17:db:f6:68:3e:c1:90:36:1f:a2:
95:01:df:0b:eb:93:fc:3c:87:0f:d1:df:b7:83:39:e1:58:21:
3e:ae:0c:4e:93:b5:5d:2e:d8:4e:81:3d:cc:a4:ab:1c:12:0d:
d5:80:c0:67:07:8e:ba:5b:47:e8:ea:be:70:30:28:b8:15:62:
e7:c5:a1:0d:a5:f7:9b:2d:87:f3:49:58:1a:f0:e5:70:28:63:
75:45:4c:ea:41:56:e9:35:ec:cd:df:32:67:9f:72:b8:32:d1:
e9:f3:73:7d:36:40:69:9b:cf:e0:83:af:c6:21:43:bc:f8:eb:
51:12:ef:60:07:68:d8:0d:d5:96:e6:2a:4a:ce:96:0d:5e:16:
bc:8a:a8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:43:02 2025 by rpki-client