Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS149573.roa
File: AS149573.roa (raw, json)
Hash identifier: IX8LOlKSWdK1+ErMNeY/y/lGWhlaOl+MaxO0hDDLinE=
Subject key identifier: 0D:6F:7D:4E:F3:D5:8E:70:CB:AD:FD:B4:6A:F9:48:CC:69:39:ED:0F
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 5E52A7C6398557236D721FDDC9D76C335C52707E
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS149573.roa
Signing time: Wed 06 May 2026 11:13:41 +0000
ROA not before: Wed 06 May 2026 11:08:41 +0000
ROA not after: Wed 05 May 2027 11:13:41 +0000
asID: 149573
IP address blocks: 141.11.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:52:a7:c6:39:85:57:23:6d:72:1f:dd:c9:d7:6c:33:5c:52:70:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: May 6 11:08:41 2026 GMT
Not After : May 5 11:13:41 2027 GMT
Subject: CN=0D6F7D4EF3D58E70CBADFDB46AF948CC6939ED0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:56:c7:4f:6a:d4:8f:11:e0:4f:a4:1e:5f:02:
75:33:45:f9:68:a4:f7:9c:d7:37:e1:43:ca:36:62:
39:03:d4:41:3f:aa:71:7a:24:20:df:90:26:a9:a1:
a3:c4:c8:cb:20:1f:8b:5b:bc:07:7f:f1:84:32:76:
c9:52:93:e1:fa:83:e7:46:f2:45:2b:bb:f5:0d:0b:
9d:01:22:00:a7:42:a0:c3:61:30:bf:ae:0c:da:a9:
54:40:ec:c3:14:95:eb:7b:ec:a4:ba:69:12:4e:5d:
af:7c:6b:04:2b:69:9a:90:79:4a:a7:a4:13:c7:51:
a0:1a:c3:aa:6b:06:72:a9:44:6c:c5:8d:2b:72:bf:
f7:df:8c:bf:94:41:fa:7a:42:4a:01:a7:20:36:68:
7d:bf:6e:cd:a0:9a:ba:07:83:ef:5c:5d:5d:5e:08:
00:f9:bc:a1:83:14:75:00:ff:6b:a3:5f:e4:3f:8e:
72:91:a3:85:17:c2:4c:87:bb:76:69:3e:f8:c9:d3:
0e:40:2b:20:b1:f9:09:16:95:3d:ea:0d:8b:b8:4f:
f8:0b:18:23:89:dd:f4:32:9f:5e:34:d5:1b:26:8c:
bb:91:ae:20:d4:87:47:b1:3f:b8:fa:b3:72:e9:b9:
b7:8b:7e:79:5b:00:ff:9f:25:6f:1c:8a:4a:6e:e4:
d0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:6F:7D:4E:F3:D5:8E:70:CB:AD:FD:B4:6A:F9:48:CC:69:39:ED:0F
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS149573.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.94.0/24
Signature Algorithm: sha256WithRSAEncryption
61:e5:ee:18:27:79:1d:de:1d:98:11:f0:30:4a:f5:0f:50:bb:
4c:e8:5f:aa:3e:ca:f4:d7:4a:ef:aa:1d:13:2d:a4:18:0c:7f:
cb:d2:09:09:e6:7b:2c:c2:71:c1:8d:8c:81:c2:8e:95:72:76:
28:37:93:dc:d0:09:c8:8d:bf:14:7c:2c:06:51:98:4a:0c:c2:
71:b3:01:96:b5:9c:fe:a2:81:8e:b1:e1:8e:9b:41:c5:55:e3:
6c:7b:13:30:76:65:1d:90:41:e9:8d:35:87:f6:5e:ae:ee:0e:
eb:44:d6:36:58:74:d8:a6:f2:15:44:0b:51:39:38:d5:48:e7:
72:4d:4a:a8:1c:6b:e0:dc:b1:83:6f:09:91:5c:a7:35:3c:04:
4a:61:7e:34:d4:d0:e3:94:84:d2:17:19:02:a9:3d:89:94:29:
36:0f:59:f6:3f:38:81:a0:9a:0c:43:ee:a3:73:52:39:44:5c:
a0:4a:b2:f9:9b:0e:13:62:54:41:b7:bb:ca:e3:88:a2:be:a3:
d0:8b:a3:f0:50:90:41:ee:f3:fb:de:47:fe:ab:6c:ff:9f:7d:
da:0a:3e:96:e5:72:4a:89:51:f1:a0:ae:b9:2c:5c:a9:f9:92:
38:de:64:ff:3f:ce:f5:86:55:3b:60:c2:45:ca:e2:96:0d:cd:
5e:a2:71:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:20:47 2026 by rpki-client