Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS151338.roa
File: AS151338.roa (raw, json)
Hash identifier: CfaWUzyF4e0GWxZMVe7W4o3rGEbN32YSACPb7K1qL70=
Subject key identifier: 95:DF:F7:EC:98:D4:A8:CF:B3:1C:58:B6:72:21:3C:87:41:EF:54:5F
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 3413211A1C78A677A5FC5FC86CF9962843C2AA5E
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS151338.roa
Signing time: Tue 23 Jun 2026 00:47:48 +0000
ROA not before: Tue 23 Jun 2026 00:42:48 +0000
ROA not after: Tue 22 Jun 2027 00:47:48 +0000
asID: 151338
IP address blocks: 141.11.132.0/23 maxlen: 24
141.11.238.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 05:46:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:13:21:1a:1c:78:a6:77:a5:fc:5f:c8:6c:f9:96:28:43:c2:aa:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jun 23 00:42:48 2026 GMT
Not After : Jun 22 00:47:48 2027 GMT
Subject: CN=95DFF7EC98D4A8CFB31C58B672213C8741EF545F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8b:d5:15:45:9d:83:be:d1:96:12:a9:ef:da:
0b:c4:74:e3:b3:c7:c5:2a:9f:0a:ab:b5:b0:b6:42:
e8:60:39:dd:83:cd:73:00:20:5a:ca:ac:7a:aa:22:
6a:4e:3c:a0:af:9a:0b:de:f5:af:45:ff:20:0a:65:
4f:e8:1f:1c:6d:92:42:4c:e4:2f:2f:2c:f5:bb:39:
13:df:9d:2a:5a:79:58:da:e2:a2:4d:53:f6:28:39:
2f:53:a7:fb:30:c9:3d:f1:d5:96:fd:98:0a:bb:69:
df:f8:86:35:2f:64:04:eb:16:13:97:1b:b5:66:9e:
5c:48:3e:1e:90:ec:9d:4e:b7:d1:04:54:81:a8:90:
93:20:07:85:95:f7:31:81:25:dc:98:95:bd:c7:60:
78:4e:b7:64:19:76:63:59:99:ae:2f:8c:71:6d:67:
3c:e7:77:f7:f0:20:9e:75:1e:9b:74:f6:49:5f:54:
c2:2c:a6:d0:55:47:ab:30:65:da:ea:0d:52:72:55:
76:45:c1:2e:90:a3:de:d2:4d:55:12:20:0f:f2:15:
2f:42:6c:1d:cc:c2:6e:f2:d0:d3:3d:e2:c2:d8:d6:
96:39:71:83:0c:17:b8:81:fb:a2:2d:b2:63:68:42:
72:24:53:fb:d7:e0:34:2a:64:c6:51:2c:8f:69:bd:
7a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:DF:F7:EC:98:D4:A8:CF:B3:1C:58:B6:72:21:3C:87:41:EF:54:5F
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS151338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.132.0/23
141.11.238.0/23
Signature Algorithm: sha256WithRSAEncryption
b7:3e:42:11:ca:40:f7:26:79:c9:79:36:1f:41:0e:97:9c:99:
9a:e3:64:b2:d7:45:b5:dc:55:5f:63:ea:1e:51:cf:96:b1:6d:
4b:3c:74:ae:44:b1:e5:fc:ee:7b:f4:65:87:50:c1:8e:c7:80:
47:9a:71:e6:77:ef:d1:27:c2:be:aa:4e:f6:f3:e0:a3:78:76:
65:8f:d9:59:ed:54:62:94:b6:fb:ad:dc:16:38:33:3d:7f:f5:
4a:70:3f:9f:4c:65:ea:ff:1c:5e:ba:0c:40:d5:48:46:f8:7a:
a3:4c:14:f0:c3:a6:86:d4:c1:a2:47:e4:06:4d:b6:8f:39:38:
29:0a:0e:1b:32:2d:5f:d3:30:9f:5d:71:25:f6:45:5b:22:50:
17:45:36:27:84:3a:5c:dd:e1:2d:05:b8:c6:ad:85:8b:ae:ab:
a8:fe:b5:38:e4:e7:5c:7e:eb:3e:ad:28:11:54:5f:58:1f:c7:
0c:ea:7b:56:65:c6:47:ba:4a:f7:8f:d4:c5:29:6a:da:4f:51:
17:e6:e5:59:97:02:da:52:7c:0f:e5:05:81:9b:a4:75:30:a6:
f4:eb:4e:55:bc:a2:8d:96:8e:8a:7e:3e:7d:29:8d:0f:7f:9b:
df:6b:30:98:99:aa:23:96:e4:da:e0:44:1c:1c:16:13:bd:14:
5d:ac:09:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:40:01 2026 by rpki-client