Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS210046.roa
File: AS210046.roa (raw, json)
Hash identifier: 1nv8VkUTri38hnORiwDVsUhjKsiSZy3eG6Ayk/Qoenk=
Subject key identifier: 9D:4E:A4:0E:F5:1F:FC:61:3B:E3:34:B6:A7:A8:2D:49:25:21:50:88
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 51B4428ADF3455788CEF779682FE198A3BF29C57
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS210046.roa
Signing time: Fri 08 May 2026 19:45:18 +0000
ROA not before: Fri 08 May 2026 19:40:18 +0000
ROA not after: Fri 07 May 2027 19:45:18 +0000
asID: 210046
IP address blocks: 141.11.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:b4:42:8a:df:34:55:78:8c:ef:77:96:82:fe:19:8a:3b:f2:9c:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: May 8 19:40:18 2026 GMT
Not After : May 7 19:45:18 2027 GMT
Subject: CN=9D4EA40EF51FFC613BE334B6A7A82D4925215088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a5:e8:7d:51:01:bb:82:79:42:87:3f:28:65:
a7:7d:24:d4:d1:cd:f1:ee:ca:e8:2f:fb:f9:a0:06:
2f:f1:0a:94:ce:4c:7a:6e:eb:07:d0:7d:59:77:22:
cc:9f:88:db:10:8a:dc:4c:43:a6:4f:47:8a:e4:2e:
b5:b1:73:28:59:5a:5f:71:b2:9d:82:3d:f6:70:19:
14:5a:9a:f1:89:6b:37:d2:d5:d0:41:89:e7:ff:be:
bc:08:43:88:5a:cb:7b:93:ee:f5:10:b5:6e:89:45:
9e:6e:4a:16:1e:9f:58:e3:48:80:2f:59:d4:8a:62:
a7:56:42:10:d8:3b:9b:c7:b5:cc:2e:34:a7:9d:e2:
39:36:0d:1f:20:1a:85:4d:07:4d:96:2b:21:bf:90:
a8:0b:10:ba:93:1d:18:78:79:36:9f:aa:7e:35:fe:
98:90:32:6c:83:eb:1e:72:f3:17:b5:f6:72:4a:57:
60:2f:42:a2:f8:1e:10:d5:83:c8:74:44:d1:c7:55:
98:89:16:ca:9f:6b:c1:00:0c:8b:5e:52:e9:86:a3:
a3:af:01:6e:55:4b:93:2f:40:ea:b8:21:37:5c:96:
7c:1a:41:a7:90:b6:ab:0d:6e:d6:ec:1e:a0:24:78:
cc:da:ae:77:ab:68:47:8e:bb:aa:ff:95:5b:d3:13:
f2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:4E:A4:0E:F5:1F:FC:61:3B:E3:34:B6:A7:A8:2D:49:25:21:50:88
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS210046.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.53.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:83:dd:0a:25:d9:17:80:25:f3:0b:ff:66:d1:de:00:dc:2d:
1f:f4:c3:b8:8a:c1:58:c9:f6:2a:3f:40:a3:d8:7d:10:8a:bb:
58:dd:1f:87:f5:17:08:8f:64:dd:87:53:73:1e:89:b1:d5:66:
7a:71:19:b2:4d:eb:d1:51:57:ad:73:d6:f3:7f:df:8a:57:3d:
80:33:41:52:4b:5b:b0:2f:6a:54:b3:71:7a:2f:be:25:2c:ce:
47:2f:13:92:af:e0:d7:6c:a6:90:f7:fe:59:54:85:75:69:e4:
da:05:1a:7c:18:ab:8b:0a:4c:1c:0e:ae:3a:6c:81:ee:b8:03:
2b:30:f8:63:5f:41:b9:31:b5:f9:f8:30:de:96:ad:c2:35:99:
21:b3:99:50:e7:a1:2e:c2:9c:ff:c4:28:49:c9:88:e7:57:d3:
75:f3:f8:78:13:67:fb:a4:ba:7c:e7:e7:e2:30:05:e9:df:f7:
6e:c0:83:dd:0b:e0:9b:f2:14:d9:cf:98:d8:88:f1:33:35:35:
27:5f:7f:96:58:8f:62:c0:d3:36:23:6a:c0:50:da:e1:03:7e:
86:d4:26:f1:36:3b:57:92:bf:0f:04:20:1b:dd:fb:0a:66:bd:
d7:dd:58:2d:5c:8b:35:9c:db:aa:d0:02:7c:1d:35:7f:ff:ba:
47:51:50:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:42:36 2026 by rpki-client