Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS397423.roa
File: AS397423.roa (raw, json)
Hash identifier: v+n+Pc4Rgb69FHHbVntlVw+ujsRaIEW+FCOSYlwHjGo=
Subject key identifier: B2:21:77:D2:65:22:0D:47:E2:81:55:3B:B8:9A:DD:F9:FA:AE:45:1F
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 2571A7D04FE1EF515673A0A91E611168E6E531BA
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS397423.roa
Signing time: Thu 19 Mar 2026 03:28:55 +0000
ROA not before: Thu 19 Mar 2026 03:23:55 +0000
ROA not after: Thu 18 Mar 2027 03:28:55 +0000
asID: 397423
IP address blocks: 141.11.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:71:a7:d0:4f:e1:ef:51:56:73:a0:a9:1e:61:11:68:e6:e5:31:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Mar 19 03:23:55 2026 GMT
Not After : Mar 18 03:28:55 2027 GMT
Subject: CN=B22177D265220D47E281553BB89ADDF9FAAE451F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9e:7f:c7:ce:22:3f:5a:ce:de:32:8c:7c:84:
79:f3:a7:31:0b:47:9d:94:d9:4e:53:4b:3b:d8:b7:
55:9e:5f:57:b5:6d:e3:be:27:59:23:68:32:e0:b4:
d0:23:ca:c5:79:85:8c:d0:70:b5:59:2e:53:2c:2a:
fd:12:a7:79:39:8d:ba:42:e9:08:67:8c:84:42:e0:
99:3e:43:a3:38:1d:38:4a:ea:ed:65:e5:f3:5f:65:
4d:e6:f1:51:dc:bd:9b:43:b5:54:0d:47:38:92:01:
5a:00:87:68:6d:8d:47:b3:cf:7b:0f:22:25:32:1e:
7e:76:41:9f:9b:75:b7:e1:b1:05:72:e8:62:ca:e3:
9f:22:88:d9:c1:dd:11:e0:bc:14:c9:a6:d8:b6:ba:
12:52:0e:9b:42:ae:d2:73:f8:8c:44:37:fc:f8:8f:
76:18:3e:1c:be:d5:06:5e:af:48:47:51:83:38:a7:
02:75:17:fe:31:ef:fc:fe:fd:50:af:ec:6e:e7:5a:
a8:07:f1:a1:d0:f8:17:26:36:ba:a7:96:36:67:07:
62:4e:5f:9c:d9:b5:85:8a:2d:2d:42:90:2b:26:0c:
52:ea:fa:ad:5d:60:cb:c0:d5:e9:61:e1:f1:2a:3c:
66:34:c3:cb:0b:8c:05:36:a0:95:f0:5e:76:db:20:
f7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:21:77:D2:65:22:0D:47:E2:81:55:3B:B8:9A:DD:F9:FA:AE:45:1F
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS397423.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.247.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:6d:f7:c3:35:b9:d1:13:1f:0c:ad:a8:fc:72:33:b9:cd:98:
87:c0:e4:52:84:5e:9c:d5:ba:53:8f:1e:7a:5a:d0:3f:fe:57:
db:8b:d3:6a:84:c3:3a:d1:64:75:8b:0f:17:e4:6b:8e:86:2a:
42:02:52:97:3c:0a:1f:16:0a:6c:ef:b7:14:13:f1:35:89:5c:
0a:d0:1f:79:f7:83:3f:25:fe:f0:93:34:3d:56:c6:47:df:59:
fa:41:bb:2e:67:c0:83:36:19:06:f9:ac:5b:6f:62:fe:b1:93:
d5:27:42:1a:0b:4d:32:06:bb:98:41:ff:14:1e:37:33:70:82:
9b:d5:bd:ec:57:a5:20:5b:d1:6d:e7:f0:af:87:ea:c4:af:e6:
f7:59:51:60:35:3e:4e:98:63:a7:a5:7f:65:35:c3:57:1b:62:
8d:79:ec:a2:e6:45:86:70:0e:16:d6:1d:f4:ce:33:c9:c6:97:
d5:78:4f:cb:f7:c9:2a:4d:fc:70:39:86:e9:f5:5c:ab:1d:a5:
14:17:0c:36:c7:94:84:a6:3f:d3:22:01:fe:17:47:e9:21:e2:
52:c3:69:79:56:db:18:a3:60:bb:d9:c3:0d:e8:61:32:8a:ed:
b1:72:9c:10:3b:49:5d:34:bf:2d:e1:14:ee:65:f5:f1:91:e2:
ed:7b:06:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:59:54 2026 by rpki-client