Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS400039.roa
File: AS400039.roa (raw, json)
Hash identifier: 6vXOdeypg6rsuqJsRngT+JFL0apL5usfXYGKfpFdLl0=
Subject key identifier: 57:AD:F8:1C:03:C1:60:A1:95:45:69:49:BE:DE:BC:77:07:32:B8:DC
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 7D7139E11B98AB41B60147B2BDFFAFB58BBAA210
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS400039.roa
Signing time: Thu 09 Oct 2025 05:55:08 +0000
ROA not before: Thu 09 Oct 2025 05:50:08 +0000
ROA not after: Thu 08 Oct 2026 05:55:08 +0000
asID: 400039
IP address blocks: 141.11.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:71:39:e1:1b:98:ab:41:b6:01:47:b2:bd:ff:af:b5:8b:ba:a2:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Oct 9 05:50:08 2025 GMT
Not After : Oct 8 05:55:08 2026 GMT
Subject: CN=57ADF81C03C160A195456949BEDEBC770732B8DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ce:af:9f:7c:11:73:9a:20:36:2c:ff:c7:91:
bf:7a:ad:70:f9:55:4e:e6:ef:f1:e2:9a:90:37:65:
be:a5:ec:29:e0:76:7e:fa:c1:f2:76:86:48:f1:b9:
f7:56:1e:5f:c1:51:92:8a:bc:48:db:e9:2c:83:d9:
02:24:96:dd:83:0d:3f:68:12:56:03:1c:70:9c:dd:
f8:ba:2d:ef:05:79:74:99:f3:30:64:54:0c:d8:b2:
36:9d:46:c0:39:0d:1e:c6:04:dd:08:7d:94:2b:65:
8f:43:b1:6b:e1:a8:cc:cc:e1:95:a0:5a:e0:e9:bf:
38:17:41:cb:23:68:e1:1f:d2:e2:43:e6:91:a4:d7:
4f:dd:9c:a1:43:b7:91:24:1d:cd:08:e8:ef:df:b2:
24:ab:fc:70:5a:39:7c:40:6a:ae:8a:49:bd:94:19:
62:d9:08:c4:e6:35:f0:6a:5e:2c:86:fe:a0:ae:6b:
45:5f:38:c9:47:3e:61:06:93:d8:13:56:65:46:93:
16:45:b1:a1:d7:93:f7:48:24:9d:83:38:dd:56:1b:
46:da:c5:7c:8a:8d:36:16:dc:f7:de:0e:bf:7a:1b:
1f:75:71:7d:a5:55:bc:9f:ff:f3:17:38:7c:7f:8c:
08:29:e5:b0:55:b6:60:dc:9f:1e:76:90:d7:89:47:
ad:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:AD:F8:1C:03:C1:60:A1:95:45:69:49:BE:DE:BC:77:07:32:B8:DC
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS400039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.4.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:53:2a:6b:c2:6b:a7:58:ea:a9:f5:98:25:00:c5:7f:7d:77:
63:40:2e:74:a2:79:0d:b5:29:33:56:dd:a7:6a:92:24:e0:6a:
e8:14:e1:cc:e0:02:ee:ca:f0:28:d3:f2:d3:d4:2b:3c:b5:65:
3d:fc:4b:1d:d9:22:06:78:59:53:b6:a0:ee:ed:dd:b8:7a:9e:
a6:b4:52:b8:1a:58:a2:6a:bc:2e:b3:fb:1b:56:82:f8:ef:ac:
20:16:c8:21:cf:7f:0b:87:92:f3:11:e2:e3:67:89:b2:f5:db:
0c:55:50:ad:42:c6:1e:61:a9:79:94:6e:d7:9f:78:ae:49:e4:
e9:f7:d4:1c:ce:f5:19:08:4f:5e:54:7b:d8:78:22:ee:b8:eb:
cf:e6:cf:30:bf:c6:a7:83:93:21:fd:c2:21:63:8e:ee:91:3e:
50:f8:9c:97:9d:df:97:b8:b7:c9:0d:4f:20:3e:3f:cf:9f:cb:
59:d6:7a:76:70:05:5e:30:cd:05:4e:86:d5:b1:ea:f0:a2:1f:
1d:14:2f:7c:f1:f0:2d:77:eb:f1:1b:0d:51:be:9b:57:47:91:
9e:35:e3:aa:cd:76:b5:6a:7c:f8:02:2d:ed:5f:63:2d:25:e8:
3b:ca:4d:03:56:da:48:c9:51:39:8c:28:de:21:3d:de:75:9b:
ce:cc:fc:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:11:01 2025 by rpki-client