Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS402215.roa
File: AS402215.roa (raw, json)
Hash identifier: 9drCKMfUxMs5+KK3+02U7WgC3Acy6wCq6CcOPJEEUmM=
Subject key identifier: D3:D1:53:F1:0D:C9:14:A9:73:32:53:60:88:89:A7:CC:DD:DF:C3:4C
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 45B498A3F3D9FCC37B6812F67F2C13DBC47CF963
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS402215.roa
Signing time: Sat 02 May 2026 16:53:29 +0000
ROA not before: Sat 02 May 2026 16:48:29 +0000
ROA not after: Sat 01 May 2027 16:53:29 +0000
asID: 402215
IP address blocks: 141.11.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 08:58:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:b4:98:a3:f3:d9:fc:c3:7b:68:12:f6:7f:2c:13:db:c4:7c:f9:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: May 2 16:48:29 2026 GMT
Not After : May 1 16:53:29 2027 GMT
Subject: CN=D3D153F10DC914A9733253608889A7CCDDDFC34C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4b:b0:5d:97:aa:59:47:d2:a7:55:b7:5b:8f:
34:a0:0f:41:6a:a3:e6:6d:b4:41:df:0f:5f:8d:6d:
83:d5:46:3b:04:f8:68:08:78:41:1d:f2:47:12:5b:
57:2a:6a:ac:e7:ba:73:cf:a4:c8:c4:b4:32:e5:ee:
c8:55:63:9a:78:b8:83:09:a7:37:a4:e2:fe:6b:1d:
6e:1e:16:e4:a1:ba:df:37:a8:d3:54:5c:3e:65:62:
e0:5a:17:23:2e:27:87:42:e2:3b:1e:53:01:8e:79:
f5:6f:4b:cf:b6:ff:d2:76:ab:1d:bc:41:49:5c:e1:
77:db:e0:7e:c1:eb:9b:23:92:3d:dc:8e:9f:33:02:
80:10:b9:2d:65:d6:fb:58:96:4a:9d:4c:e9:93:10:
6e:f7:70:cb:db:60:d9:20:3f:d0:51:8a:27:47:46:
88:19:68:bc:52:74:af:10:e4:8e:82:44:7a:19:28:
f8:97:d4:ef:bd:e2:20:bb:50:f6:c2:84:ed:65:72:
42:f8:16:65:50:8f:3f:d3:2c:a4:65:7f:67:31:6e:
2f:a5:80:8c:5c:8c:4b:09:3e:63:1f:30:66:f9:aa:
3d:fe:57:f2:22:fd:12:fe:4b:de:5a:48:e3:86:08:
db:4a:f2:41:09:c0:6c:d9:00:07:f9:1c:b0:ab:3d:
fb:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D1:53:F1:0D:C9:14:A9:73:32:53:60:88:89:A7:CC:DD:DF:C3:4C
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS402215.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.37.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:2f:d2:24:04:cb:8a:ec:e2:2f:ee:f0:55:fe:d7:d7:02:27:
be:ce:3a:c1:d2:8e:82:ad:6f:f2:1c:6d:d0:c7:b5:eb:7e:a5:
d1:4c:aa:23:d9:bf:3a:cf:32:5b:8f:ce:f1:64:bf:b1:a7:9c:
fc:6b:4a:56:d0:68:34:7a:28:8a:51:b1:1f:b0:3d:0a:5d:d4:
f9:f3:1b:f0:70:b0:c7:74:ae:a1:bb:3d:23:4b:ed:da:2b:73:
e1:28:ff:24:00:13:42:be:b1:40:d9:7e:ab:c3:00:72:cc:0e:
e8:16:4c:0d:84:ca:2e:1a:a2:4c:73:d6:6d:26:c6:3e:87:a2:
98:88:db:70:ac:36:bd:1b:4e:ec:ad:9d:4f:43:c2:a4:71:bf:
76:c4:2a:6a:3d:7a:62:44:e4:31:a3:e8:c2:f5:4c:7d:12:e1:
19:a9:63:f7:f4:b7:bc:a1:3c:ea:4d:5f:24:96:14:25:b8:b5:
2a:9f:95:59:4e:35:0e:74:53:31:3e:aa:07:50:28:81:75:b5:
ed:11:d1:30:ba:5d:43:e8:35:ae:e6:60:3e:cd:af:ea:64:11:
f3:fa:d6:51:83:81:f8:78:4d:23:bb:9e:9c:8d:d2:65:c9:15:
cb:98:9f:d6:82:03:bf:d8:92:7f:31:ad:9a:09:0b:d0:1a:a6:
44:19:f4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:35:12 2026 by rpki-client