Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS141892.roa
File: AS141892.roa (raw, json)
Hash identifier: XXWw/jA19IPC6VXbqZPTN1L/97SWKpHQejY3cPl8geM=
Subject key identifier: 52:52:69:BA:8F:AF:43:70:23:8C:D5:11:C1:89:F4:B2:18:15:C1:53
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 6635290984B32E0D46E5984169621E9213B95D0B
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS141892.roa
Signing time: Fri 25 Jul 2025 08:07:45 +0000
ROA not before: Fri 25 Jul 2025 08:02:45 +0000
ROA not after: Fri 24 Jul 2026 08:07:45 +0000
asID: 141892
IP address blocks: 2a0f:85c1:3c6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:35:29:09:84:b3:2e:0d:46:e5:98:41:69:62:1e:92:13:b9:5d:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 25 08:02:45 2025 GMT
Not After : Jul 24 08:07:45 2026 GMT
Subject: CN=525269BA8FAF4370238CD511C189F4B21815C153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:dd:f2:22:91:28:4e:15:08:76:64:38:a5:39:
85:7c:55:97:e7:4a:bc:30:77:0c:79:0c:a7:79:79:
53:18:a9:fd:e7:c9:41:9f:e0:0d:bb:fc:2e:8c:c3:
11:6b:bf:6d:3c:8f:6f:f1:51:93:67:16:c0:62:87:
58:f7:b2:49:3d:c9:13:46:55:16:8b:5b:10:6a:8e:
b6:4d:a7:26:6b:b4:f1:63:80:d0:20:24:12:78:41:
a1:99:70:c4:00:24:69:25:1f:ff:fe:f4:be:f1:60:
d0:1f:c9:6b:c9:3d:5e:a9:b7:d2:b0:6e:e9:da:66:
da:8a:b4:38:11:b9:7a:ca:4b:2a:cd:40:1e:89:e9:
9a:dd:ac:1a:c0:b5:0f:ce:22:48:f5:34:5a:d3:15:
43:78:b7:25:ce:f8:8d:98:67:bc:b5:1c:6b:63:59:
21:b7:75:da:0a:64:5d:21:9a:e2:fc:be:b0:33:fc:
46:10:7f:20:3a:10:44:24:69:62:a7:a1:f2:36:9d:
6e:ad:74:33:16:11:88:0f:38:14:1c:49:61:f6:db:
6d:34:a9:04:1e:0e:4c:32:89:17:b3:f4:dd:d3:9d:
ef:21:91:5e:3a:82:e9:80:0b:2e:a9:28:85:71:61:
84:1d:50:75:4d:f7:a8:48:b1:8c:de:32:07:15:cb:
e2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:52:69:BA:8F:AF:43:70:23:8C:D5:11:C1:89:F4:B2:18:15:C1:53
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS141892.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3c6::/48
Signature Algorithm: sha256WithRSAEncryption
3d:b9:a1:dc:99:88:fe:6f:d7:48:ad:2d:58:a5:ca:e7:3f:a0:
41:e5:2f:5c:d0:40:41:f8:76:49:f5:c7:ba:24:4d:11:c0:77:
51:2c:fe:22:56:61:b5:98:16:e1:ea:ee:34:3a:42:ff:45:bd:
68:89:ce:8e:bf:2f:59:9f:44:f8:11:fb:c1:84:e0:45:26:54:
1f:3a:0f:42:7a:c5:51:94:79:9a:df:98:ee:ba:98:30:99:80:
a7:e2:e1:17:45:e1:e8:43:8c:19:45:1b:08:29:70:08:74:e6:
7e:71:fb:d7:a5:87:9f:34:05:a6:0e:04:5a:21:58:30:6c:8f:
60:b3:81:48:5e:ca:43:f6:f7:19:a9:2e:f7:e8:cd:45:4d:87:
c0:ba:29:8d:98:c4:40:f8:6d:c4:fc:bf:a5:58:87:47:0a:52:
53:d9:a6:cf:83:44:fe:04:84:6f:8a:92:db:4f:9d:df:d7:a1:
d8:83:1f:39:79:f5:8a:97:71:82:02:de:b6:9e:0e:15:87:82:
c9:97:f8:67:63:80:e3:ed:6f:99:fc:85:77:52:e8:5a:3e:2c:
65:95:3e:9d:d3:2d:40:8c:84:28:18:42:73:6a:f0:b6:c1:c3:
38:e2:b2:24:08:ca:af:92:8e:82:ad:81:60:00:fd:0d:0f:c6:
60:4d:6a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:54:36 2025 by rpki-client