Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS1030.roa
File: AS1030.roa (raw, json)
Hash identifier: iRi22hyEHLRy8RWWK6CTT6Q+oI9H4Z/O4QmBhjjle/g=
Subject key identifier: 1F:40:AC:AA:8D:E0:BF:A2:65:BE:3E:8C:DC:16:85:8A:8F:F6:4A:18
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 7E4D414A6DE719CD65187BCB69AAEA6EC72DDB83
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS1030.roa
Signing time: Tue 01 Sep 2026 16:49:31 +0000
ROA not before: Tue 01 Sep 2026 16:44:31 +0000
ROA not after: Tue 31 Aug 2027 16:49:31 +0000
asID: 1030
IP address blocks: 141.11.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:4d:41:4a:6d:e7:19:cd:65:18:7b:cb:69:aa:ea:6e:c7:2d:db:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Sep 1 16:44:31 2026 GMT
Not After : Aug 31 16:49:31 2027 GMT
Subject: CN=1F40ACAA8DE0BFA265BE3E8CDC16858A8FF64A18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fd:76:a5:b5:7b:e9:54:5b:bd:ee:22:84:98:
cd:0f:a2:c3:e0:9e:69:6d:a6:e7:80:5c:0c:4f:24:
45:64:e8:4c:0a:50:de:ba:ec:cc:f9:e6:e9:ff:ee:
94:1a:db:a5:4a:e4:ea:ea:aa:27:2b:bf:6b:4a:68:
ab:85:53:f5:72:14:f3:cf:55:90:0d:11:28:52:07:
9a:11:ad:8b:10:00:d9:68:d3:22:dc:0a:b2:7c:18:
c4:59:40:64:e9:f7:60:56:23:b9:2d:aa:ba:64:98:
c8:4c:20:46:16:01:c6:b0:bd:00:9c:29:b7:78:fb:
bf:69:c3:9a:1a:66:a8:81:77:4c:46:05:7f:50:8a:
bd:8f:90:5a:3e:78:49:59:00:4d:15:f3:3d:66:c4:
91:8d:b8:a8:7b:95:0b:a2:a0:a4:cb:04:4f:07:52:
55:4c:4a:1c:35:13:15:70:2f:30:9a:9c:83:54:b0:
fe:f5:62:56:af:e6:dc:ed:e4:66:ca:f7:c3:cd:f7:
ab:9e:06:da:49:dc:bd:a5:0f:98:99:15:77:8e:31:
d2:73:85:ea:c4:ba:a5:7f:b9:1f:51:33:c4:78:6c:
01:68:69:2e:c1:fe:5c:b0:4e:dc:85:f1:74:b8:02:
cb:5b:29:98:0e:4b:4d:be:04:06:99:70:db:79:a4:
bf:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:40:AC:AA:8D:E0:BF:A2:65:BE:3E:8C:DC:16:85:8A:8F:F6:4A:18
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS1030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.111.0/24
Signature Algorithm: sha256WithRSAEncryption
94:56:23:eb:eb:86:00:9a:43:b0:60:cf:33:91:87:45:b6:f5:
8e:3d:49:d5:4f:3d:9b:c6:f2:53:e1:94:a5:2f:a6:9b:d7:d8:
08:9f:63:38:59:d2:c9:46:c3:89:8b:15:52:0d:b1:b8:a1:3d:
b8:6a:cd:b8:9b:f8:c6:48:9e:5d:8b:4d:71:9a:3e:fb:98:06:
da:0a:9e:8a:1c:e0:27:cc:6d:ab:33:94:12:50:15:39:24:79:
05:e0:e4:19:69:87:c9:e9:0b:63:cf:28:04:3c:7a:e4:fa:9b:
3e:45:5d:50:bc:5a:bb:69:e7:39:05:ed:01:22:50:8e:29:af:
86:7b:00:12:aa:11:90:c5:c1:2c:73:b4:6a:75:09:0e:b3:d4:
aa:89:75:c4:91:8a:c0:9f:9b:9e:e2:40:18:1d:ac:49:c7:29:
53:88:2f:3f:6b:60:29:79:8c:a2:58:0e:97:6c:ce:dd:5b:a9:
12:20:41:bd:a4:90:82:af:ce:fd:6f:e8:78:fe:9a:5a:10:da:
f5:d8:9b:8d:f0:1b:ba:17:9d:83:3f:31:1e:cb:c2:7c:cf:1e:
4a:a3:4f:a9:b5:f2:ab:be:84:f6:70:92:a9:47:68:44:95:1c:
5d:e2:15:f2:c0:49:8e:38:0b:d6:b5:56:53:75:3e:b8:fe:61:
7e:6c:5f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 08:43:59 2026 by rpki-client