Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS137897.roa
File: AS137897.roa (raw, json)
Hash identifier: AUc43AFFtsjKqWeZHAikNd6Ze8LkvqXSXfkq1DHe1oo=
Subject key identifier: 95:0A:A7:37:3F:67:5A:D1:BB:4D:95:50:90:58:9F:FB:63:44:06:81
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 21BDBA7D9452F64FDD01EE44EE4B7D3FCFCAEE62
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS137897.roa
Signing time: Sun 20 Sep 2026 06:49:35 +0000
ROA not before: Sun 20 Sep 2026 06:44:35 +0000
ROA not after: Sun 19 Sep 2027 06:49:35 +0000
asID: 137897
IP address blocks: 141.11.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:26:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:bd:ba:7d:94:52:f6:4f:dd:01:ee:44:ee:4b:7d:3f:cf:ca:ee:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Sep 20 06:44:35 2026 GMT
Not After : Sep 19 06:49:35 2027 GMT
Subject: CN=950AA7373F675AD1BB4D955090589FFB63440681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:45:3c:b2:a5:b3:9c:6d:47:4d:64:35:04:35:
3d:79:b8:b4:cc:70:a4:fb:48:14:92:2a:93:cc:22:
ee:e0:b3:65:33:96:49:01:e8:43:ac:21:87:26:76:
fa:24:10:fc:38:d7:f3:06:33:2c:48:ef:73:5f:6f:
88:d0:cf:c8:7d:e6:01:c0:a3:7d:bd:a1:fc:fc:a8:
9a:85:42:72:3b:df:90:a6:a0:7a:3f:79:0f:1c:22:
98:e2:2b:f1:e0:5a:22:c8:68:3a:b6:77:75:67:96:
ac:eb:f6:5c:32:97:5e:e9:14:61:09:b9:9b:79:21:
43:1b:48:57:4d:31:b5:fd:dc:cf:f1:e2:95:17:d0:
b0:a3:14:de:8b:c7:3c:d1:36:47:96:29:9f:eb:fc:
91:28:5b:0f:d0:fe:72:11:00:0d:55:7e:09:59:1a:
66:29:a5:97:bc:e4:e8:1d:7f:d7:48:85:35:a1:03:
3e:d9:85:e1:9e:dc:ff:d1:be:db:98:99:14:3d:9e:
0d:ac:f7:2b:e9:6f:ab:03:d1:8e:92:da:76:43:31:
38:45:1b:b5:4a:f0:cd:de:46:a3:4a:62:11:bd:61:
9e:01:52:d8:87:e3:09:6c:38:cf:b3:4e:62:53:03:
23:23:76:8d:e9:38:21:43:46:34:8d:85:bf:09:20:
d0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:0A:A7:37:3F:67:5A:D1:BB:4D:95:50:90:58:9F:FB:63:44:06:81
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS137897.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.199.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:b3:db:e6:eb:b4:c7:4c:97:39:82:ce:61:3d:38:05:56:4c:
12:ba:45:21:05:5c:19:a6:95:ec:b7:d3:7e:62:73:63:49:c8:
8c:87:20:b0:9b:f6:1e:4c:e7:54:bf:f1:5f:80:a0:0b:43:da:
2a:0c:5e:37:07:85:de:30:d0:fd:8a:c6:5e:37:5f:3c:15:5a:
92:1f:64:f3:a9:80:42:17:4b:8c:04:30:21:ef:58:d6:60:01:
e7:f4:07:f8:7d:f7:4a:77:60:65:48:1a:6b:55:3b:28:68:61:
fb:56:2b:f6:8c:e3:f7:e3:1f:ed:7d:b8:1e:df:cb:d1:27:86:
99:62:28:e7:dd:69:45:a4:50:68:21:62:e2:82:9d:78:96:82:
c8:40:48:7d:53:eb:9e:db:56:c1:68:c0:8c:7b:54:90:37:00:
e0:15:16:c8:77:6a:14:eb:f1:7d:55:7a:51:32:67:e7:80:25:
30:27:e3:26:78:22:ae:5a:8d:6b:4f:13:77:8a:7b:16:48:03:
b7:28:d6:0d:98:e7:53:a3:9d:48:ec:51:93:cf:79:fc:92:10:
a5:22:41:1d:3f:d3:8c:4b:10:3f:68:d2:17:e7:a8:dc:42:af:
a7:a7:ef:b4:ac:ae:de:ba:2f:b9:54:93:f7:35:3f:23:d9:92:
9f:93:ad:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:58:03 2026 by rpki-client