Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS141957.roa
File: AS141957.roa (raw, json)
Hash identifier: lJF1BvRCysVFyB9YPoijn4I99kh/urAnokdXf7yuoa0=
Subject key identifier: 89:EC:F3:EA:41:73:D8:F4:07:AD:D8:DB:A7:D7:A9:6A:4B:22:F0:5A
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 1BB5098EFA9D644C267AF586C3A3526AB575B3C8
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS141957.roa
Signing time: Thu 11 Jun 2026 04:42:37 +0000
ROA not before: Thu 11 Jun 2026 04:37:37 +0000
ROA not after: Thu 10 Jun 2027 04:42:37 +0000
asID: 141957
IP address blocks: 141.11.51.0/24 maxlen: 24
141.11.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:b5:09:8e:fa:9d:64:4c:26:7a:f5:86:c3:a3:52:6a:b5:75:b3:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jun 11 04:37:37 2026 GMT
Not After : Jun 10 04:42:37 2027 GMT
Subject: CN=89ECF3EA4173D8F407ADD8DBA7D7A96A4B22F05A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d1:9d:56:6e:01:70:71:d6:80:55:2d:c6:27:
1c:f9:e3:11:b9:c4:c2:1e:57:5d:73:43:47:20:da:
fe:d3:eb:95:c6:17:7c:68:19:28:4d:20:bd:a6:8d:
81:66:ce:a3:54:55:47:08:d0:7a:80:48:46:f1:fa:
36:b6:80:72:d9:9a:42:50:16:1a:87:be:1a:f2:fb:
f7:cc:e7:e7:50:6a:2e:32:58:0b:84:ea:f7:f0:6a:
23:75:5a:e8:ef:6e:12:ab:79:33:83:ad:dc:f5:27:
18:a2:d9:74:76:9b:98:b5:8f:77:b4:51:c8:90:0e:
1f:05:34:9a:1d:f5:80:ab:0e:d4:b8:b9:60:0d:1a:
58:51:ee:0e:8c:fa:60:5a:0f:a1:dd:c5:de:e9:ef:
1e:c2:c0:86:16:86:6c:ed:e8:e4:d5:e8:a1:01:09:
eb:db:3c:d2:3b:2e:42:03:4f:99:e0:07:a4:51:a3:
ce:3f:98:3d:3e:55:96:a8:7f:ea:09:55:49:be:66:
fd:35:53:ba:fd:e7:24:1a:82:38:90:5d:d2:f7:00:
39:e7:af:4c:98:94:ec:6d:41:06:9b:39:ed:40:13:
15:12:0c:43:f3:a1:88:ed:40:65:15:16:45:43:99:
14:3f:e8:b3:9b:e2:b3:e1:b3:fe:42:f0:7e:34:da:
61:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:EC:F3:EA:41:73:D8:F4:07:AD:D8:DB:A7:D7:A9:6A:4B:22:F0:5A
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS141957.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.51.0/24
141.11.137.0/24
Signature Algorithm: sha256WithRSAEncryption
74:a5:db:28:9e:ec:72:33:c9:b1:00:9c:09:5c:64:28:24:8f:
9f:4c:55:cb:8d:40:74:ed:92:11:96:18:c7:e0:7d:f3:9c:eb:
2c:78:6a:36:93:a1:d2:dc:b6:4b:6d:34:56:eb:c1:44:cd:8d:
09:81:e0:0b:a5:fb:3d:0c:05:35:a9:dc:b7:d8:84:0b:b7:e4:
a7:8d:16:11:93:7e:5e:95:d1:e8:69:84:8e:df:51:a3:55:46:
4d:58:02:e4:41:19:23:ba:1f:4a:ff:f0:3d:d9:68:ac:bd:be:
f6:4d:6f:c0:96:b4:5a:50:30:8c:fa:8f:04:6b:09:fd:8b:36:
83:27:69:4e:8a:4e:c1:b8:49:e4:1c:93:80:06:ff:84:7e:42:
c9:57:66:92:c5:38:29:f5:a2:37:26:06:a4:80:21:12:4e:25:
6c:6d:af:91:cb:10:e9:28:30:4e:44:aa:ca:63:5c:68:24:27:
d3:7e:b3:4b:af:6e:c5:36:7e:5a:c6:2c:2b:70:48:d7:18:04:
15:1d:ea:b0:6e:15:89:56:bc:7b:98:86:b0:01:f9:54:d1:0d:
1b:0b:e0:0b:8f:c9:2b:13:b9:62:61:fe:78:cf:a4:13:a7:4e:
db:77:ac:de:a9:51:98:23:47:68:85:58:db:3d:50:25:bd:e3:
51:85:a8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:38:05 2026 by rpki-client