Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS142111.roa
File: AS142111.roa (raw, json)
Hash identifier: lfFYYRpLRdFb0M+HcaNHGrr3/XTnpdaDuZS8wwVVxYY=
Subject key identifier: D6:AB:47:B0:D6:9F:82:A4:92:E9:67:7A:95:6A:73:3E:76:6C:22:52
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 5B6F6230FD81B0C8FC1AF1DB105AA7777D8AAFF9
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS142111.roa
Signing time: Mon 01 Jun 2026 21:47:22 +0000
ROA not before: Mon 01 Jun 2026 21:42:22 +0000
ROA not after: Mon 31 May 2027 21:47:22 +0000
asID: 142111
IP address blocks: 141.11.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:6f:62:30:fd:81:b0:c8:fc:1a:f1:db:10:5a:a7:77:7d:8a:af:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jun 1 21:42:22 2026 GMT
Not After : May 31 21:47:22 2027 GMT
Subject: CN=D6AB47B0D69F82A492E9677A956A733E766C2252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:46:9c:7b:9e:ed:b7:84:82:b5:82:d0:3c:92:
c1:25:88:4e:c7:df:14:e0:a8:69:7d:04:0d:bb:d6:
02:1b:a0:26:ff:d5:99:e6:0f:68:0a:a5:33:64:3b:
71:a2:5c:11:4a:67:3d:ce:f4:08:f8:d4:98:1b:2b:
74:a9:c8:bc:03:cb:04:d1:b1:23:e3:ca:42:c6:7b:
43:ed:87:46:74:8a:44:94:f8:9d:53:99:93:23:ab:
c7:4c:73:4b:da:29:ee:d8:e6:a8:b6:36:bd:fb:c5:
9f:e8:8e:3c:58:7c:e1:8a:2a:4e:29:7a:74:16:9e:
9c:c8:85:1c:06:49:fa:7b:05:cb:7f:7f:ef:3f:66:
9e:68:c8:ca:c0:70:b0:2e:f4:ae:69:0b:38:a8:65:
94:e3:a8:af:2b:83:78:a2:25:29:90:9c:0e:c7:53:
9c:be:2c:58:cc:ad:2f:41:e6:ef:7b:12:fd:ef:e8:
5f:fb:b7:25:6a:70:b8:96:17:35:97:6a:a5:7d:9e:
4b:72:c1:32:ca:bf:3f:72:74:f2:53:55:e8:16:e5:
64:50:79:e8:f6:bb:ee:47:8f:1c:f4:61:26:5d:6e:
37:24:b6:f9:86:63:3e:6d:29:23:7d:43:a8:04:fc:
fe:aa:68:c5:28:d8:ab:32:b1:5b:e6:01:76:de:cb:
af:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:AB:47:B0:D6:9F:82:A4:92:E9:67:7A:95:6A:73:3E:76:6C:22:52
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS142111.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.122.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:80:72:18:1b:78:8c:d5:74:77:23:62:34:13:d2:80:f6:01:
c1:22:c6:22:31:e3:33:b1:46:82:8d:f1:9f:90:f1:bc:17:e1:
76:ef:84:12:a7:84:26:fa:c0:bb:d4:81:04:7e:99:19:f1:fd:
c3:8c:8a:b4:c2:e6:5f:89:95:23:b3:7c:27:99:98:d5:62:ca:
c4:e5:79:7c:2f:67:eb:61:f0:cf:10:d4:a1:16:52:f7:5b:29:
6a:9b:14:15:06:42:67:a7:c9:c6:e3:6a:12:65:63:12:88:8c:
21:0c:e1:8d:58:5e:f9:ee:d6:13:6b:23:77:59:54:d4:39:41:
ba:44:3f:a8:da:5f:76:f6:d2:4e:59:ea:cd:48:b5:98:17:d4:
04:7e:28:f7:b0:01:5a:f0:9e:3a:3d:d3:4c:17:10:c6:7e:0d:
2f:a3:0f:7a:00:3f:b0:c7:a0:c8:9a:eb:dc:97:ab:42:69:ba:
81:1d:35:9e:e3:0a:1e:58:46:d8:a2:b8:0f:b1:d6:f4:c9:4b:
70:02:b9:b3:18:2b:22:4e:9d:fd:b2:7a:62:d8:b5:20:04:bd:
55:a2:3f:d5:bf:10:32:bd:c5:e6:bb:8e:4d:ce:0d:90:95:ef:
28:d4:6a:d0:1c:c8:5e:75:38:dd:b7:40:b6:0c:06:c0:20:83:
44:2b:33:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:43:09 2026 by rpki-client