Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS147003.roa
File: AS147003.roa (raw, json)
Hash identifier: nV7f3g5/LBkxGLVYW1/jKwjvEbWd+oiMBWE0Pci25wE=
Subject key identifier: D5:00:39:44:CC:72:A6:F9:FD:AD:6A:C2:41:E8:6F:0B:59:DA:5B:11
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 492351E24AC52EE44BE8F42F49E7A181F2A1AE05
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS147003.roa
Signing time: Wed 10 Jun 2026 13:39:49 +0000
ROA not before: Wed 10 Jun 2026 13:34:49 +0000
ROA not after: Wed 09 Jun 2027 13:39:49 +0000
asID: 147003
IP address blocks: 141.11.212.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:23:51:e2:4a:c5:2e:e4:4b:e8:f4:2f:49:e7:a1:81:f2:a1:ae:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jun 10 13:34:49 2026 GMT
Not After : Jun 9 13:39:49 2027 GMT
Subject: CN=D5003944CC72A6F9FDAD6AC241E86F0B59DA5B11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e7:c9:5d:c9:71:ec:76:51:f4:5e:3b:68:f9:
0a:2d:b5:58:91:59:98:f5:2a:62:fc:dd:26:8e:1f:
5d:6a:4a:43:ed:ad:fc:20:e8:ca:27:7a:be:ff:ed:
c6:a9:f1:59:21:fc:34:15:fb:18:7e:1d:5d:83:11:
90:39:aa:05:e4:1a:34:9e:f2:ef:00:b4:07:ac:02:
7c:15:93:39:93:b5:8a:59:a1:c9:f8:ab:0e:70:cb:
24:67:e9:3d:bf:1a:4e:5e:cb:32:be:02:e5:96:d6:
28:d0:f0:15:ef:c2:f5:59:ba:7a:b0:f0:68:e8:13:
c1:02:c8:94:a1:bf:0b:3f:a9:06:e8:75:52:96:50:
7d:30:04:73:0f:2a:f6:2e:33:56:26:e6:92:92:4f:
a4:f2:73:cd:bc:a9:89:c5:b5:67:7f:43:3a:c8:f1:
c7:98:a9:94:e5:3b:74:34:7b:0f:30:65:2f:8e:b3:
e1:85:f0:99:43:d3:83:0e:1b:7a:45:07:34:25:55:
ee:8a:84:fd:0a:3d:31:4d:e5:ff:2c:9f:18:d0:24:
d7:7e:e5:26:b4:48:79:9a:6e:24:11:fd:b3:14:d9:
d1:56:e3:99:bd:a2:5c:2a:1e:13:3c:89:8b:8a:1c:
bb:3e:ee:90:88:0c:cf:c5:6a:72:6c:fb:03:50:e0:
82:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:00:39:44:CC:72:A6:F9:FD:AD:6A:C2:41:E8:6F:0B:59:DA:5B:11
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS147003.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.212.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:88:b7:e8:d6:0a:48:aa:79:03:f4:a4:76:79:d6:6f:a9:26:
da:a7:03:3d:e7:ac:e2:49:20:67:24:3d:7a:51:4e:2a:a8:01:
37:37:05:f7:5a:6a:0e:30:2f:09:a6:3b:3b:1c:fd:fc:51:31:
18:2d:68:2e:41:cd:c3:5a:4f:bb:b5:33:44:06:3a:68:e0:bc:
44:a7:33:89:dc:2e:93:92:27:3d:45:dc:33:b0:9c:5b:b5:63:
bc:42:63:26:a0:26:dc:36:bb:4a:1b:62:8d:75:88:f3:86:1b:
83:4b:83:54:a4:46:7b:bf:d2:b9:b2:6e:22:db:3a:33:31:f7:
a2:2a:41:5c:fa:64:c5:20:a4:fb:5c:00:a9:9a:69:a0:5f:18:
98:41:48:e9:f2:d9:cc:09:3c:fc:34:ff:94:c0:87:fd:0c:c0:
32:90:86:35:a4:ef:e8:01:03:26:0e:b7:52:36:02:8e:a2:06:
22:1c:8f:c2:a9:9f:0f:7c:74:64:e1:c2:44:ec:0d:59:90:41:
17:c8:6a:bf:dd:7b:05:ba:91:11:04:38:01:db:1e:2f:24:21:
4e:7e:19:85:db:9e:45:c2:66:c3:3f:e3:90:44:2a:92:0d:fa:
32:41:2b:63:ee:c9:cc:0f:4d:f1:85:46:53:d1:ed:77:21:ac:
a6:e1:eb:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:38:09 2026 by rpki-client