Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS147281.roa
File: AS147281.roa (raw, json)
Hash identifier: Z6TFR5DlgLi48gG/mxRkx+UcsqWmURkUvagzkRlJEdE=
Subject key identifier: 59:FC:19:A7:4C:7E:CF:3B:34:50:73:1C:14:65:2C:40:6C:9C:E2:F0
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 16D2D7ED1F8A5967928B41D842E4A4003B569A4B
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS147281.roa
Signing time: Tue 27 Oct 2026 14:18:13 +0000
ROA not before: Tue 27 Oct 2026 14:13:13 +0000
ROA not after: Tue 26 Oct 2027 14:18:13 +0000
asID: 147281
IP address blocks: 141.11.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 07:34:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:d2:d7:ed:1f:8a:59:67:92:8b:41:d8:42:e4:a4:00:3b:56:9a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Oct 27 14:13:13 2026 GMT
Not After : Oct 26 14:18:13 2027 GMT
Subject: CN=59FC19A74C7ECF3B3450731C14652C406C9CE2F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b6:5b:73:ce:78:6b:e4:57:8e:4c:20:7f:d8:
52:9f:32:f9:a8:e7:ea:14:81:19:3b:57:d7:d7:15:
92:b5:8f:3f:68:30:47:fe:19:fb:56:aa:49:78:8d:
27:31:a7:ec:08:fd:73:45:9a:75:3c:09:2f:51:ea:
0b:62:54:29:f2:fd:18:c7:c3:9f:83:21:06:da:72:
8e:d6:18:89:fe:99:5a:b6:ce:0e:3e:71:3a:a0:7e:
0a:86:77:ac:03:61:41:33:48:13:be:98:05:7f:6c:
2c:be:f9:83:0e:34:19:90:38:cd:1e:ce:03:ec:01:
b5:5f:c0:ef:c3:d9:07:ae:0a:6f:a6:77:03:dd:91:
79:4d:ff:e5:d1:f8:fe:a8:74:1b:05:f4:2b:27:4b:
8a:d3:4c:8e:7f:a5:10:86:11:40:62:32:de:09:3e:
c8:b2:9b:f8:d2:34:6b:2c:88:bc:88:a1:5b:5f:7d:
55:be:69:0a:10:96:c6:09:4f:4c:e9:b3:14:dd:8f:
cf:f2:39:ab:df:0e:53:5b:ce:04:27:c9:35:27:b1:
61:6a:1f:d2:f2:f0:f9:8a:44:be:60:21:08:13:8a:
53:cf:d2:cc:bc:19:7d:b5:69:b1:bc:d4:90:cb:50:
ea:b3:b0:b3:b6:4e:aa:1c:df:c0:54:43:57:02:b3:
08:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:FC:19:A7:4C:7E:CF:3B:34:50:73:1C:14:65:2C:40:6C:9C:E2:F0
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS147281.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.51.0/24
Signature Algorithm: sha256WithRSAEncryption
31:9b:02:a8:d1:f4:8c:63:96:c7:9f:a3:72:80:e0:6c:52:4f:
c5:2a:a8:dd:e9:46:a3:17:b5:65:db:82:f2:3c:ff:ad:ce:1e:
9d:59:53:31:c0:74:af:0b:0a:7a:49:01:e3:3e:07:7f:d3:d5:
af:b3:64:dc:f9:8a:5f:74:ad:91:35:8e:30:43:50:45:4e:82:
8c:af:c6:74:67:5b:9b:db:2a:4f:5c:79:83:fd:1e:e8:7c:4f:
dd:ca:77:d4:9a:bc:6e:24:19:f4:c6:73:78:f7:42:cb:77:9e:
0b:ef:42:71:10:03:fe:27:d1:7b:57:6e:bc:0b:93:ba:b3:41:
e0:e0:91:a2:b0:94:64:7e:e3:f4:2b:26:59:af:cd:6c:b9:d7:
16:73:47:8e:5c:a8:74:01:8c:1b:fb:da:71:86:fe:2a:c1:a6:
f2:44:ed:9f:c9:cb:42:80:68:34:35:e6:ea:a9:2c:91:5a:03:
a7:1d:a6:06:9d:ee:27:45:f6:26:f4:04:23:ae:0e:46:d5:93:
da:a5:43:32:07:e8:26:95:b8:82:08:da:75:82:bc:c1:46:5a:
19:af:c0:d9:b9:12:34:77:b1:5c:c8:ff:eb:6a:f5:96:6b:38:
20:09:5c:2b:72:d4:6a:79:25:4d:30:41:7e:63:46:34:bc:49:
b8:e3:02:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 00:49:01 2026 by rpki-client