Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS275714.roa
File: AS275714.roa (raw, json)
Hash identifier: HalRaLMYbJZsrN5S7CtCWi+32b4nqI+89/AwBxGsa+A=
Subject key identifier: 42:30:9E:FC:F5:53:DF:8E:5C:94:69:9A:80:19:26:1F:3A:A7:A7:EB
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 37D815C817DFA666F5660C299F782F6C451B85D5
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS275714.roa
Signing time: Mon 30 Mar 2026 10:24:53 +0000
ROA not before: Mon 30 Mar 2026 10:19:53 +0000
ROA not after: Mon 29 Mar 2027 10:24:53 +0000
asID: 275714
IP address blocks: 141.11.72.0/23 maxlen: 24
141.11.128.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:d8:15:c8:17:df:a6:66:f5:66:0c:29:9f:78:2f:6c:45:1b:85:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Mar 30 10:19:53 2026 GMT
Not After : Mar 29 10:24:53 2027 GMT
Subject: CN=42309EFCF553DF8E5C94699A8019261F3AA7A7EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2c:ac:dc:12:d0:5a:b1:ae:b3:c7:32:34:fd:
67:62:39:8b:d6:f3:1b:e3:34:02:6f:55:ee:61:0c:
f6:a4:4d:b1:dc:77:78:a0:dc:db:1f:74:e7:04:10:
b9:79:0f:9c:c1:ee:50:b2:5e:8b:2a:8b:63:d9:98:
22:96:c1:ca:62:f7:f8:88:26:b7:c8:31:ec:bf:a3:
74:14:78:e8:4b:e9:b2:9d:52:6d:f5:31:13:62:3e:
60:cf:8d:68:d7:6d:c6:5c:37:71:1e:dd:42:d3:a7:
d7:72:64:d6:c5:ae:4f:96:18:71:04:2c:2a:82:de:
84:b4:11:91:76:ff:3d:07:a5:1e:33:97:e5:f6:ce:
37:fd:70:7e:c9:13:e7:0c:d9:7a:b1:6f:0c:41:31:
83:09:21:f0:ee:57:1b:83:06:f4:3c:d9:c7:a7:59:
22:05:7a:4a:3f:6f:fb:20:f2:f0:8d:be:4b:d8:52:
44:7f:35:93:04:c4:5e:ec:05:3e:5e:72:b4:48:5d:
36:23:71:04:dc:88:21:de:26:8e:e7:cc:ef:c4:b7:
91:58:cc:d3:e5:de:be:02:2a:22:54:02:f9:fe:64:
ff:2c:1e:de:12:46:3b:9a:34:61:8e:e3:e9:5f:3f:
c5:6f:80:3f:03:bd:cb:9b:75:30:08:40:c3:d1:6f:
76:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:30:9E:FC:F5:53:DF:8E:5C:94:69:9A:80:19:26:1F:3A:A7:A7:EB
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS275714.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.72.0/23
141.11.128.0/23
Signature Algorithm: sha256WithRSAEncryption
18:d1:32:7a:1a:a7:39:ae:ee:60:79:6d:b2:fa:84:d0:c8:4d:
c6:d3:29:e0:c4:ed:4a:ef:b3:8f:10:8e:40:86:e5:f7:56:7f:
6f:c1:0f:8e:7d:5b:6f:4a:0f:ff:17:5f:a7:16:57:0f:67:18:
9e:1c:3a:e7:5b:35:3e:59:99:54:7e:68:09:e2:df:92:eb:23:
03:45:71:80:89:9a:32:5d:e0:14:b4:18:7e:2c:fb:27:97:cc:
44:cd:70:30:2c:cb:da:77:62:78:33:26:bb:c6:8c:7e:0d:6f:
79:b4:93:b8:b9:96:86:07:1f:d3:59:7e:c1:06:e1:b4:6f:43:
43:6c:e9:43:9a:7b:bb:8b:60:d6:d7:ca:30:71:ce:69:77:5f:
97:0d:5e:9e:9d:33:b9:78:ea:4b:f1:f8:75:42:e0:f5:96:e8:
ad:56:6a:d2:11:43:de:59:58:1d:0a:9a:72:0f:17:77:f7:39:
c7:35:4e:a0:65:28:ef:21:09:91:f8:02:df:43:8c:eb:2d:d1:
7d:91:fd:02:ec:46:e5:f0:87:eb:bb:dc:1d:ae:79:e5:2a:ec:
ae:67:e9:2e:14:d5:ea:60:86:8a:1f:f0:f7:34:af:03:e1:25:
6f:94:52:ff:0e:cc:40:bb:5d:4f:e2:0f:66:56:ad:10:80:52:
1a:9d:46:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:58:58 2026 by rpki-client