Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS397630.roa
File: AS397630.roa (raw, json)
Hash identifier: PlYGezXb8saoq6vVVGLyTtQjbP6Z6Zucbz9P0+5RhZI=
Subject key identifier: EA:61:D1:CF:88:93:8E:39:59:1C:D3:E4:75:AF:FD:23:11:99:4F:2F
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 63012BD572F52EE785E48EFA5520697E5210865B
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS397630.roa
Signing time: Fri 11 Sep 2026 12:49:34 +0000
ROA not before: Fri 11 Sep 2026 12:44:34 +0000
ROA not after: Fri 10 Sep 2027 12:49:34 +0000
asID: 397630
IP address blocks: 141.11.226.0/23 maxlen: 24
141.11.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 07:45:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:01:2b:d5:72:f5:2e:e7:85:e4:8e:fa:55:20:69:7e:52:10:86:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Sep 11 12:44:34 2026 GMT
Not After : Sep 10 12:49:34 2027 GMT
Subject: CN=EA61D1CF88938E39591CD3E475AFFD2311994F2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:64:b4:19:b1:69:a8:2d:01:57:67:1f:ba:ef:
31:95:b7:f8:2b:f3:72:a5:d8:cb:12:50:a8:25:a0:
bf:eb:01:20:4a:95:d1:77:79:c2:47:cd:56:04:27:
9d:e7:fc:0f:da:88:83:3f:5a:14:80:af:e4:d9:75:
9b:73:fc:6c:5b:26:73:d9:e9:bb:30:34:93:6a:c1:
8b:9c:aa:fe:52:69:31:bd:21:76:e9:72:1e:8b:f3:
90:63:fc:61:50:0d:ce:54:a1:a8:34:62:cc:27:55:
e0:c0:c0:70:70:2a:67:70:db:58:d5:fc:3f:82:ec:
7d:19:39:f1:58:2b:4c:7c:e1:f6:43:6c:68:0c:fb:
98:db:d9:bb:fd:9f:bf:c4:02:6a:97:47:52:47:6b:
56:e1:cd:b5:75:d5:35:1f:f0:bc:43:b2:9b:5f:cc:
9e:6a:63:8e:da:e6:87:70:68:54:82:c9:42:6f:01:
a9:a9:56:66:8d:ba:a8:34:26:d1:5a:8c:c0:12:7b:
a6:15:1c:99:99:ad:93:e5:97:b2:73:e8:c3:aa:24:
25:b0:f7:0b:25:6f:b6:81:a2:90:d6:2a:c3:19:85:
f8:ac:c0:5d:29:1e:27:d7:62:7c:9d:74:c9:2d:7e:
38:3e:0a:1a:02:a0:bb:d2:eb:3b:ee:25:68:64:f0:
91:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:61:D1:CF:88:93:8E:39:59:1C:D3:E4:75:AF:FD:23:11:99:4F:2F
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS397630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.226.0/23
141.11.230.0/24
Signature Algorithm: sha256WithRSAEncryption
06:a0:98:36:b1:ed:62:2e:c5:7e:e4:41:d5:92:02:4f:be:d2:
ee:c3:90:a2:cb:df:f7:df:c2:99:c7:55:5c:15:a3:04:16:59:
89:d6:58:2a:1a:c1:6c:2f:be:71:23:c9:24:00:8a:88:79:12:
d1:8f:2d:8d:1b:a7:96:19:c0:1e:ed:66:15:54:e7:de:d6:4c:
85:92:8b:30:bd:3a:be:eb:13:48:24:f0:0b:5e:9b:66:d9:ca:
34:4a:6f:03:7d:a3:2c:97:c9:67:96:3b:83:ea:7e:28:30:08:
53:8e:1f:89:2f:0e:23:7d:fc:b3:78:39:8d:6a:1a:8a:ca:47:
55:de:c5:a8:be:30:46:42:42:5d:3f:a7:d1:47:e5:9a:01:fe:
30:1f:c8:2f:d7:1d:8a:9e:0b:6b:7c:94:1a:44:53:02:6a:91:
c3:e4:52:62:a3:d9:4c:81:1e:31:fa:97:56:2f:5c:41:18:0a:
33:40:52:25:b9:ff:45:0a:71:2d:3a:a6:53:dd:79:4e:a2:2c:
27:26:20:91:93:87:6c:35:08:43:5c:96:b6:6b:d0:e9:d5:f8:
76:31:4b:83:9e:81:a4:0e:35:10:ca:70:43:2e:15:b4:79:e8:
18:d9:aa:a5:68:8e:24:34:4c:a8:be:fb:22:33:19:d5:ef:70:
82:07:e6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:00:04 2026 by rpki-client