Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS400909.roa
File: AS400909.roa (raw, json)
Hash identifier: pyDFvxk46sy5UVyV6Ql/ixviapvZRdIVEwMru3zet0M=
Subject key identifier: 6D:A0:94:A4:51:6F:55:3C:74:EC:11:2F:A4:B3:75:65:0B:53:DD:6A
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 79CD226BEC43C014BC4ED9C87CE5F2F8AEE98E2E
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS400909.roa
Signing time: Mon 03 Nov 2025 16:55:11 +0000
ROA not before: Mon 03 Nov 2025 16:50:11 +0000
ROA not after: Mon 02 Nov 2026 16:55:11 +0000
asID: 400909
IP address blocks: 141.11.168.0/23 maxlen: 23
141.11.170.0/23 maxlen: 23
141.11.222.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:28:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:cd:22:6b:ec:43:c0:14:bc:4e:d9:c8:7c:e5:f2:f8:ae:e9:8e:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Nov 3 16:50:11 2025 GMT
Not After : Nov 2 16:55:11 2026 GMT
Subject: CN=6DA094A4516F553C74EC112FA4B375650B53DD6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fa:c2:98:2b:5f:05:37:68:33:be:a7:22:58:
03:17:9b:69:c8:b4:8b:7f:dc:44:68:06:80:f5:65:
15:b7:6c:fd:63:8e:1e:c0:49:36:e2:a6:48:95:44:
39:e5:dd:fe:ff:a3:07:b5:c0:e2:3c:31:c0:16:14:
da:d1:f2:bc:db:e8:89:5c:44:d8:ea:1a:8c:66:8b:
94:e6:14:6d:76:3d:19:12:10:54:95:32:c7:4f:e1:
ea:eb:ea:3d:d6:86:40:46:5f:74:4b:48:77:ab:46:
51:45:ae:25:b0:2f:50:91:41:be:d5:7f:05:b2:c1:
20:22:08:2e:0a:a7:7d:c8:f1:65:b8:01:09:4a:f9:
41:38:a2:c7:6a:5c:f1:67:d0:e6:ed:b9:eb:90:08:
21:75:f4:6f:73:f5:5f:8e:aa:0a:81:18:73:c3:31:
47:83:24:08:a7:24:d2:71:14:79:7f:15:61:06:b7:
93:62:87:9e:dc:56:fe:16:0b:0c:d8:4e:1b:34:53:
52:f4:94:eb:28:3f:94:88:5b:6d:d2:79:b7:dd:24:
4c:14:1b:ed:30:fd:d2:5b:92:1a:d7:9d:8b:5f:86:
e4:1a:41:70:44:3e:58:e6:a5:f6:b1:0e:3b:7d:9e:
e2:07:b1:f3:ef:97:90:63:a6:78:51:ca:61:8d:a7:
08:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A0:94:A4:51:6F:55:3C:74:EC:11:2F:A4:B3:75:65:0B:53:DD:6A
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS400909.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.168.0/22
141.11.222.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:dc:de:fa:93:25:0c:26:44:65:a2:4f:43:17:83:f9:1e:05:
9e:37:ca:f3:fc:b4:00:72:b5:3d:5a:47:79:46:92:6a:36:cc:
b3:ff:ec:c6:83:46:0b:0e:e0:47:b6:28:f2:e9:a7:52:3f:d3:
5d:7a:77:f9:3d:2e:09:01:21:8d:4f:11:a1:6f:66:2e:e9:0e:
af:36:d6:76:67:5e:ca:be:bf:ca:c9:68:4e:d4:a6:b1:c3:9e:
81:38:53:c5:10:05:21:b9:c4:e9:9f:3c:3d:4a:5b:06:39:ab:
67:88:70:cb:8a:6c:55:2f:fd:20:3a:30:c1:1a:35:b5:6e:16:
46:c0:2b:57:9d:58:26:08:88:d4:37:f3:1d:27:e8:55:da:56:
eb:a0:0c:2d:cd:47:61:f2:e2:00:c8:0f:06:35:7a:21:43:55:
17:1c:35:55:c9:09:7d:ac:ea:fe:83:e7:63:b7:75:b0:be:19:
49:f4:73:ba:0b:8b:b7:76:11:af:33:35:31:3b:76:e5:ab:3b:
c5:17:1d:cc:18:ad:c7:60:3b:18:77:b1:28:cc:45:df:14:e1:
8b:e5:5b:d3:72:65:f3:6d:e4:75:ae:64:40:9b:8f:e5:bf:94:
3d:76:6d:b4:73:c1:86:d6:bd:72:58:5c:db:d0:d5:7c:d5:34:
01:75:6c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:32:13 2025 by rpki-client