Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS401362.roa
File: AS401362.roa (raw, json)
Hash identifier: eAdAvqOan7KjBd86nQqJhvY8LGMJZZfM/MLqagXhUDA=
Subject key identifier: 53:10:48:CC:A9:D7:D5:5F:3E:90:B8:8B:D3:3F:A0:F2:63:13:64:4C
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 4E027F0888D1A9033DB85FD45DCE3862FFCCA3B1
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS401362.roa
Signing time: Thu 10 Sep 2026 16:37:18 +0000
ROA not before: Thu 10 Sep 2026 16:32:18 +0000
ROA not after: Thu 09 Sep 2027 16:37:18 +0000
asID: 401362
IP address blocks: 141.11.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:02:7f:08:88:d1:a9:03:3d:b8:5f:d4:5d:ce:38:62:ff:cc:a3:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Sep 10 16:32:18 2026 GMT
Not After : Sep 9 16:37:18 2027 GMT
Subject: CN=531048CCA9D7D55F3E90B88BD33FA0F26313644C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:98:f5:a1:df:68:fb:25:ab:db:32:6b:7f:11:
ed:0b:8a:e2:9d:2f:8d:51:27:e0:58:b2:6c:3a:53:
28:fd:46:ae:e5:a0:08:0e:b3:f6:56:09:44:55:fd:
fd:f3:26:49:91:14:35:ef:b6:b9:09:be:eb:62:39:
57:76:74:b9:39:57:38:9f:c0:b5:a2:df:2c:6d:f0:
c4:a4:80:89:76:1c:7f:d7:0c:66:71:bc:65:22:ac:
fe:20:21:b7:8a:22:94:38:15:1c:6f:7f:57:21:14:
b9:a8:7d:78:82:72:b3:cc:77:ad:48:19:58:c4:9a:
24:08:b4:2b:4c:ff:bf:df:ab:5c:8b:c8:a3:1c:84:
f6:73:e5:4f:2d:28:df:b1:7e:72:1e:7b:1f:be:f0:
e9:53:24:a8:11:a2:74:8e:00:32:ce:82:49:c9:b3:
2e:12:2d:c6:75:e2:92:e8:08:6d:94:3a:5a:29:6b:
7b:1c:d5:46:30:be:0f:b8:2d:fe:5f:2b:b4:88:60:
42:c8:d2:c0:3a:11:95:7f:e1:61:1a:4b:1b:27:71:
d0:fa:d5:36:2c:62:e7:52:ae:bf:78:ab:5c:ab:26:
89:dd:07:00:7e:ca:d6:e6:b2:f0:10:f5:62:19:ff:
fb:25:c3:37:22:ee:c3:84:c5:1d:e9:e5:10:38:2b:
cd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:10:48:CC:A9:D7:D5:5F:3E:90:B8:8B:D3:3F:A0:F2:63:13:64:4C
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS401362.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.184.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:fc:1f:b6:6e:38:93:a3:c5:79:7f:26:d5:c1:31:0f:85:ad:
d8:a0:3b:d6:4b:39:50:64:6b:17:d2:d2:24:4a:21:a4:32:9a:
4d:54:5c:ce:c3:c8:5d:be:48:e4:d1:e1:b0:ed:ed:3a:99:bd:
f7:02:df:27:1b:b5:91:96:8d:08:b2:27:21:1d:b0:b4:1a:d2:
f3:a3:02:cc:fa:cf:7d:6a:2f:db:0d:24:cf:f7:bf:12:5c:76:
ce:2d:13:5a:46:39:0c:d6:c8:93:1f:d2:54:80:6a:df:b3:d8:
ee:66:5b:dd:ed:bc:73:e3:c9:62:43:63:e9:aa:f1:ab:0f:3d:
7f:47:f9:c3:1c:14:f6:75:2b:33:5a:af:99:25:8c:35:2b:76:
3e:94:fe:65:b5:2d:0a:43:3d:b9:7d:a3:b0:c4:83:f4:c1:4b:
11:7f:d7:a2:8a:41:b4:6b:07:ee:9a:44:5e:d2:6c:89:67:17:
50:55:2b:0f:c7:bb:29:e6:f3:e3:2e:ec:ac:65:1f:b3:8d:e2:
c6:16:06:d6:3f:82:01:12:d8:35:81:d9:cb:82:f7:ad:9f:90:
64:60:5b:fb:4a:49:75:5f:50:96:ac:44:73:f6:6d:60:d6:d8:
66:32:b7:24:61:d3:98:54:c1:80:9e:ac:82:35:17:05:91:6b:
35:5e:37:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:43:48 2026 by rpki-client