Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS402265.roa
File: AS402265.roa (raw, json)
Hash identifier: D2pOo7RH5tdYsFCCNR6aj2oWeIaDzhQu55nyU1j68WM=
Subject key identifier: A7:09:9D:FC:FE:54:6E:C3:61:84:61:94:90:B2:1B:35:AB:DF:95:AA
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 2627746118EF6677C09160983497D7DEBAE66B3F
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS402265.roa
Signing time: Sun 20 Sep 2026 06:51:56 +0000
ROA not before: Sun 20 Sep 2026 06:46:56 +0000
ROA not after: Sun 19 Sep 2027 06:51:56 +0000
asID: 402265
IP address blocks: 141.11.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 07:45:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:27:74:61:18:ef:66:77:c0:91:60:98:34:97:d7:de:ba:e6:6b:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Sep 20 06:46:56 2026 GMT
Not After : Sep 19 06:51:56 2027 GMT
Subject: CN=A7099DFCFE546EC36184619490B21B35ABDF95AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:24:fa:cf:ab:17:e2:c9:a9:31:f6:d4:78:61:
9d:63:24:e5:b9:31:a0:ed:b6:5a:42:72:e8:ef:50:
cc:a9:50:97:d2:e1:a0:94:b1:fc:40:f2:ad:20:a1:
05:ce:1b:31:92:6d:65:50:bb:bc:72:d2:65:1f:e8:
0a:b8:8b:57:78:7a:58:bf:86:45:c1:17:0c:9c:22:
d8:61:30:39:43:0b:c6:69:9b:c7:6e:06:9a:f3:36:
f4:96:d2:ff:b5:33:56:93:93:08:f4:51:04:e5:95:
34:16:67:64:16:87:d9:73:e2:95:df:00:43:bf:b3:
95:81:d0:d3:e6:20:df:dc:39:71:9a:ea:a9:ab:d3:
e9:b5:23:ee:6e:56:b4:0c:b8:fd:31:a4:d7:9f:62:
3a:d9:a9:c4:8b:98:a5:44:75:a6:27:db:d6:ec:c9:
b3:2b:38:04:74:ac:bb:ce:cb:02:c0:5c:9a:36:cb:
13:30:54:d7:e5:fe:4e:77:aa:3f:c5:22:67:dc:a8:
ce:ef:06:16:a8:01:8d:d1:b0:7f:9d:4e:26:00:aa:
47:35:6f:59:49:b9:3a:07:15:e5:ab:76:68:d3:e0:
3d:1e:ad:5c:29:34:d8:54:64:af:43:6f:24:e7:c1:
1d:59:dc:85:0a:46:34:c3:cf:0a:8c:f6:f4:79:e5:
96:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:09:9D:FC:FE:54:6E:C3:61:84:61:94:90:B2:1B:35:AB:DF:95:AA
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS402265.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.208.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:76:3b:2b:01:16:04:4d:aa:04:e9:1e:61:31:3d:c4:9a:e7:
d9:28:af:9d:89:69:5a:b0:04:77:f3:bd:9d:25:21:0e:4f:a3:
02:fd:d2:61:11:70:11:a9:fb:24:4d:49:9c:e8:f3:34:b6:c0:
32:76:f6:d0:27:b9:71:da:02:18:be:15:99:82:92:2b:8d:e8:
c0:79:ed:bb:93:1c:40:06:6c:6c:62:ef:d6:84:94:9b:1d:11:
40:26:ad:72:e9:86:81:80:ab:30:ed:6d:d2:e5:9f:f2:64:f1:
36:73:04:dc:50:2c:d1:b7:b5:b0:b4:3e:fe:06:a1:bd:17:57:
34:97:59:b4:9c:7b:8c:89:45:ee:5b:64:ee:4c:94:e9:03:da:
f8:54:23:ef:b2:7e:c7:2f:f3:61:73:d2:b8:5f:3f:80:51:13:
cb:7e:bb:09:b7:2c:bb:8b:cb:f4:a3:31:b6:80:a9:5e:89:a6:
c9:58:63:6a:e1:0b:74:5c:e4:e9:d4:55:a5:0b:f4:77:a7:51:
45:dc:0f:9d:4a:02:5e:18:3d:62:3c:e2:df:9e:8c:7e:f4:02:
d6:11:e7:cc:1c:17:70:66:32:ce:1a:e7:91:f3:a7:7a:36:9a:
99:18:ec:89:74:bc:8d:b7:25:17:1d:03:dd:03:1e:bc:02:60:
49:96:11:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:25:54 2026 by rpki-client