Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS46261.roa
File: AS46261.roa (raw, json)
Hash identifier: sLjTn0AYm59SDWr1rkD5fFLzYcrNoPmn+42X0keCT9E=
Subject key identifier: AC:CC:AE:53:C2:F0:C7:D3:8C:80:AC:2E:8F:92:FC:14:56:4D:09:A0
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 1A419C1BC2CC97BC4D53E87D2693B71B0173FA04
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS46261.roa
Signing time: Wed 28 Jan 2026 22:55:36 +0000
ROA not before: Wed 28 Jan 2026 22:50:36 +0000
ROA not after: Wed 27 Jan 2027 22:55:36 +0000
asID: 46261
IP address blocks: 141.11.92.0/23 maxlen: 24
141.11.94.0/23 maxlen: 24
141.11.136.0/23 maxlen: 24
141.11.208.0/23 maxlen: 24
141.11.210.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:41:9c:1b:c2:cc:97:bc:4d:53:e8:7d:26:93:b7:1b:01:73:fa:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jan 28 22:50:36 2026 GMT
Not After : Jan 27 22:55:36 2027 GMT
Subject: CN=ACCCAE53C2F0C7D38C80AC2E8F92FC14564D09A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e0:91:35:10:08:21:3f:8d:9b:86:f9:ea:89:
35:6f:d4:6a:2a:bd:7c:cb:f9:0e:66:86:59:c8:55:
35:f2:8b:36:6b:5f:8b:0a:66:fc:69:7e:c5:13:33:
90:51:a6:9f:d0:53:50:70:7e:24:3d:60:8b:38:74:
2a:80:c6:4f:90:8d:3a:f3:c4:26:7d:2c:af:16:a6:
34:c2:76:69:c2:49:26:f0:80:0a:c1:01:dd:b4:c6:
51:a3:2d:17:89:b7:d0:01:0c:a0:9a:ea:15:74:35:
88:c1:29:75:fe:9e:44:11:a3:ac:48:4d:00:05:c5:
bf:25:88:3a:11:a5:2b:cb:af:d2:60:9f:60:85:5d:
ca:ef:02:d7:2a:72:5f:51:bd:da:22:3f:ba:2e:77:
38:4a:1b:d5:17:c1:73:1d:75:89:1b:51:9c:bc:a1:
67:2b:9d:68:54:eb:95:ce:dd:7f:66:a8:a4:9d:f5:
e4:5f:63:d7:d4:49:8e:4f:28:97:dd:45:a8:fb:7e:
b3:e3:5e:1e:97:44:a4:a3:af:1e:67:ca:12:85:ab:
df:44:de:c8:f7:40:d1:ff:55:69:ea:05:4f:8f:b0:
cd:b0:28:65:fc:16:a1:e9:2c:ab:79:a4:0a:b5:c0:
7f:1b:2b:ba:60:0f:6d:f7:61:50:0f:be:b2:ee:9f:
2f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:CC:AE:53:C2:F0:C7:D3:8C:80:AC:2E:8F:92:FC:14:56:4D:09:A0
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS46261.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.92.0/22
141.11.136.0/23
141.11.208.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:71:b8:70:40:d1:09:d9:df:31:43:8b:df:a6:8e:41:66:83:
a9:fb:50:56:74:f1:c2:59:62:33:88:ce:7d:93:53:27:21:25:
31:aa:bb:ab:f9:22:3c:48:b4:0a:a5:b1:32:8e:81:34:63:d4:
34:e6:a5:66:af:4d:3a:e1:02:24:fa:5b:02:18:f4:1c:51:5b:
3c:8b:24:8d:92:52:71:09:0f:aa:db:9d:21:8c:f2:21:7e:3e:
c1:3a:0a:85:6c:42:9b:a0:63:f0:4c:f6:2f:1e:d7:3c:23:a0:
9e:e4:b8:f9:ef:ce:28:8d:9e:1b:cd:c9:15:83:9e:b1:94:f2:
eb:21:6d:f4:fb:27:14:d3:1e:9b:c7:fb:6d:5e:0b:d3:a1:07:
a1:90:db:e4:a5:a1:ac:f7:2c:90:15:08:c5:bd:20:a9:be:e7:
21:ed:6b:40:53:a4:cd:db:be:aa:38:63:57:26:e3:de:13:46:
21:3e:a1:4d:e4:e1:3e:95:c3:96:6d:0e:3a:ce:cf:32:4f:db:
db:11:02:61:1b:4e:59:8a:fc:6e:22:27:0e:61:ae:45:7c:c3:
8d:db:40:5e:05:17:96:ef:da:47:42:8f:9d:ce:02:b9:73:bf:
32:52:29:ec:39:a3:d8:57:d9:6e:00:7c:76:b7:a7:ad:da:ec:
89:48:61:c5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:01:58 2026 by rpki-client