Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS63023.roa
File: AS63023.roa (raw, json)
Hash identifier: 1K6mZ8IxPhkeCVH9CzJOicjTB/I72Xv3vkTadGEA5vA=
Subject key identifier: 5E:88:72:24:BC:8B:7C:1B:31:46:F1:A4:D4:60:A2:84:3F:CE:90:B6
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 09E3C7A44E07907273C7171DBFD3DAF82DDB595F
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS63023.roa
Signing time: Fri 30 Oct 2026 02:03:17 +0000
ROA not before: Fri 30 Oct 2026 01:58:17 +0000
ROA not after: Fri 29 Oct 2027 02:03:17 +0000
asID: 63023
IP address blocks: 141.11.31.0/24 maxlen: 24
141.11.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 05:04:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:e3:c7:a4:4e:07:90:72:73:c7:17:1d:bf:d3:da:f8:2d:db:59:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Oct 30 01:58:17 2026 GMT
Not After : Oct 29 02:03:17 2027 GMT
Subject: CN=5E887224BC8B7C1B3146F1A4D460A2843FCE90B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1d:f1:cf:b4:f7:eb:52:77:56:2e:dd:a8:f7:
91:b8:d5:23:5e:95:6a:92:28:9a:a7:37:51:16:f4:
31:f6:d8:40:d5:41:97:f7:8e:7d:28:9a:80:23:1a:
50:39:07:f0:74:96:40:c5:b1:cf:2a:cb:31:90:10:
fd:a6:17:6b:b4:be:a8:25:17:2b:79:99:2c:9d:41:
0a:9e:9a:a2:a6:c0:19:92:fc:3f:8d:3a:e9:8a:e2:
3f:0f:ed:48:53:9c:3f:b0:ec:24:b5:4a:08:40:4d:
de:d0:8f:2d:da:ca:0f:c8:64:6c:85:db:87:cd:19:
88:e6:b0:df:24:c3:35:31:43:af:f3:7b:73:7c:f4:
13:07:91:e2:8d:24:f7:de:83:f5:36:6f:d1:1b:9b:
01:24:0f:29:fa:00:b2:e1:a5:ef:19:29:4d:41:25:
db:a3:f6:e0:18:45:de:8f:b0:ec:9e:e6:68:9f:51:
41:9a:c8:1b:c7:81:5d:64:98:f0:2a:66:61:f2:4d:
71:13:db:c4:06:45:5a:59:67:65:dd:ac:52:f5:27:
2a:80:e8:69:be:9d:b8:53:1d:3d:65:49:36:e7:aa:
e9:2f:b0:0d:b6:8e:ab:8e:23:9a:d3:46:cd:9f:51:
ee:34:ec:a3:6a:53:80:0c:db:52:90:b1:63:26:2b:
86:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:88:72:24:BC:8B:7C:1B:31:46:F1:A4:D4:60:A2:84:3F:CE:90:B6
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS63023.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.31.0/24
141.11.122.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:28:31:51:20:ae:27:c1:79:ab:53:57:80:37:75:75:3d:04:
a7:de:2f:38:3c:01:91:af:29:f3:52:d7:5c:79:bc:c0:32:c7:
3a:19:eb:19:b4:4c:bf:b1:3f:61:13:f2:5b:85:9c:77:61:e3:
54:1e:dd:2e:b8:a3:f0:87:b7:0c:7e:0d:bb:eb:34:53:47:3f:
4d:65:eb:fd:ae:bd:20:f3:fe:4f:ea:73:50:7c:1a:57:10:c4:
27:b5:c7:b0:bf:94:38:72:0f:89:75:5d:5a:f8:4e:b3:95:c9:
ce:6f:7d:23:37:53:77:c1:10:ac:95:b3:38:99:fd:f6:0c:16:
f9:31:ed:cc:74:46:81:aa:9e:2a:9a:fc:3d:c9:92:b8:59:a4:
52:a7:d0:4e:ad:fe:e9:fd:e8:17:78:db:c6:fb:54:86:8e:99:
b1:1c:d8:11:c5:53:bb:b9:db:82:8b:70:c3:f6:65:ec:ff:34:
36:2e:cf:fd:f8:a3:f1:3e:26:63:6f:fe:4e:5b:ba:c5:1f:d0:
b6:ce:72:71:b3:8d:88:49:87:fc:9d:50:f0:e4:d8:9b:38:a0:
ad:2f:27:35:91:80:9f:ae:56:c4:c9:08:df:19:c9:3f:45:76:
55:b4:f4:c4:1f:9b:8d:8c:60:ff:ec:f1:9a:c6:cd:c7:19:38:
3a:0d:c7:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 16:21:41 2026 by rpki-client