Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS63902.roa
File: AS63902.roa (raw, json)
Hash identifier: NoghesI6wGkiw/zfq4J5ijzLiEYKXe/f8/J9EAUQWUk=
Subject key identifier: 2F:0B:BC:3E:8B:76:18:8F:CC:20:E6:DC:07:58:18:93:5A:BD:D1:D8
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 18288BE3C2DC4E0AE182288F9A492618DFAAC8B2
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS63902.roa
Signing time: Fri 31 Oct 2025 12:55:11 +0000
ROA not before: Fri 31 Oct 2025 12:50:11 +0000
ROA not after: Fri 30 Oct 2026 12:55:11 +0000
asID: 63902
IP address blocks: 141.11.80.0/23 maxlen: 24
141.11.84.0/23 maxlen: 24
141.11.142.0/23 maxlen: 24
141.11.183.0/24 maxlen: 24
141.11.220.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:28:8b:e3:c2:dc:4e:0a:e1:82:28:8f:9a:49:26:18:df:aa:c8:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Oct 31 12:50:11 2025 GMT
Not After : Oct 30 12:55:11 2026 GMT
Subject: CN=2F0BBC3E8B76188FCC20E6DC075818935ABDD1D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ec:96:5f:2f:60:f0:11:96:aa:54:7c:92:d2:
4d:2f:8d:18:90:3c:92:0e:59:7a:0d:df:6d:e3:16:
5d:00:f9:95:93:32:45:5d:cb:17:77:74:6f:1d:44:
ec:eb:da:70:a8:f2:64:22:c7:b5:c9:3a:9b:90:49:
f2:e0:0e:a5:36:ad:12:62:c5:09:cb:2f:20:81:be:
5d:e4:e8:78:63:fe:45:3e:7a:bf:a6:a7:7e:4f:82:
08:51:93:00:c8:41:1e:17:87:bd:6f:ac:89:3c:70:
21:e5:d4:0c:6c:9d:2d:b4:61:4c:2b:9f:9d:f7:6e:
36:8b:6a:a5:48:9d:e7:43:00:c8:ee:cf:a7:9b:06:
7f:65:99:ea:11:0c:76:d3:ca:2f:62:7d:29:d5:56:
46:c0:d1:22:8a:c8:32:f2:87:aa:60:13:1e:d3:28:
e9:ba:3a:fb:f0:f0:e5:dc:9e:4f:9c:c7:ad:40:c0:
6b:34:47:cc:f2:7c:71:60:bf:a7:de:09:43:f0:c7:
50:c7:91:d3:96:a6:0d:60:30:8a:eb:fe:43:37:80:
7b:24:bf:1d:69:9f:b9:40:ca:b7:34:41:f4:b0:6b:
5b:56:10:56:1b:92:31:3d:0b:f5:1f:0b:55:3f:c2:
3f:1d:22:58:69:e5:7c:23:62:2c:ee:d1:82:4a:a6:
26:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:0B:BC:3E:8B:76:18:8F:CC:20:E6:DC:07:58:18:93:5A:BD:D1:D8
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS63902.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.80.0/23
141.11.84.0/23
141.11.142.0/23
141.11.183.0/24
141.11.220.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:43:00:39:a7:60:68:59:7b:de:4b:e7:04:c7:2b:5d:95:18:
5e:55:fe:f0:b1:ba:3e:c6:25:da:c6:a4:34:36:77:fd:2d:a6:
14:1c:9e:f7:e6:cb:53:7c:d6:f1:5e:8f:d6:e3:c6:49:aa:6d:
df:12:55:10:d3:35:c7:27:b7:46:aa:e2:09:f6:a1:68:78:91:
f7:b9:f6:9e:c2:c4:0f:86:8d:87:b0:d6:89:5a:6c:08:2e:15:
6d:f3:25:87:44:8c:8e:de:71:8d:f4:bd:07:e8:44:73:ef:6d:
99:ab:cf:20:70:95:60:7b:2b:03:91:c3:c8:5b:0f:21:78:33:
f3:73:9b:08:e7:5b:a6:ab:a6:fc:16:e0:31:99:2f:22:a6:a2:
a0:45:00:fb:18:4b:60:d0:bc:64:1f:ce:de:3d:e0:c1:a7:cc:
15:91:eb:bd:10:38:29:0b:c2:60:f9:7c:07:c5:ee:51:40:41:
3d:b7:28:48:7c:98:20:1a:84:66:58:c5:52:af:69:df:ed:5a:
31:f4:c8:02:e9:18:a2:d6:02:5c:a4:fa:0a:9e:7e:94:b3:be:
fa:2f:06:2e:96:63:9a:48:6a:3c:b3:56:1a:90:41:01:4e:ee:
f7:af:42:fa:53:20:f5:9e:17:58:74:07:04:4e:a2:72:f6:ea:
68:49:d9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:15:15 2025 by rpki-client