Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS9087.roa
File: AS9087.roa (raw, json)
Hash identifier: z44RMAmL4+fWSW1EWVZOf2TthYF/XMT861CBGKMaGTk=
Subject key identifier: C8:C0:20:A8:73:5E:E3:F9:38:86:47:9F:40:DA:BE:3E:97:C0:65:12
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 3A072E610C8FF5748FE985394EE236E870DD1378
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS9087.roa
Signing time: Sat 19 Sep 2026 11:49:35 +0000
ROA not before: Sat 19 Sep 2026 11:44:35 +0000
ROA not after: Sat 18 Sep 2027 11:49:35 +0000
asID: 9087
IP address blocks: 141.11.170.0/23 maxlen: 23
141.11.224.0/23 maxlen: 24
141.11.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:07:2e:61:0c:8f:f5:74:8f:e9:85:39:4e:e2:36:e8:70:dd:13:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Sep 19 11:44:35 2026 GMT
Not After : Sep 18 11:49:35 2027 GMT
Subject: CN=C8C020A8735EE3F93886479F40DABE3E97C06512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1a:fd:bf:31:76:b3:8b:9e:29:39:2a:db:f2:
2a:46:f6:1c:a7:60:31:4f:a3:e7:9e:34:38:b8:0e:
f0:e2:b9:07:19:3c:fc:c1:dd:13:d5:cd:4d:da:b0:
d5:f8:a8:e1:7d:a1:c5:43:31:5a:69:d6:6b:a6:43:
3c:cd:e6:79:d3:c0:ca:73:c0:61:70:8d:29:ef:ce:
64:74:b5:f0:22:b0:74:82:c1:99:10:ca:c5:ad:bc:
49:83:c2:68:56:57:33:4b:68:d4:59:0e:9d:4c:37:
b9:00:85:e9:52:d7:50:68:a5:dc:1e:83:d9:61:49:
47:68:1e:cf:6c:e1:1d:cd:f7:31:27:74:d2:9d:09:
ff:f8:21:fa:a7:90:c9:62:36:d5:47:b4:13:2b:4b:
78:5f:06:fa:62:3a:ac:17:5c:47:56:05:4c:38:bc:
1d:3d:37:1e:91:83:ac:d6:aa:e2:4c:1d:b5:74:13:
c7:a9:37:34:cd:73:15:c5:be:1f:72:e9:ea:6b:45:
03:74:2a:da:04:2d:4b:fa:2b:d7:ca:72:2e:93:d3:
ac:f7:77:67:b6:3a:c2:8a:fd:14:b6:4c:4a:e7:26:
1c:bc:89:ba:0d:c4:18:b5:8f:4c:ab:cc:1d:e4:e2:
db:ae:92:7f:16:39:22:3c:7f:db:5f:c9:65:25:0f:
05:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C0:20:A8:73:5E:E3:F9:38:86:47:9F:40:DA:BE:3E:97:C0:65:12
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS9087.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.170.0/23
141.11.224.0/23
141.11.249.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:0b:94:4a:45:9f:45:9c:1a:a9:37:60:1f:b3:32:a2:bb:4f:
98:06:30:11:3e:37:cc:0b:9b:4f:d8:4d:8d:ac:2a:af:3f:8f:
24:7a:3c:08:11:20:31:5d:49:83:1f:04:3c:7a:8a:67:39:19:
ac:d0:50:00:bb:b4:b2:39:9e:87:f9:64:2d:61:48:20:0e:4c:
c1:b1:bc:3d:44:b4:9e:24:7a:80:e8:0e:b8:43:de:6f:ae:56:
d6:df:b7:0c:8f:7f:94:6e:1a:2e:02:d9:7d:9b:f9:0f:0d:03:
ea:86:57:ed:ea:74:dc:82:f8:7c:12:59:2f:c2:a8:68:0d:d3:
80:f5:70:b4:54:f4:ce:4a:8b:67:84:ec:82:a7:07:b5:15:46:
d0:20:c6:1f:0c:71:37:ea:6d:1e:3e:be:cb:0a:7d:16:60:cf:
d5:55:45:3c:6f:79:02:45:e6:d3:d7:c7:c9:3e:27:42:9f:45:
97:3b:0a:1f:82:16:80:c7:95:a9:c0:5d:c3:66:3d:fc:af:f8:
29:13:87:50:b7:15:ec:45:65:e1:77:a3:bb:1e:23:7f:65:96:
dc:30:e9:e6:a9:7b:12:8c:79:86:52:38:60:56:86:d1:24:07:
7c:45:8c:f1:d3:ad:45:56:55:87:a5:8f:c6:02:f5:37:36:30:
dc:99:7d:d8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Sep 21 05:51:46 2026 by rpki-client