Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS20115.roa
File: AS20115.roa (raw, json)
Hash identifier: 8feJ4i4fpiGVj3P6bO/t/Er0jl4kev7CEKw0gReYI/0=
Subject key identifier: AE:1E:13:EF:B6:C7:81:0A:03:D6:BB:7E:63:76:87:ED:D1:57:96:10
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 10B2C7D4719ED0E61DD42BD16AD3ED2B3D8DA205
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS20115.roa
Signing time: Sun 08 Nov 2026 00:09:26 +0000
ROA not before: Sun 08 Nov 2026 00:04:26 +0000
ROA not after: Sun 07 Nov 2027 00:09:26 +0000
asID: 20115
IP address blocks: 143.14.232.0/21 maxlen: 24
162.141.2.0/23 maxlen: 24
162.141.6.0/23 maxlen: 24
162.141.22.0/23 maxlen: 24
162.141.28.0/22 maxlen: 24
162.141.32.0/22 maxlen: 24
162.141.40.0/22 maxlen: 24
162.141.56.0/22 maxlen: 24
162.141.60.0/22 maxlen: 24
162.141.72.0/22 maxlen: 24
162.141.76.0/23 maxlen: 24
162.141.134.0/23 maxlen: 24
162.141.156.0/23 maxlen: 24
162.141.192.0/21 maxlen: 24
162.141.200.0/21 maxlen: 24
162.141.216.0/21 maxlen: 24
162.141.232.0/21 maxlen: 24
167.148.16.0/21 maxlen: 24
167.148.44.0/23 maxlen: 24
167.148.48.0/21 maxlen: 24
167.148.56.0/22 maxlen: 24
167.148.60.0/22 maxlen: 24
167.148.76.0/22 maxlen: 24
167.148.224.0/21 maxlen: 24
167.148.232.0/21 maxlen: 24
167.148.240.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 07:37:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:b2:c7:d4:71:9e:d0:e6:1d:d4:2b:d1:6a:d3:ed:2b:3d:8d:a2:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Nov 8 00:04:26 2026 GMT
Not After : Nov 7 00:09:26 2027 GMT
Subject: CN=AE1E13EFB6C7810A03D6BB7E637687EDD1579610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1b:51:44:3a:2c:86:30:01:41:a7:bd:37:1d:
6f:ef:c8:4a:74:2c:af:49:72:62:be:9e:da:e4:87:
20:5c:dc:24:bf:bd:ee:92:3e:ce:c0:1f:e9:34:c2:
9b:13:85:1e:3c:09:eb:f2:71:2f:f9:fe:ce:39:b3:
84:c9:d9:07:82:5a:b0:e9:aa:ba:33:b7:42:bd:0f:
ea:3a:91:0a:4e:9d:f2:3c:e2:16:aa:ab:e0:74:3f:
be:bf:e1:44:44:42:9c:00:28:6e:d7:9f:ad:85:fe:
4a:03:6f:90:77:72:38:88:96:a9:f8:97:49:84:47:
b5:95:7a:42:c1:a7:04:93:80:69:bc:b2:d4:16:7a:
63:58:55:19:2f:e5:de:be:4d:09:2b:61:6b:be:c6:
69:77:d8:88:31:33:46:b5:b5:ac:1a:1d:9f:ab:cf:
8f:76:36:f0:4d:92:1b:78:38:52:94:33:ed:b6:49:
73:53:3e:10:5e:79:4b:fa:63:91:d0:cc:a7:c3:1c:
5b:84:9b:64:65:12:e0:14:db:93:e0:b8:fc:da:72:
7b:20:59:9b:42:9b:b6:67:35:8a:b7:38:c7:9a:b1:
2f:af:0a:f0:a0:cd:63:60:1a:d0:ab:6d:7a:a2:8c:
b2:d1:ff:25:86:36:c4:b9:12:c4:84:49:38:4c:21:
d6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:1E:13:EF:B6:C7:81:0A:03:D6:BB:7E:63:76:87:ED:D1:57:96:10
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS20115.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.232.0/21
162.141.2.0/23
162.141.6.0/23
162.141.22.0/23
162.141.28.0-162.141.35.255
162.141.40.0/22
162.141.56.0/21
162.141.72.0-162.141.77.255
162.141.134.0/23
162.141.156.0/23
162.141.192.0/20
162.141.216.0/21
162.141.232.0/21
167.148.16.0/21
167.148.44.0/23
167.148.48.0/20
167.148.76.0/22
167.148.224.0-167.148.247.255
Signature Algorithm: sha256WithRSAEncryption
78:37:dd:1d:0a:5b:40:af:d8:81:68:4d:a3:7c:94:44:60:f2:
a9:77:11:a3:6a:4e:68:0f:ee:1a:1f:b2:71:29:a4:40:25:64:
8b:07:5e:53:ac:86:a1:fb:2e:42:ed:fb:5d:19:56:04:be:62:
c6:91:6a:b4:3c:0c:2b:64:c0:85:da:44:fc:5c:c7:98:45:36:
fc:e1:70:50:d5:46:11:65:0d:ab:50:bb:5a:3d:99:bf:c1:c0:
4f:af:ec:9a:3d:d7:a9:07:fb:33:c9:d5:29:ed:6e:24:b2:04:
cc:9d:a5:b8:a2:1b:a8:5a:83:6e:4e:78:9c:f2:17:9d:76:b4:
69:58:66:05:e3:ec:f9:61:e7:45:77:09:6b:28:0d:59:0c:84:
d5:b8:84:40:a0:ba:f3:56:71:4e:a5:34:db:b2:f5:09:98:d6:
01:07:2c:26:58:f4:6e:7e:5f:8a:b3:05:bd:54:36:80:20:98:
f4:64:bd:1d:71:9d:84:d3:63:86:cd:da:7a:41:3e:bb:a9:4f:
56:d4:8d:75:ee:56:d6:57:40:2b:d8:67:55:74:2c:18:fd:00:
d6:19:3f:de:d1:1f:30:da:0b:2b:04:cc:01:51:93:06:bb:28:
4a:cb:69:08:69:00:ba:7e:f1:60:3d:16:a2:e2:20:6a:e5:de:
75:d7:e1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:47:09 2026 by rpki-client