Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS135391.roa
File: AS135391.roa (raw, json)
Hash identifier: 03xlGjzDfAQZallbigk0Y8+00BDFgTAThIWjgs9YNYc=
Subject key identifier: 61:BC:78:F5:3E:89:F2:E2:8D:33:AD:22:E6:6B:08:B4:91:EF:FA:D0
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 61947BF3F7E32AF789BE28CED0244D4A6A6597C3
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS135391.roa
Signing time: Fri 26 Sep 2025 12:32:19 +0000
ROA not before: Fri 26 Sep 2025 12:27:19 +0000
ROA not after: Fri 25 Sep 2026 12:32:19 +0000
asID: 135391
IP address blocks: 143.20.86.0/24 maxlen: 24
143.20.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 18:44:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:94:7b:f3:f7:e3:2a:f7:89:be:28:ce:d0:24:4d:4a:6a:65:97:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 26 12:27:19 2025 GMT
Not After : Sep 25 12:32:19 2026 GMT
Subject: CN=61BC78F53E89F2E28D33AD22E66B08B491EFFAD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:54:ed:b2:53:3d:81:f9:a5:14:d3:32:70:84:
ce:62:49:ae:b8:40:e1:89:0d:8a:a8:5e:7a:a0:89:
a2:92:4d:a2:3a:f3:0c:0f:13:34:10:52:f6:98:fd:
51:05:93:3b:ee:49:a3:12:31:2b:a1:24:94:e0:fc:
81:8f:46:de:22:81:7b:70:50:0c:fb:84:60:d5:2b:
b2:bf:b5:d1:a1:73:8a:6a:ba:26:93:3b:c7:29:ce:
47:50:cc:c8:e1:24:0a:92:1b:e9:f8:9a:04:20:17:
cc:27:86:26:63:02:77:1d:49:cb:37:59:6a:aa:ed:
d1:36:35:f5:9a:0b:84:b0:e1:3b:89:af:f5:f0:ac:
eb:2a:57:e2:9b:7b:d4:47:e7:95:74:ab:b7:47:a7:
60:c6:aa:52:1f:5e:cc:8c:f4:46:4e:5f:c8:96:d7:
ca:b2:c4:79:ed:30:ce:f6:be:4d:a0:1c:b6:73:2b:
f4:a8:06:35:84:44:8d:f3:db:30:b0:59:1c:ef:df:
f9:79:96:0e:94:c8:d6:94:50:75:26:95:38:a5:42:
6c:ba:03:90:f4:2a:8a:3f:c1:77:c1:87:0a:ad:52:
c8:d0:b7:ed:74:28:50:a1:2c:ba:9b:32:99:3d:0e:
48:8d:02:5f:3a:05:3a:fa:c5:3e:5c:bc:7d:98:f8:
3d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:BC:78:F5:3E:89:F2:E2:8D:33:AD:22:E6:6B:08:B4:91:EF:FA:D0
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS135391.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.86.0/23
Signature Algorithm: sha256WithRSAEncryption
67:45:57:b9:3d:d8:bb:c3:51:4a:63:50:c1:43:e5:c0:9b:5f:
8f:bb:12:28:40:22:d8:08:1f:9a:99:9b:79:4f:c2:e6:ae:61:
a9:7a:07:8e:96:0f:c4:e5:a5:a2:17:f2:98:6e:c8:6e:95:9e:
e0:0d:ce:1d:f8:ae:0a:6f:91:cd:7a:33:0a:75:02:40:5c:7c:
f9:84:98:00:39:01:50:d6:aa:b2:0a:ad:17:03:1e:b6:88:50:
ad:12:6c:76:89:e2:48:46:db:08:2e:3d:bb:40:7e:97:6b:5f:
5c:6d:04:1f:78:43:e6:31:18:b6:fd:8a:f8:ce:c9:bd:39:44:
cb:7e:f9:e0:4a:96:7c:47:39:17:37:bc:96:4d:ef:2d:ae:94:
9a:18:d8:62:f2:79:02:43:4e:a1:45:25:f9:26:16:2b:82:2e:
7c:46:b4:54:be:93:8c:7d:ac:51:74:95:0b:fd:74:50:fb:ea:
3c:ce:0d:04:a4:aa:6d:49:6d:c2:88:c0:a2:74:5e:04:e6:7e:
88:3f:0a:87:81:67:f0:60:e2:6b:57:9d:ed:7a:9a:66:04:d3:
4f:a9:c7:8a:bc:f9:6d:5a:47:27:af:79:99:b2:1d:19:07:10:
91:d8:76:24:2a:e8:22:ec:f0:db:4f:47:63:d0:3c:74:08:f5:
ab:fb:2c:6c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUYZR78/fjKveJvijO0CRNSmpll8MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk
ZWI5M2Q5ZDAeFw0yNTA5MjYxMjI3MTlaFw0yNjA5MjUxMjMyMTlaMDMxMTAvBgNV
BAMTKDYxQkM3OEY1M0U4OUYyRTI4RDMzQUQyMkU2NkIwOEI0OTFFRkZBRDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHVO2yUz2B+aUU0zJwhM5iSa64
QOGJDYqoXnqgiaKSTaI68wwPEzQQUvaY/VEFkzvuSaMSMSuhJJTg/IGPRt4igXtw
UAz7hGDVK7K/tdGhc4pquiaTO8cpzkdQzMjhJAqSG+n4mgQgF8wnhiZjAncdScs3
WWqq7dE2NfWaC4Sw4TuJr/XwrOsqV+Kbe9RH55V0q7dHp2DGqlIfXsyM9EZOX8iW
18qyxHntMM72vk2gHLZzK/SoBjWERI3z2zCwWRzv3/l5lg6UyNaUUHUmlTilQmy6
A5D0Koo/wXfBhwqtUsjQt+10KFChLLqbMpk9DkiNAl86BTr6xT5cvH2Y+D3bAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUYbx49T6J8uKNM60i5msItJHv+tAwHwYDVR0j
BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2
MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2
NVBaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt
NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTMTM1MzkxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjxRW
MA0GCSqGSIb3DQEBCwUAA4IBAQBnRVe5Pdi7w1FKY1DBQ+XAm1+PuxIoQCLYCB+a
mZt5T8LmrmGpegeOlg/E5aWiF/KYbshulZ7gDc4d+K4Kb5HNejMKdQJAXHz5hJgA
OQFQ1qqyCq0XAx62iFCtEmx2ieJIRtsILj27QH6Xa19cbQQfeEPmMRi2/Yr4zsm9
OUTLfvngSpZ8RzkXN7yWTe8trpSaGNhi8nkCQ06hRSX5JhYrgi58RrRUvpOMfaxR
dJUL/XRQ++o8zg0EpKptSW3CiMCidF4E5n6IPwqHgWfwYOJrV53teppmBNNPqceK
vPltWkcnr3mZsh0ZBxCR2HYkKugi7PDbT0dj0Dx0CPWr+yxs
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:51:04 2025 by rpki-client