Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS135391.roa
File: AS135391.roa (raw, json)
Hash identifier: roKn2cELthNOkeGfrKSyc+rcXqASVVcUTxYKHsgm6jA=
Subject key identifier: DA:50:F3:F8:B5:64:42:77:7C:D8:54:8C:AC:95:B5:96:4D:FD:26:E3
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 6228F4C1DDAED412A5F33F8A8E61EF1287B7D6C9
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS135391.roa
Signing time: Fri 27 Jun 2025 09:43:17 +0000
ROA not before: Fri 27 Jun 2025 09:38:17 +0000
ROA not after: Fri 26 Jun 2026 09:43:17 +0000
asID: 135391
IP address blocks: 143.20.39.0/24 maxlen: 24
143.20.86.0/24 maxlen: 24
143.20.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:28:f4:c1:dd:ae:d4:12:a5:f3:3f:8a:8e:61:ef:12:87:b7:d6:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Jun 27 09:38:17 2025 GMT
Not After : Jun 26 09:43:17 2026 GMT
Subject: CN=DA50F3F8B56442777CD8548CAC95B5964DFD26E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:23:24:33:51:35:2d:d0:70:33:13:1d:7f:f2:
52:9b:4d:0b:44:79:45:85:ac:21:cf:0b:f8:52:20:
6e:e6:88:b0:dc:ea:a1:ea:38:f5:b6:68:7d:e8:fa:
dd:b5:fa:94:99:eb:c2:84:91:91:a4:cc:b0:71:97:
39:5e:c6:db:fb:1d:5e:6d:99:7c:d7:b8:92:99:06:
0e:b0:59:11:e8:b9:01:ba:e8:fd:c3:ce:28:d3:b3:
a5:4d:09:1e:1c:36:54:2c:e7:16:a1:92:8b:ff:b4:
58:ac:bf:ce:61:af:cf:85:f3:8e:9f:ce:68:c2:97:
ce:95:79:22:55:3c:ab:44:a1:62:a7:8c:19:68:2e:
4c:4e:9c:f7:f6:81:13:fb:78:d8:ac:bf:95:ad:36:
8b:3c:8e:7c:a1:59:2b:d0:5e:40:21:be:44:13:45:
a0:26:7b:3e:42:fd:00:d5:e4:25:2f:b2:69:c7:d4:
99:93:07:d2:5e:1b:8e:87:2b:d5:6f:9e:93:37:42:
9e:bf:fa:2b:46:a6:03:c8:26:08:57:96:dd:dc:01:
24:c9:f1:7b:41:41:eb:fd:ef:14:8a:d7:16:21:fc:
6f:60:16:17:23:31:e8:fa:9f:f3:98:5b:e0:21:02:
92:63:3e:7a:d6:91:97:b1:2d:7e:64:df:bc:cc:19:
73:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:50:F3:F8:B5:64:42:77:7C:D8:54:8C:AC:95:B5:96:4D:FD:26:E3
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS135391.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.39.0/24
143.20.86.0/23
Signature Algorithm: sha256WithRSAEncryption
d3:6f:a5:ef:17:08:6b:aa:b7:83:fb:62:e0:01:22:8c:28:a1:
26:20:08:2d:0e:29:f5:7e:49:ec:39:1d:7e:77:92:99:2b:47:
c5:5c:ed:06:56:2d:7e:92:62:38:90:01:f7:1a:c5:1b:9f:dd:
3a:b4:64:ee:40:89:4f:f3:62:4e:9d:3d:0c:f2:10:77:07:85:
a6:30:bd:d4:6e:49:19:6e:33:2a:e5:e6:92:ce:ff:fa:51:5e:
7b:86:ca:bf:12:18:b1:f4:31:fd:67:0d:40:99:11:03:8a:9c:
61:b9:fb:2b:fa:42:4d:8c:ba:97:c9:44:be:63:45:76:47:97:
e6:81:6c:9d:32:11:94:1f:97:c0:0f:70:1a:59:00:b5:5d:15:
4b:03:ba:c9:69:8a:78:89:c9:0c:e2:98:d4:3b:d9:1e:58:00:
dc:da:83:8d:87:26:86:97:ce:9d:8e:2c:00:6f:f3:4b:3a:63:
28:5f:50:d6:55:09:bb:bd:22:e0:6b:0b:e3:13:e9:69:28:ec:
6c:da:34:0f:73:4c:68:a1:cb:1a:16:75:80:e4:1e:28:b6:f1:
0d:b6:00:90:e3:da:52:70:34:1b:f6:6e:21:5d:0d:55:32:75:
af:38:62:be:3a:16:85:a2:a6:6a:69:4b:4a:27:ec:4b:e9:d5:
5d:ef:22:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:10:55 2025 by rpki-client