Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS142561.roa
File: AS142561.roa (raw, json)
Hash identifier: QxLLTX6efMes/8ce+vfjLCyRptWCdci55f0Gtv9Bies=
Subject key identifier: 8A:2B:5F:64:68:02:56:EA:EE:A8:59:57:F1:24:2E:40:2D:10:04:D7
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 1F1F5EE02CFDBDE66572A0673B907FAD855464BC
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS142561.roa
Signing time: Wed 25 Mar 2026 07:05:37 +0000
ROA not before: Wed 25 Mar 2026 07:00:37 +0000
ROA not after: Wed 24 Mar 2027 07:05:37 +0000
asID: 142561
IP address blocks: 143.20.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:11:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:1f:5e:e0:2c:fd:bd:e6:65:72:a0:67:3b:90:7f:ad:85:54:64:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Mar 25 07:00:37 2026 GMT
Not After : Mar 24 07:05:37 2027 GMT
Subject: CN=8A2B5F64680256EAEEA85957F1242E402D1004D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:39:bc:1f:1f:01:5a:d0:98:9b:76:2a:25:2f:
02:15:3d:61:3c:91:34:d9:34:7e:b1:0e:89:48:06:
c8:a2:7c:0b:2b:2b:b8:65:4b:c3:0a:60:dd:e1:4c:
66:f2:19:9f:56:4a:32:55:99:6e:15:72:7e:6a:6a:
7b:af:06:e5:2c:3a:a6:7d:41:09:11:df:b7:fb:21:
ce:f1:37:8a:fc:d9:88:ec:76:6d:ee:99:90:a2:fe:
0e:ae:c1:93:a2:8e:20:c8:b2:45:95:94:f3:bc:46:
df:14:16:c4:58:c3:58:ca:01:cc:09:23:2e:b5:01:
af:d9:ae:26:e3:e4:5b:9f:d1:aa:93:ed:2b:7c:c8:
de:2d:4f:0c:1f:6e:66:ef:9f:35:9a:5a:d7:e7:ae:
ae:23:76:24:39:d4:ed:3a:29:9f:0e:0a:3a:0c:9d:
67:74:53:ea:e1:7f:1a:0e:14:48:47:a1:c1:54:28:
52:6e:8d:ae:6e:b5:67:a1:d7:25:28:12:47:37:47:
04:c4:1a:43:44:56:02:6c:4e:0e:36:06:3c:c6:0c:
17:34:eb:bb:58:7e:18:9e:f7:47:ce:b6:86:3f:67:
8a:37:e2:66:5f:1b:26:b1:a5:c6:39:53:24:42:d3:
aa:e2:c5:f6:45:95:09:fc:a7:6e:13:e3:9c:fd:98:
be:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:2B:5F:64:68:02:56:EA:EE:A8:59:57:F1:24:2E:40:2D:10:04:D7
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS142561.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.23.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:39:c7:24:0c:c6:18:3f:1e:a9:56:85:43:77:79:96:3e:84:
2b:51:0b:fb:a6:12:3f:2c:75:af:e9:b1:dd:ff:1e:d2:d5:94:
1a:bc:c9:02:07:b0:76:59:14:67:f0:bc:88:bc:14:a6:a5:6b:
00:77:aa:5d:6b:48:11:73:ba:63:f9:60:1a:f7:8a:d1:a5:16:
11:f8:cc:e3:07:cf:e4:53:83:b3:87:ac:0c:85:54:8a:ed:1c:
d1:e4:86:3b:95:6d:ff:6f:43:16:f3:51:ab:b4:28:94:19:7e:
1f:63:8a:bb:30:c9:c1:e3:56:87:9e:ec:b2:e8:06:16:30:68:
64:e3:fb:64:39:8b:3e:61:a0:38:30:fa:8f:d8:c4:01:e5:23:
bb:1f:a4:8d:c8:44:67:ea:cb:d0:45:47:b0:bf:9e:56:e4:00:
1e:5e:59:1b:4b:eb:4e:0a:2b:38:12:c2:46:b7:b1:c7:dc:37:
01:7e:2b:8a:37:20:42:83:5f:49:5f:95:33:77:09:44:72:bf:
04:3d:a4:a8:d5:1a:92:ad:2b:a8:6e:ba:d0:09:e1:54:a6:26:
d6:b6:e9:9b:ae:0d:76:36:19:d4:b6:f2:3f:a2:87:e4:d9:90:
f5:94:0a:d1:b9:18:c0:2c:ac:4f:00:55:f9:01:3e:e4:c8:d5:
be:04:a8:8f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUHx9e4Cz9veZlcqBnO5B/rYVUZLwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk
ZWI5M2Q5ZDAeFw0yNjAzMjUwNzAwMzdaFw0yNzAzMjQwNzA1MzdaMDMxMTAvBgNV
BAMTKDhBMkI1RjY0NjgwMjU2RUFFRUE4NTk1N0YxMjQyRTQwMkQxMDA0RDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyObwfHwFa0JibdiolLwIVPWE8
kTTZNH6xDolIBsiifAsrK7hlS8MKYN3hTGbyGZ9WSjJVmW4Vcn5qanuvBuUsOqZ9
QQkR37f7Ic7xN4r82Yjsdm3umZCi/g6uwZOijiDIskWVlPO8Rt8UFsRYw1jKAcwJ
Iy61Aa/Zribj5Fuf0aqT7St8yN4tTwwfbmbvnzWaWtfnrq4jdiQ51O06KZ8OCjoM
nWd0U+rhfxoOFEhHocFUKFJuja5utWeh1yUoEkc3RwTEGkNEVgJsTg42BjzGDBc0
67tYfhie90fOtoY/Z4o34mZfGyaxpcY5UyRC06rixfZFlQn8p24T45z9mL6/AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUiitfZGgCVuruqFlX8SQuQC0QBNcwHwYDVR0j
BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2
MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2
NVBaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt
NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTMTQyNTYxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjxQX
MA0GCSqGSIb3DQEBCwUAA4IBAQCnOcckDMYYPx6pVoVDd3mWPoQrUQv7phI/LHWv
6bHd/x7S1ZQavMkCB7B2WRRn8LyIvBSmpWsAd6pda0gRc7pj+WAa94rRpRYR+Mzj
B8/kU4Ozh6wMhVSK7RzR5IY7lW3/b0MW81GrtCiUGX4fY4q7MMnB41aHnuyy6AYW
MGhk4/tkOYs+YaA4MPqP2MQB5SO7H6SNyERn6svQRUewv55W5AAeXlkbS+tOCis4
EsJGt7HH3DcBfiuKNyBCg19JX5UzdwlEcr8EPaSo1RqSrSuobrrQCeFUpibWtumb
rg12NhnUtvI/oofk2ZD1lArRuRjALKxPAFX5AT7kyNW+BKiP
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:04:32 2026 by rpki-client