Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS201724.roa
File: AS201724.roa (raw, json)
Hash identifier: 9gdksg7yxGs5JVrLpBD09Wm0+pLlanUcyH6Nm4ona5E=
Subject key identifier: 0C:A6:8A:29:FE:F0:18:31:F8:E5:E8:34:0C:9E:6D:8E:D8:84:7C:4A
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 6AAF6A675A18066D91AC19EA4427017967EC5249
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS201724.roa
Signing time: Fri 08 May 2026 13:28:46 +0000
ROA not before: Fri 08 May 2026 13:23:46 +0000
ROA not after: Fri 07 May 2027 13:28:46 +0000
asID: 201724
IP address blocks: 143.20.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:af:6a:67:5a:18:06:6d:91:ac:19:ea:44:27:01:79:67:ec:52:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: May 8 13:23:46 2026 GMT
Not After : May 7 13:28:46 2027 GMT
Subject: CN=0CA68A29FEF01831F8E5E8340C9E6D8ED8847C4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fe:71:f5:8b:5d:f1:96:93:44:ae:95:b2:08:
a3:ea:a9:1a:24:98:7f:96:d6:ec:47:f5:45:dd:df:
13:b3:ac:4f:1f:9d:46:41:6e:4b:11:79:6a:85:42:
2c:9b:d0:1a:d8:89:18:58:13:6e:d7:26:02:88:82:
39:a1:16:73:3b:e6:8c:2c:29:50:81:3c:39:d9:f0:
5e:90:12:ba:28:09:e3:c7:4f:f5:5a:d1:dc:86:ee:
02:b6:44:72:c6:fa:6b:d7:63:f2:e4:1f:b4:bb:77:
a8:48:38:ac:2e:b4:f0:f3:1e:e2:54:87:f0:0e:8a:
43:4d:6f:a6:11:54:af:45:0d:43:bb:95:20:80:83:
bd:cb:25:61:ff:dd:87:33:ae:66:02:d5:47:2d:fc:
67:eb:13:a0:91:22:71:8f:d1:e7:52:2f:df:55:25:
71:da:3f:6e:24:35:d0:34:5a:54:24:97:db:c5:20:
60:29:07:2a:29:5b:2c:f0:45:24:e3:da:ea:1f:4a:
2e:83:4d:f6:eb:04:53:b2:5f:4d:56:e1:c4:88:aa:
95:2f:1d:4f:66:34:ed:67:d0:76:59:5c:65:58:f6:
b8:73:2d:af:74:3b:5d:83:8c:d4:66:49:d4:26:0b:
40:68:4d:f1:83:43:43:87:05:40:54:8a:71:b4:35:
48:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A6:8A:29:FE:F0:18:31:F8:E5:E8:34:0C:9E:6D:8E:D8:84:7C:4A
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS201724.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.247.0/24
Signature Algorithm: sha256WithRSAEncryption
39:93:b4:de:06:0e:54:fe:41:a5:76:f7:df:cf:62:10:5b:f5:
4e:76:45:ed:14:9e:94:4c:86:4d:12:c7:2d:ed:af:ad:06:32:
e2:0e:47:d8:7a:15:ef:82:75:eb:b2:59:09:03:74:48:2e:2b:
18:e5:8a:bd:37:e6:f7:7a:8c:56:d0:88:e7:6a:87:48:03:a9:
a8:50:0b:2e:9e:bc:cb:bd:00:e9:40:e1:56:cd:d3:1b:bd:40:
ae:98:d3:a4:0f:cd:76:27:76:ee:f7:c5:48:fe:32:33:83:13:
db:34:ab:4e:65:3e:4e:49:a2:f9:08:59:c9:34:81:f7:9b:43:
4f:70:4a:03:d8:d2:f9:2e:81:f8:4d:88:23:51:90:1d:dc:93:
af:3f:e3:39:58:b4:ec:54:f4:57:d7:86:e4:86:9f:bd:6a:39:
d8:7a:88:1f:c3:c1:18:82:33:86:26:40:22:9e:dc:91:1b:d3:
3d:57:fb:dd:2a:ee:c5:99:63:1b:01:d7:1f:d5:5c:b8:ec:66:
a0:55:0f:c1:fe:fa:46:70:e9:c9:55:9f:fc:49:d2:8f:e1:8d:
6f:5b:2c:7f:12:3a:3d:10:61:e4:08:9d:27:cd:9d:b1:f7:65:
e5:6d:88:c7:86:20:0b:0b:95:a2:2e:c3:0d:91:a8:66:f5:8b:
3e:64:3d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:38:46 2026 by rpki-client