Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS203054.roa
File: AS203054.roa (raw, json)
Hash identifier: 0NOOhGTbiamQI1qVOJXgHyIDCXsUAcDsNYihlrtzAnQ=
Subject key identifier: CD:ED:BD:20:2A:9B:E8:DF:74:8F:79:22:77:68:B2:84:68:37:C7:8C
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 79BEB275CBFB05F8FC89083FF7A6FDC70756A995
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS203054.roa
Signing time: Sat 09 May 2026 07:55:59 +0000
ROA not before: Sat 09 May 2026 07:50:59 +0000
ROA not after: Sat 08 May 2027 07:55:59 +0000
asID: 203054
IP address blocks: 143.20.86.0/24 maxlen: 24
143.20.87.0/24 maxlen: 24
143.20.111.0/24 maxlen: 24
143.20.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:be:b2:75:cb:fb:05:f8:fc:89:08:3f:f7:a6:fd:c7:07:56:a9:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: May 9 07:50:59 2026 GMT
Not After : May 8 07:55:59 2027 GMT
Subject: CN=CDEDBD202A9BE8DF748F79227768B2846837C78C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f6:b8:ed:4f:32:5a:8a:ab:76:b8:f0:d8:dd:
be:6b:da:62:f9:73:f6:df:d1:a7:72:2f:c4:1b:89:
bd:b5:d3:1d:52:40:29:6b:73:81:1e:0d:c6:44:65:
98:5f:bc:7c:c5:b5:85:47:34:78:59:b0:54:6d:4b:
cf:10:2b:1b:0a:86:81:cc:86:77:99:18:33:03:19:
81:27:c2:fa:eb:3b:ab:2d:ff:a0:00:18:82:75:81:
dc:f5:19:3f:ff:18:ba:24:3b:3f:4d:8d:df:1c:3b:
39:6e:1a:dd:8b:bb:01:bc:b7:4b:69:d1:16:24:37:
c1:4b:de:2b:e8:01:9f:dd:85:f5:fd:a5:8f:d5:35:
a6:9b:4f:ec:a8:c9:0e:dc:91:a2:e8:9e:89:31:26:
7b:82:d8:53:c2:c8:8e:86:2f:12:2a:43:c9:a9:f2:
c3:8c:1e:b5:24:e6:8e:2e:bc:9d:72:b2:b6:09:23:
e3:11:05:27:78:dd:1b:d0:fb:db:f9:58:bf:74:dd:
08:4e:a9:9c:3a:32:38:74:6b:6b:a5:2b:12:45:7b:
54:62:90:bc:1c:ad:ea:b5:70:7b:2c:dc:a8:50:30:
a3:af:60:d6:90:af:55:82:8f:43:4c:7a:28:3f:00:
ff:54:cd:99:6b:74:9b:2e:30:b0:78:68:68:16:d6:
b6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:ED:BD:20:2A:9B:E8:DF:74:8F:79:22:77:68:B2:84:68:37:C7:8C
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS203054.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.86.0/23
143.20.111.0/24
143.20.194.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:46:7d:f5:a9:3c:21:7d:e5:15:b5:55:a1:8d:5e:b0:77:cb:
f4:1f:80:bc:0c:62:eb:ec:db:64:6b:b3:41:c3:4a:ab:d5:e3:
75:1f:a0:73:2d:4b:a9:80:ff:a7:b0:b8:14:b3:25:4d:8a:87:
98:cb:b1:8f:0d:0d:80:ee:a5:e7:3e:63:f2:3d:1b:23:f6:e5:
b4:30:e0:f3:42:af:38:07:ea:b7:e0:eb:af:c8:a9:75:f6:30:
dc:f7:f2:54:6d:df:59:98:f3:06:4a:70:c3:c0:81:02:6a:82:
c6:52:9e:23:d9:66:43:a6:f6:aa:4b:ea:c1:a6:49:22:6f:f9:
ad:99:af:ee:80:bb:6e:d1:fc:19:96:5e:42:1f:fc:ca:39:6d:
25:de:6e:90:ef:60:05:6d:10:7c:e2:25:23:fd:b9:88:fc:11:
a7:05:10:6d:53:a0:2d:e8:35:cb:f4:73:1d:3e:28:af:ea:f1:
92:73:ca:a0:52:36:89:41:02:dc:3f:10:ec:e0:d1:74:2e:6c:
e7:30:ea:b3:b1:83:f0:eb:43:b6:30:2a:2a:f3:44:bd:1b:c9:
f0:6d:82:01:b7:19:63:6e:2c:13:a5:ba:31:8b:30:b9:48:42:
b9:71:ec:28:8d:26:f7:24:27:28:53:af:46:c5:87:f4:11:56:
67:44:8d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:38:45 2026 by rpki-client