Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS204535.roa
File: AS204535.roa (raw, json)
Hash identifier: kBHcd6Ke7p/LG79hCjXZTmKcoDRHb69sxEo+awx3rAY=
Subject key identifier: 6A:EE:4B:9E:2F:E5:26:5B:41:8E:E7:51:E6:2A:A5:8C:7D:45:06:2D
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 737D490F10BAE8F35B333BB60AC8AB9B69112E74
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS204535.roa
Signing time: Fri 08 May 2026 08:30:02 +0000
ROA not before: Fri 08 May 2026 08:25:02 +0000
ROA not after: Fri 07 May 2027 08:30:02 +0000
asID: 204535
IP address blocks: 143.20.53.0/24 maxlen: 24
143.20.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 08:28:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:7d:49:0f:10:ba:e8:f3:5b:33:3b:b6:0a:c8:ab:9b:69:11:2e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: May 8 08:25:02 2026 GMT
Not After : May 7 08:30:02 2027 GMT
Subject: CN=6AEE4B9E2FE5265B418EE751E62AA58C7D45062D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f3:18:cf:f7:1e:09:5f:36:c6:dd:b8:9f:f9:
15:fd:c4:6e:94:ae:f9:00:8f:61:eb:11:69:a8:5d:
bf:57:51:71:53:b8:65:d3:e4:b6:ec:c0:fc:ac:ed:
d0:b1:31:71:83:ee:bd:90:22:26:a0:0d:ca:8d:b6:
51:07:83:b1:28:f3:fd:33:a7:f2:5c:7b:32:f5:91:
f1:5e:de:b3:4e:16:2f:33:b6:06:5b:92:d4:6d:9a:
0d:2b:c3:63:2c:f2:78:86:33:3b:69:97:38:bd:a2:
01:87:93:63:14:b3:c8:f3:aa:bb:e7:45:e8:9b:23:
19:ea:38:ab:3c:75:cb:57:9c:8d:1f:3f:7a:7b:dd:
53:bf:80:26:c8:56:58:f8:08:4a:48:87:f1:a6:da:
0d:86:e2:f7:80:7a:24:0f:de:21:5a:19:b5:5e:2b:
19:87:5e:b2:f8:83:df:b0:36:21:d7:0b:7d:c0:9b:
bb:14:18:af:65:b4:23:56:3b:52:7c:ee:bd:a2:89:
65:b8:c3:7a:91:66:60:bc:62:dd:62:f9:e2:ca:44:
8c:b5:55:99:f9:12:17:57:0c:df:13:ab:9d:a2:b9:
2d:38:fb:ef:41:5b:a1:22:40:84:5e:a1:10:13:c9:
78:78:ef:13:12:af:68:3b:dc:7b:81:99:ee:5f:d9:
11:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:EE:4B:9E:2F:E5:26:5B:41:8E:E7:51:E6:2A:A5:8C:7D:45:06:2D
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS204535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.53.0/24
143.20.132.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:2f:36:6c:53:72:6b:41:27:05:7d:66:57:fe:d8:2a:4f:83:
4a:20:65:62:70:ae:67:4e:b6:18:24:8b:4f:d8:0f:33:a1:c0:
43:ce:d1:3b:08:00:29:0c:9f:eb:24:2a:5b:18:5d:e2:91:70:
af:b0:94:c4:4e:87:f4:3f:e1:cb:72:1d:97:55:49:eb:79:82:
53:fd:66:77:84:da:37:1e:7b:aa:21:c5:b4:32:d9:f9:6a:3d:
d6:79:90:bc:69:09:a4:fb:50:04:36:d5:4f:aa:3f:f0:57:ec:
24:5a:fd:13:7f:58:9c:dc:cb:9e:87:13:3e:eb:ea:fb:11:22:
a1:13:e0:4f:37:ff:fa:bc:e0:9c:5b:85:e1:11:b0:80:49:1b:
d5:3c:e4:2c:24:89:c0:e8:21:7f:18:0e:9e:4e:0f:df:8f:31:
16:6c:d2:b9:32:4c:8b:a1:2c:d9:e8:31:8a:bd:6f:60:13:6c:
03:a1:39:14:ff:8a:85:dd:85:a3:5b:97:dd:ec:a1:3d:a6:54:
bf:08:8e:0e:4c:64:fa:0f:5b:df:b1:4a:73:ec:01:7e:13:6d:
5e:46:23:8d:54:71:9a:8d:41:5d:b2:bf:1e:c3:f3:27:34:ae:
b7:bd:2c:7d:0a:69:56:1d:4a:87:8e:e1:ed:fd:99:44:98:ac:
ce:d6:eb:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:25:23 2026 by rpki-client