Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS205418.roa
File: AS205418.roa (raw, json)
Hash identifier: mO+ZuFri2uKMcycmocFvVoO0Fq7x420W/nej1XS9TgU=
Subject key identifier: E8:54:7F:B0:F6:CA:B4:34:4E:68:55:4D:BB:98:13:06:A3:60:F2:8C
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 3D96A0F6F826BB908EE1C287959778286132CCF6
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS205418.roa
Signing time: Tue 19 Aug 2025 06:06:01 +0000
ROA not before: Tue 19 Aug 2025 06:01:01 +0000
ROA not after: Tue 18 Aug 2026 06:06:01 +0000
asID: 205418
IP address blocks: 143.20.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:49:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:96:a0:f6:f8:26:bb:90:8e:e1:c2:87:95:97:78:28:61:32:cc:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Aug 19 06:01:01 2025 GMT
Not After : Aug 18 06:06:01 2026 GMT
Subject: CN=E8547FB0F6CAB4344E68554DBB981306A360F28C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:66:73:04:04:7e:a3:86:ab:e9:10:72:33:b9:
ee:c3:3f:e2:c4:f4:82:00:5a:c1:76:db:6e:09:b7:
ce:fb:4c:92:a6:6b:c4:a4:ef:30:28:36:8e:2b:52:
bd:ba:e3:88:51:3a:89:9a:81:66:ac:e6:28:83:98:
80:f8:c8:af:bb:a4:07:6f:fc:11:9f:8d:cb:29:eb:
e5:4b:d4:7f:06:dc:16:ab:ff:7e:da:86:c5:03:a9:
52:76:2b:c3:8c:78:ab:74:0a:cf:08:7f:48:e6:93:
f6:d3:dc:67:15:7e:b9:77:0a:c5:fa:28:fd:2c:85:
a7:06:7f:4d:89:91:c3:d2:f6:17:af:3d:a2:e6:b4:
60:09:e9:70:d1:66:0b:5a:b0:40:47:ba:ac:8a:62:
41:54:a1:d6:a6:b2:92:36:79:cd:02:46:0d:24:68:
88:e4:9c:c8:9d:e8:49:df:d1:51:70:ca:b9:85:5a:
df:79:1c:6d:14:2d:ea:f1:63:7c:bf:74:06:bb:f1:
a4:c3:8b:7b:7f:9f:9b:1a:8a:3e:20:8a:5b:e3:b4:
66:cd:8d:8d:59:65:ef:9a:e1:ed:3f:95:2d:3a:60:
a5:f8:fe:0c:a5:51:f5:24:bf:c8:c8:36:90:6b:1b:
dd:19:9b:5a:a4:ed:fa:d5:3f:68:e5:e1:56:94:d2:
dc:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:54:7F:B0:F6:CA:B4:34:4E:68:55:4D:BB:98:13:06:A3:60:F2:8C
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS205418.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.147.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:81:29:2a:10:f2:c5:7c:0e:3e:9e:17:c6:16:55:06:d4:85:
ee:d1:03:1c:03:af:c7:35:14:f2:c7:53:3c:cb:9e:b6:43:01:
0a:0f:b6:46:96:7a:7e:da:b7:16:eb:46:9c:94:d7:4b:8d:bd:
35:64:bc:b5:16:50:0e:17:69:b9:12:05:82:a2:f4:e9:0a:64:
ed:29:de:a1:08:36:c5:6d:53:1e:69:ad:5c:46:2c:6a:5c:bc:
27:83:34:72:ed:87:24:00:22:3d:f9:c1:c3:ea:97:cc:a6:34:
69:9b:5b:31:40:2c:a7:76:5b:04:2d:cd:3d:1d:de:57:45:1b:
31:4c:51:81:c8:1b:98:dd:bb:a5:62:41:f7:a1:80:80:69:7c:
b9:b8:3f:8d:88:90:15:78:0d:33:87:14:a2:fb:da:26:0d:ad:
88:12:8a:7c:48:18:5e:24:77:4f:84:14:28:8d:20:5d:87:0c:
53:37:d9:de:eb:f3:c1:d4:fd:76:86:0d:00:a3:54:5c:18:8b:
22:68:6e:83:af:f8:6c:ce:52:8c:3d:9a:db:c4:c6:26:ea:46:
87:52:6a:58:65:50:f8:06:df:da:fd:91:5c:ac:ca:bb:c5:3a:
a7:0e:f1:bc:97:df:97:35:ef:52:b6:df:8b:ef:8d:15:00:57:
78:27:75:92
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUPZag9vgmu5CO4cKHlZd4KGEyzPYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk
ZWI5M2Q5ZDAeFw0yNTA4MTkwNjAxMDFaFw0yNjA4MTgwNjA2MDFaMDMxMTAvBgNV
BAMTKEU4NTQ3RkIwRjZDQUI0MzQ0RTY4NTU0REJCOTgxMzA2QTM2MEYyOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDZnMEBH6jhqvpEHIzue7DP+LE
9IIAWsF2224Jt877TJKma8Sk7zAoNo4rUr2644hROomagWas5iiDmID4yK+7pAdv
/BGfjcsp6+VL1H8G3Bar/37ahsUDqVJ2K8OMeKt0Cs8If0jmk/bT3GcVfrl3CsX6
KP0shacGf02JkcPS9hevPaLmtGAJ6XDRZgtasEBHuqyKYkFUodamspI2ec0CRg0k
aIjknMid6Enf0VFwyrmFWt95HG0ULerxY3y/dAa78aTDi3t/n5saij4gilvjtGbN
jY1ZZe+a4e0/lS06YKX4/gylUfUkv8jINpBrG90Zm1qk7frVP2jl4VaU0tyvAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQU6FR/sPbKtDROaFVNu5gTBqNg8owwHwYDVR0j
BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2
MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2
NVBaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt
NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTMjA1NDE4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjxST
MA0GCSqGSIb3DQEBCwUAA4IBAQCPgSkqEPLFfA4+nhfGFlUG1IXu0QMcA6/HNRTy
x1M8y562QwEKD7ZGlnp+2rcW60aclNdLjb01ZLy1FlAOF2m5EgWCovTpCmTtKd6h
CDbFbVMeaa1cRixqXLwngzRy7YckACI9+cHD6pfMpjRpm1sxQCyndlsELc09Hd5X
RRsxTFGByBuY3bulYkH3oYCAaXy5uD+NiJAVeA0zhxSi+9omDa2IEop8SBheJHdP
hBQojSBdhwxTN9ne6/PB1P12hg0Ao1RcGIsiaG6Dr/hszlKMPZrbxMYm6kaHUmpY
ZVD4Bt/a/ZFcrMq7xTqnDvG8l9+XNe9Stt+L740VAFd4J3WS
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:37:57 2025 by rpki-client