Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS205548.roa
File: AS205548.roa (raw, json)
Hash identifier: pUMuyfLHlLTLXhKPLTEQd3MnE33l3ufBKkz+XwW8wVw=
Subject key identifier: 74:5F:47:A8:25:21:7E:D8:58:4C:0E:16:82:3D:61:04:A9:59:E9:1A
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 2767DF84E74F28B4AD5EA695E412E41ECC0B22F9
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS205548.roa
Signing time: Wed 15 Oct 2025 11:27:54 +0000
ROA not before: Wed 15 Oct 2025 11:22:54 +0000
ROA not after: Wed 14 Oct 2026 11:27:54 +0000
asID: 205548
IP address blocks: 143.20.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:18:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:67:df:84:e7:4f:28:b4:ad:5e:a6:95:e4:12:e4:1e:cc:0b:22:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Oct 15 11:22:54 2025 GMT
Not After : Oct 14 11:27:54 2026 GMT
Subject: CN=745F47A825217ED8584C0E16823D6104A959E91A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bf:e2:1c:c2:c0:b2:ba:85:ef:1a:cd:20:3a:
b6:a9:da:00:96:1a:e3:96:d2:ad:73:d1:09:04:d9:
99:08:74:4d:6f:04:d6:34:d9:32:ce:2a:c3:7e:8a:
2b:aa:34:c0:0e:8a:81:22:6f:41:76:60:04:1c:ed:
c9:44:7e:c4:97:a8:da:2e:e3:7c:d9:e5:d8:c0:c9:
75:c9:94:b9:c2:36:25:bf:96:49:c4:10:d4:d4:60:
38:e5:72:ed:c3:cd:70:78:5b:8e:d4:39:19:6b:3a:
f8:9b:ec:80:de:a8:c7:0e:de:31:d9:15:22:e6:f1:
9a:a1:31:4b:ed:21:00:25:6e:50:f3:a8:31:d3:03:
d1:68:ad:ec:84:e4:04:cd:9d:e9:74:d6:a6:a9:e4:
75:41:ca:b1:d2:73:7b:3c:ba:5e:4a:be:1a:56:25:
cd:56:cb:aa:b8:09:22:d1:dd:dd:c0:66:2a:a4:6f:
25:0e:10:eb:1d:6b:88:c5:c2:8f:75:eb:7e:a0:81:
ab:5b:63:5f:8f:90:b8:d3:75:8a:db:48:d7:8b:ec:
d3:77:12:6a:57:05:ca:79:fd:6f:ef:9a:5b:68:47:
68:9b:74:21:00:ca:de:30:63:16:b8:5e:34:0c:c3:
08:8b:31:af:33:a5:64:7a:4a:02:58:62:ba:9d:f8:
ca:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:5F:47:A8:25:21:7E:D8:58:4C:0E:16:82:3D:61:04:A9:59:E9:1A
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS205548.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.156.0/24
Signature Algorithm: sha256WithRSAEncryption
04:10:b3:88:e1:93:de:e8:78:ae:ec:23:ba:d7:cc:8c:36:a8:
d2:fa:8c:14:2f:f3:22:dc:be:e2:b6:52:8d:02:32:7f:30:d9:
93:cb:b8:32:87:34:dd:ed:d8:27:95:d3:63:ae:9b:77:1d:22:
0c:bf:19:ff:72:d8:76:f7:ea:6c:09:98:c6:57:6f:81:66:fd:
80:41:44:f2:32:9b:60:56:a9:06:1a:4b:19:07:cd:4a:00:e7:
da:3d:5c:d3:d5:3e:af:1a:c6:44:f6:c5:c6:59:c0:f6:76:d9:
f6:84:41:4a:60:fe:84:c9:bb:48:65:41:68:eb:0e:50:1c:61:
0d:b2:d5:6a:7e:c9:98:64:3e:e6:93:4f:db:6a:f7:89:43:36:
a4:92:9d:d8:ab:e1:0e:97:38:22:ec:d7:58:19:f1:b5:7f:04:
ee:ed:c3:37:ae:73:11:e5:5a:99:ba:b7:d2:61:8e:77:73:37:
e8:1e:9d:4b:fe:2d:80:36:ae:c9:e9:3a:d8:0e:fb:71:04:eb:
cb:e0:d7:ed:9c:47:78:5e:7b:f6:35:4c:d9:38:b0:4f:36:ee:
a2:e9:15:de:a8:7d:01:04:c2:35:cb:1b:fa:81:ea:9f:f3:92:
6b:4b:97:f5:78:b6:03:a9:3a:58:08:b7:c0:ad:1f:b3:31:12:
ed:3e:d6:61
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUJ2ffhOdPKLStXqaV5BLkHswLIvkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk
ZWI5M2Q5ZDAeFw0yNTEwMTUxMTIyNTRaFw0yNjEwMTQxMTI3NTRaMDMxMTAvBgNV
BAMTKDc0NUY0N0E4MjUyMTdFRDg1ODRDMEUxNjgyM0Q2MTA0QTk1OUU5MUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNv+IcwsCyuoXvGs0gOrap2gCW
GuOW0q1z0QkE2ZkIdE1vBNY02TLOKsN+iiuqNMAOioEib0F2YAQc7clEfsSXqNou
43zZ5djAyXXJlLnCNiW/lknEENTUYDjlcu3DzXB4W47UORlrOvib7IDeqMcO3jHZ
FSLm8ZqhMUvtIQAlblDzqDHTA9ForeyE5ATNnel01qap5HVByrHSc3s8ul5KvhpW
Jc1Wy6q4CSLR3d3AZiqkbyUOEOsda4jFwo91636ggatbY1+PkLjTdYrbSNeL7NN3
EmpXBcp5/W/vmltoR2ibdCEAyt4wYxa4XjQMwwiLMa8zpWR6SgJYYrqd+MpJAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUdF9HqCUhfthYTA4Wgj1hBKlZ6RowHwYDVR0j
BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2
MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2
NVBaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt
NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTMjA1NTQ4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjxSc
MA0GCSqGSIb3DQEBCwUAA4IBAQAEELOI4ZPe6Hiu7CO618yMNqjS+owUL/Mi3L7i
tlKNAjJ/MNmTy7gyhzTd7dgnldNjrpt3HSIMvxn/cth29+psCZjGV2+BZv2AQUTy
MptgVqkGGksZB81KAOfaPVzT1T6vGsZE9sXGWcD2dtn2hEFKYP6EybtIZUFo6w5Q
HGENstVqfsmYZD7mk0/baveJQzakkp3Yq+EOlzgi7NdYGfG1fwTu7cM3rnMR5VqZ
urfSYY53czfoHp1L/i2ANq7J6TrYDvtxBOvL4NftnEd4Xnv2NUzZOLBPNu6i6RXe
qH0BBMI1yxv6geqf85JrS5f1eLYDqTpYCLfArR+zMRLtPtZh
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:02:22 2025 by rpki-client