Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS208723.roa
File: AS208723.roa (raw, json)
Hash identifier: x+IdxfNhlV/14JWDAoqgtMGMCfd0vM9jwHa4Md/FmJ0=
Subject key identifier: 04:10:BC:30:A4:50:EA:A3:C1:3B:3F:B7:94:A1:81:4F:06:6E:1D:98
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 01AF756E545846B55A1ACB60FF787E7C1F68BD40
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS208723.roa
Signing time: Sun 10 May 2026 18:47:11 +0000
ROA not before: Sun 10 May 2026 18:42:11 +0000
ROA not after: Sun 09 May 2027 18:47:11 +0000
asID: 208723
IP address blocks: 143.20.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 08:28:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:af:75:6e:54:58:46:b5:5a:1a:cb:60:ff:78:7e:7c:1f:68:bd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: May 10 18:42:11 2026 GMT
Not After : May 9 18:47:11 2027 GMT
Subject: CN=0410BC30A450EAA3C13B3FB794A1814F066E1D98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fa:54:42:a9:3d:d2:b3:59:e4:04:f8:7f:43:
e5:07:c6:b3:23:29:32:d5:fd:90:61:f1:63:69:90:
19:62:96:14:28:13:4b:fa:86:0b:5b:0d:6e:8f:30:
45:31:e2:7a:17:2b:7e:db:87:2a:3b:a3:aa:cb:a4:
83:ee:4f:74:4f:86:4d:25:6d:a2:b5:b1:53:ee:09:
dd:24:45:85:56:e8:e2:10:ec:d5:3e:c6:8e:5f:64:
5d:4f:bc:cf:63:22:a7:72:00:81:f2:c3:9c:35:c8:
de:79:79:26:c9:de:5c:cd:2d:cb:3f:74:13:ca:cb:
97:7a:e7:8e:35:b1:1d:13:57:06:d9:c0:4d:61:36:
09:88:c5:77:00:fc:d6:44:c6:3f:3f:8f:b7:24:76:
a5:75:6c:fc:9e:ff:82:7d:a5:c2:56:dc:cd:88:41:
4d:38:7f:b3:29:b3:a5:98:10:2d:e3:27:39:b3:1b:
76:e7:68:de:6e:6a:93:46:cf:8a:31:9c:7d:83:6a:
49:bd:65:95:13:d2:43:23:e1:c2:95:4b:19:18:b4:
c9:e5:48:f6:a8:78:0c:74:1b:a6:8b:67:3d:c2:9a:
83:e5:bd:ad:c8:fc:83:23:ee:70:9e:e0:f3:cf:21:
d8:e1:e3:8b:a0:ef:72:f3:f2:15:ef:92:73:cb:c1:
a0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:10:BC:30:A4:50:EA:A3:C1:3B:3F:B7:94:A1:81:4F:06:6E:1D:98
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS208723.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.69.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:6e:3d:ec:f4:65:75:be:61:bf:a7:e4:0d:19:3d:73:82:48:
05:da:e6:cb:03:23:41:03:28:2e:4d:49:68:a6:19:4e:77:8a:
4c:3f:13:65:5e:40:3d:62:e3:24:53:30:bb:fa:05:6a:b3:6f:
c0:d2:e6:32:71:09:2c:d5:82:15:72:fd:80:33:c9:05:e7:85:
69:f3:95:54:3f:e3:22:86:f9:c2:41:80:7b:23:2d:50:de:e0:
f3:e1:75:6b:95:c6:f7:c4:f1:e0:c2:22:60:a9:05:f3:36:df:
ec:90:13:2b:34:cd:68:a5:52:09:93:cd:16:85:7b:68:09:7e:
44:f0:d6:fa:3c:b3:65:1c:84:1f:75:fb:ad:36:c5:0f:7f:b8:
77:b3:d4:d2:35:04:6d:42:d1:04:93:60:81:8b:2c:1b:15:40:
10:8b:86:a4:11:2b:23:9b:0b:1b:bc:66:41:41:e2:bd:0c:11:
90:80:90:80:f5:a1:8f:22:d8:02:4d:d4:36:b1:5e:c6:bc:3d:
da:16:17:b9:a2:a6:91:3d:79:f6:3e:7e:4d:9c:c0:48:ad:65:
40:4a:76:3d:44:d4:ea:88:4d:84:97:39:42:05:2b:07:17:ac:
8e:b8:fe:a8:54:bf:3d:65:c4:6e:45:fe:89:93:ae:5c:a5:7a:
2c:49:a4:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:38:06 2026 by rpki-client