Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS213482.roa
File: AS213482.roa (raw, json)
Hash identifier: wDr9swy7uP0PXflZbs0QTB9I/pOEj4DqmYGfMHD+veo=
Subject key identifier: F8:F2:FF:32:3A:1C:12:F6:07:C4:10:E8:F8:67:DB:C5:B0:C2:A7:5F
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 1A78F44306C49AC1FEBCFE0A46188C1E605A6AE9
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS213482.roa
Signing time: Fri 12 Sep 2025 22:04:01 +0000
ROA not before: Fri 12 Sep 2025 21:59:01 +0000
ROA not after: Fri 11 Sep 2026 22:04:01 +0000
asID: 213482
IP address blocks: 143.20.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:18:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:78:f4:43:06:c4:9a:c1:fe:bc:fe:0a:46:18:8c:1e:60:5a:6a:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 12 21:59:01 2025 GMT
Not After : Sep 11 22:04:01 2026 GMT
Subject: CN=F8F2FF323A1C12F607C410E8F867DBC5B0C2A75F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c3:10:09:64:8d:d7:25:7a:ca:62:50:83:33:
68:3f:d2:81:58:b9:72:5a:3b:b8:92:99:01:3f:80:
26:95:e7:c1:76:af:a8:a7:8d:71:fa:20:00:10:1c:
3f:13:79:26:bf:9b:45:28:aa:e9:ba:e7:89:03:38:
d4:ba:12:22:b5:f4:76:37:5b:12:fe:55:1b:8b:64:
9c:9e:c3:92:6c:88:57:4e:c1:7a:ab:b9:02:d4:bb:
7d:f9:70:e1:0d:e9:48:c4:7d:54:64:0f:a6:f2:d6:
83:95:ca:60:95:03:d0:a4:3f:83:f5:1e:b0:4b:c8:
13:03:a4:e0:2d:2a:43:59:6b:86:b3:26:63:c3:7d:
b6:69:93:89:ef:4b:b6:a3:7b:85:4a:bb:15:27:a1:
dc:b2:9c:d6:26:de:12:22:ed:26:9d:47:79:af:63:
30:ef:39:ae:6c:39:d2:88:e4:17:3f:33:66:bb:42:
a5:59:88:20:42:f6:0b:c3:fa:7f:5b:76:3c:d7:70:
42:b8:ab:d4:52:72:55:08:1c:c1:7c:f5:74:6e:ff:
2b:34:00:9c:e5:4d:ee:9f:65:30:ad:58:0c:fa:2b:
4b:ef:bb:17:85:40:db:f4:d5:2a:7f:d7:77:71:4d:
f2:a7:bb:9a:03:38:80:26:bc:70:73:12:b8:db:04:
eb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F2:FF:32:3A:1C:12:F6:07:C4:10:E8:F8:67:DB:C5:B0:C2:A7:5F
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS213482.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.99.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:d4:20:a0:39:a6:91:65:fc:c9:7c:7e:8c:22:a7:54:b8:80:
56:6f:88:5b:7f:c6:18:3d:e5:16:0d:1c:18:d2:82:0a:49:13:
b4:fc:1e:5b:b4:87:d3:24:77:c5:3b:ff:7b:28:7c:21:b9:0e:
03:15:b8:fe:df:ce:d8:f9:7f:61:40:21:65:08:ed:61:d3:cf:
2d:e4:4f:a6:93:28:69:2f:7d:31:2f:9e:6c:d7:01:f9:68:88:
fc:cb:02:5e:fc:af:ad:44:22:4a:22:cd:ce:bd:cb:34:29:81:
04:f4:ae:b9:b9:14:c4:0a:d3:7c:a1:12:8c:5e:e7:58:61:47:
18:6d:49:1b:45:4f:73:93:7e:95:9f:b3:75:06:2f:01:8a:e1:
35:a3:d6:cc:46:fc:b7:d2:19:f9:b8:e9:f0:e3:e2:a2:1c:b0:
c0:b8:4c:8c:31:ba:86:73:3c:94:48:99:fb:d8:19:9e:b3:b4:
7c:fe:79:ed:e7:4f:a3:f3:ad:1d:83:db:f0:0e:e1:ae:69:5b:
fb:5d:fd:b0:b1:9c:34:f5:ec:d2:ee:dc:b2:08:c5:27:29:b4:
b0:5b:08:20:69:a8:c7:58:c0:0d:9b:05:7b:fe:6d:a0:b4:02:
d8:f8:3a:9b:1f:ed:55:f8:4f:46:15:90:d9:01:20:f0:48:f9:
74:76:68:80
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUGnj0QwbEmsH+vP4KRhiMHmBaaukwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk
ZWI5M2Q5ZDAeFw0yNTA5MTIyMTU5MDFaFw0yNjA5MTEyMjA0MDFaMDMxMTAvBgNV
BAMTKEY4RjJGRjMyM0ExQzEyRjYwN0M0MTBFOEY4NjdEQkM1QjBDMkE3NUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+wxAJZI3XJXrKYlCDM2g/0oFY
uXJaO7iSmQE/gCaV58F2r6injXH6IAAQHD8TeSa/m0Uoqum654kDONS6EiK19HY3
WxL+VRuLZJyew5JsiFdOwXqruQLUu335cOEN6UjEfVRkD6by1oOVymCVA9CkP4P1
HrBLyBMDpOAtKkNZa4azJmPDfbZpk4nvS7aje4VKuxUnodyynNYm3hIi7SadR3mv
YzDvOa5sOdKI5Bc/M2a7QqVZiCBC9gvD+n9bdjzXcEK4q9RSclUIHMF89XRu/ys0
AJzlTe6fZTCtWAz6K0vvuxeFQNv01Sp/13dxTfKnu5oDOIAmvHBzErjbBOuJAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQU+PL/MjocEvYHxBDo+GfbxbDCp18wHwYDVR0j
BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2
MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2
NVBaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt
NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTMjEzNDgyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjxRj
MA0GCSqGSIb3DQEBCwUAA4IBAQAv1CCgOaaRZfzJfH6MIqdUuIBWb4hbf8YYPeUW
DRwY0oIKSRO0/B5btIfTJHfFO/97KHwhuQ4DFbj+387Y+X9hQCFlCO1h088t5E+m
kyhpL30xL55s1wH5aIj8ywJe/K+tRCJKIs3Ovcs0KYEE9K65uRTECtN8oRKMXudY
YUcYbUkbRU9zk36Vn7N1Bi8BiuE1o9bMRvy30hn5uOnw4+KiHLDAuEyMMbqGczyU
SJn72Bmes7R8/nnt50+j860dg9vwDuGuaVv7Xf2wsZw09ezS7tyyCMUnKbSwWwgg
aajHWMANmwV7/m2gtALY+DqbH+1V+E9GFZDZASDwSPl0dmiA
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:02:24 2025 by rpki-client