Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS214025.roa
File: AS214025.roa (raw, json)
Hash identifier: mr1yu7MijLjvffn/OD02nUeUYnAM2zURVW9Ff41D3Zk=
Subject key identifier: 4F:DF:98:C0:0B:08:28:A5:C2:35:DF:63:C1:48:6D:6C:A3:8F:A7:67
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 4CE56CC4B3F91EA2F6B14935317D690FFB0D9CED
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS214025.roa
Signing time: Mon 04 May 2026 19:03:28 +0000
ROA not before: Mon 04 May 2026 18:58:28 +0000
ROA not after: Mon 03 May 2027 19:03:28 +0000
asID: 214025
IP address blocks: 143.20.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:e5:6c:c4:b3:f9:1e:a2:f6:b1:49:35:31:7d:69:0f:fb:0d:9c:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: May 4 18:58:28 2026 GMT
Not After : May 3 19:03:28 2027 GMT
Subject: CN=4FDF98C00B0828A5C235DF63C1486D6CA38FA767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f2:30:22:2d:1c:8a:0f:5d:dd:c3:0b:c7:98:
49:59:48:50:4d:7a:85:2b:88:db:d8:4e:ad:5a:a0:
0f:0b:1b:26:cc:7d:5c:49:e6:26:a9:ca:b1:04:71:
5d:b2:65:55:48:69:1f:43:55:c0:cc:38:c2:50:96:
c1:e8:86:c7:ba:d2:66:78:d5:05:8f:e4:72:70:3a:
7f:bc:09:be:3e:ba:e2:b3:db:e5:ee:b0:da:be:40:
97:0b:28:5c:f4:b9:bb:cf:c2:b1:87:1d:12:c5:82:
5f:37:92:b6:33:d7:d5:45:32:7d:2c:a0:e1:23:1e:
21:41:d6:c8:9f:3c:b4:63:41:b8:14:65:1a:a2:63:
b9:7c:5e:6f:82:8a:6c:03:05:04:38:0a:ec:f8:f7:
fa:ba:31:58:3c:34:a5:0b:31:0d:b1:e5:d8:f5:42:
90:5e:7e:4b:57:2d:c8:74:61:ac:b9:19:96:34:6b:
19:e7:8c:b4:28:51:6b:c0:8c:04:27:4c:9d:90:4c:
8c:45:22:64:4e:80:6a:27:59:51:0b:5f:f2:d0:8b:
41:d6:32:50:e0:0a:9c:78:af:44:a0:02:92:14:58:
de:5c:e5:75:bb:df:76:d1:35:40:f6:1e:0f:40:f6:
f2:d9:4d:42:21:94:b0:1b:0f:af:ce:16:90:da:e5:
42:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:DF:98:C0:0B:08:28:A5:C2:35:DF:63:C1:48:6D:6C:A3:8F:A7:67
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS214025.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.65.0/24
Signature Algorithm: sha256WithRSAEncryption
50:12:cb:32:1b:7b:c5:e2:23:da:e1:5c:90:26:8f:9a:31:71:
c1:c1:23:97:60:46:38:c6:de:7f:08:9f:11:a8:69:e5:87:6a:
0b:f6:84:a8:e6:81:ed:06:0a:d6:b9:c9:85:c9:f0:88:b3:7f:
0f:49:46:2e:ab:e8:b5:aa:c7:33:3e:e6:4d:fb:9e:08:11:3b:
5f:28:1c:36:44:7f:36:78:0c:1f:f1:98:94:f6:ba:e9:b8:2f:
b1:cb:bc:5d:c2:5c:31:f7:c6:21:1c:4d:10:7b:e3:c4:2b:ba:
8a:71:be:b3:67:c0:32:cf:e5:6d:31:21:5d:3b:da:93:00:76:
dc:bc:cc:45:1c:09:22:11:ce:38:c6:22:39:26:75:4d:1c:15:
ed:51:f3:84:0d:a3:df:41:bc:9f:33:d9:62:57:23:d7:66:ff:
69:9b:d5:23:37:49:95:32:9d:ba:5d:ff:5d:9d:6a:17:cf:1b:
79:bc:ed:c8:f3:57:86:8d:21:1b:54:4c:3c:5a:f8:01:3c:8f:
f3:c2:61:f3:4c:a0:6b:09:18:dc:2a:50:68:de:49:71:e7:a1:
e9:a0:b5:b0:b7:c5:6c:e4:3e:77:a3:d7:33:20:0f:2f:8d:3f:
85:a3:26:c2:d1:24:3f:03:29:78:cd:32:d8:bf:86:67:ff:8d:
2a:2d:aa:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:38:29 2026 by rpki-client