Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS215152.roa
File: AS215152.roa (raw, json)
Hash identifier: FJfiqZ/gb5wpfX01tPSaPq3jvbN9N7K9Mf9vSPagoVo=
Subject key identifier: A2:E1:5E:6A:B7:55:B7:3E:FD:58:01:E9:D9:5C:38:B8:63:76:33:89
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 446A3C1056ADFC07FADEC664C0C85CE439C02DAB
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS215152.roa
Signing time: Sat 09 May 2026 01:01:21 +0000
ROA not before: Sat 09 May 2026 00:56:21 +0000
ROA not after: Sat 08 May 2027 01:01:21 +0000
asID: 215152
IP address blocks: 143.20.70.0/24 maxlen: 24
143.20.110.0/24 maxlen: 24
143.20.131.0/24 maxlen: 24
143.20.147.0/24 maxlen: 24
143.20.167.0/24 maxlen: 24
143.20.168.0/24 maxlen: 24
143.20.196.0/24 maxlen: 24
143.20.228.0/24 maxlen: 24
143.20.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:6a:3c:10:56:ad:fc:07:fa:de:c6:64:c0:c8:5c:e4:39:c0:2d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: May 9 00:56:21 2026 GMT
Not After : May 8 01:01:21 2027 GMT
Subject: CN=A2E15E6AB755B73EFD5801E9D95C38B863763389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:35:9d:31:59:36:aa:15:78:4e:e9:a1:45:58:
9a:21:2f:cd:cf:7a:45:76:9a:ea:72:80:f2:d0:f9:
a6:a6:88:72:d6:0e:bb:49:d8:56:ab:99:74:77:08:
2e:39:04:aa:70:a7:dd:98:22:2f:ee:af:c9:91:af:
ee:cd:20:0e:15:90:8d:e9:bb:e6:d0:4d:c8:37:bd:
09:c5:bf:75:aa:6c:c7:f0:58:a1:9c:87:c7:18:0d:
7a:88:a3:6a:eb:92:6d:25:1c:e7:e4:35:7d:b6:b5:
08:95:5b:83:94:77:a5:95:b0:36:b7:f5:0b:79:84:
1f:18:a4:ff:66:5b:43:a9:3b:a7:3b:f5:1c:f0:f8:
e7:fb:ca:16:e3:36:8f:6b:24:14:51:df:f3:ca:91:
18:f7:22:52:5e:da:45:d6:50:d2:78:2f:22:74:82:
ff:1e:8b:ec:bd:db:20:6b:ce:b9:41:3a:f9:b0:26:
34:ff:fc:3d:b8:5f:fd:b2:e4:9a:4e:57:6f:42:00:
01:cc:e6:2a:d7:38:26:0b:58:d5:27:7d:8c:95:fb:
a1:1d:04:7e:4d:b5:f5:36:62:0c:4b:3d:f9:c9:c6:
fd:b8:e9:14:0f:3d:2e:ce:01:c4:61:a3:88:ff:c5:
57:2e:b5:0d:88:2c:7c:87:0c:cd:c5:59:a2:00:0f:
c6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E1:5E:6A:B7:55:B7:3E:FD:58:01:E9:D9:5C:38:B8:63:76:33:89
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS215152.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.70.0/24
143.20.110.0/24
143.20.131.0/24
143.20.147.0/24
143.20.167.0-143.20.168.255
143.20.196.0/24
143.20.228.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:89:e6:5f:7d:8c:19:4b:10:6d:35:06:b2:ec:03:83:4b:14:
6d:3d:27:77:52:45:8a:66:9c:cb:5e:16:27:cd:0b:70:ee:21:
1c:57:2d:72:0b:de:48:d3:36:10:df:cd:8f:94:93:7f:80:ac:
18:5b:50:27:c0:02:5f:eb:0c:47:c7:80:a9:cc:b5:71:a6:6b:
7e:08:77:3b:36:7e:a4:75:73:5a:c1:1d:85:7c:6c:b6:8c:77:
fb:cf:9f:6d:33:74:ab:79:74:05:55:52:65:92:40:25:22:dd:
51:4a:32:68:b5:b0:61:ab:5e:59:dc:40:2b:37:43:2e:af:a7:
be:05:fd:4d:a8:0f:25:28:56:47:2b:a9:95:34:1e:2a:34:f1:
73:f0:c7:64:f8:59:0d:85:71:d7:7d:98:13:b2:6d:f6:bf:15:
61:4c:da:5a:e0:33:65:87:53:da:51:23:62:b0:67:a4:59:03:
9d:5a:fe:88:fa:22:88:2f:b4:d5:ba:a6:d3:0d:d1:c9:e0:25:
79:8b:49:45:8a:5e:b4:45:a7:65:78:95:0f:8d:0a:62:4a:42:
3f:af:10:5f:49:01:ad:4d:63:1d:85:4b:ae:12:13:39:1e:d7:
1d:85:97:c9:f0:cd:eb:dd:19:31:47:f5:02:89:23:fa:b4:22:
cb:1d:5d:7f
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIURGo8EFat/Af63sZkwMhc5DnALaswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk
ZWI5M2Q5ZDAeFw0yNjA1MDkwMDU2MjFaFw0yNzA1MDgwMTAxMjFaMDMxMTAvBgNV
BAMTKEEyRTE1RTZBQjc1NUI3M0VGRDU4MDFFOUQ5NUMzOEI4NjM3NjMzODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfNZ0xWTaqFXhO6aFFWJohL83P
ekV2mupygPLQ+aamiHLWDrtJ2FarmXR3CC45BKpwp92YIi/ur8mRr+7NIA4VkI3p
u+bQTcg3vQnFv3WqbMfwWKGch8cYDXqIo2rrkm0lHOfkNX22tQiVW4OUd6WVsDa3
9Qt5hB8YpP9mW0OpO6c79Rzw+Of7yhbjNo9rJBRR3/PKkRj3IlJe2kXWUNJ4LyJ0
gv8ei+y92yBrzrlBOvmwJjT//D24X/2y5JpOV29CAAHM5irXOCYLWNUnfYyV+6Ed
BH5NtfU2YgxLPfnJxv246RQPPS7OAcRho4j/xVcutQ2ILHyHDM3FWaIAD8Y3AgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUouFeardVtz79WAHp2Vw4uGN2M4kwHwYDVR0j
BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2
MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2
NVBaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt
NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTMjE1MTUyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQAjxRG
AwQAjxRuAwQAjxSDAwQAjxSTMAwDBACPFKcDBACPFKgDBACPFMQDBAGPFOQwDQYJ
KoZIhvcNAQELBQADggEBAI2J5l99jBlLEG01BrLsA4NLFG09J3dSRYpmnMteFifN
C3DuIRxXLXIL3kjTNhDfzY+Uk3+ArBhbUCfAAl/rDEfHgKnMtXGma34Idzs2fqR1
c1rBHYV8bLaMd/vPn20zdKt5dAVVUmWSQCUi3VFKMmi1sGGrXlncQCs3Qy6vp74F
/U2oDyUoVkcrqZU0Hio08XPwx2T4WQ2Fcdd9mBOybfa/FWFM2lrgM2WHU9pRI2Kw
Z6RZA51a/oj6IogvtNW6ptMN0cngJXmLSUWKXrRFp2V4lQ+NCmJKQj+vEF9JAa1N
Yx2FS64SEzke1x2Fl8nwzevdGTFH9QKJI/q0IssdXX8=
-----END CERTIFICATE-----
Generated at Wed May 13 00:38:29 2026 by rpki-client