Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS215224.roa
File: AS215224.roa (raw, json)
Hash identifier: wy8/F8gfCCM8EELtQFB0/JeMqHuj/jsicj1Fo9VYfdg=
Subject key identifier: 04:21:84:CF:E4:BB:90:37:C0:7A:12:FF:73:26:EE:2B:51:07:B8:67
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 0C2046450A35591E2E4D72C4A76AA6479016F054
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS215224.roa
Signing time: Mon 09 Nov 2026 12:05:26 +0000
ROA not before: Mon 09 Nov 2026 12:00:26 +0000
ROA not after: Mon 08 Nov 2027 12:05:26 +0000
asID: 215224
IP address blocks: 143.20.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 01:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:20:46:45:0a:35:59:1e:2e:4d:72:c4:a7:6a:a6:47:90:16:f0:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Nov 9 12:00:26 2026 GMT
Not After : Nov 8 12:05:26 2027 GMT
Subject: CN=042184CFE4BB9037C07A12FF7326EE2B5107B867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:41:27:39:73:b8:29:ff:47:80:72:21:9c:1a:
ad:e0:72:96:70:58:c6:f7:96:dc:96:9b:97:5a:54:
47:d8:17:93:ec:1f:64:eb:23:3e:a5:da:41:85:52:
09:bd:67:8a:3a:79:61:23:6d:b7:1f:14:2f:57:b6:
68:ee:ab:6d:bd:c8:98:7e:39:f1:15:ff:43:de:49:
7f:2f:db:db:a8:0c:f4:b0:26:75:8f:75:b2:22:b2:
5c:9d:05:9b:ce:ce:b7:52:24:2d:ad:e2:1c:2d:36:
02:42:20:16:3d:24:a6:de:2a:ac:d5:f9:10:38:9c:
3d:ae:94:91:3d:69:44:b5:19:dd:8b:82:46:28:dc:
8e:4a:26:ff:3c:f3:b9:91:73:de:cd:d8:18:25:84:
3d:9b:d9:a5:dd:a0:b1:20:4a:2d:97:1e:02:1c:4d:
9c:6c:d4:59:9f:28:73:f1:91:69:93:b4:f0:89:ff:
80:2e:4d:68:db:86:bb:e9:7a:d7:ce:27:79:4b:bb:
67:6d:3f:cb:25:dd:85:44:b5:95:b4:53:39:b7:4a:
1b:0a:a0:8d:5c:29:78:ff:01:95:5c:68:f6:fa:1f:
75:de:70:da:b4:54:9c:c1:82:8c:c5:61:28:07:09:
94:eb:c9:c8:e9:b9:53:ee:c1:b3:80:19:58:56:a5:
1d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:21:84:CF:E4:BB:90:37:C0:7A:12:FF:73:26:EE:2B:51:07:B8:67
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS215224.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.220.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:7e:bd:ff:e9:75:11:3c:93:fc:7f:db:56:9d:87:5c:8e:26:
71:0f:f7:09:6c:70:83:6e:0b:ca:bb:eb:b1:fb:ca:af:ad:99:
a5:ba:2a:2a:6e:7d:25:64:2b:6f:14:3b:a0:87:1d:47:7e:5c:
0e:f3:f5:3a:fa:30:40:a7:1e:b5:6e:09:e3:0f:05:5b:1b:28:
05:80:05:5c:27:45:1f:17:83:4b:ba:bf:c9:7a:68:4e:f2:9b:
25:00:32:97:7f:36:17:b6:e0:34:ee:82:3b:e1:51:09:6d:a9:
76:e9:c3:8a:7d:f4:29:b0:36:00:29:c0:98:45:2e:2a:e1:3b:
b2:59:ee:f2:11:fa:e5:93:8b:99:4c:43:a0:68:2d:8f:02:40:
d9:ed:5c:6b:9b:65:21:15:44:26:50:cf:73:29:9a:17:dd:08:
fd:36:d8:c7:c5:99:29:a9:94:0a:4b:8e:ef:53:f5:24:91:43:
cf:22:9a:dc:fa:ab:e7:b0:a7:30:08:af:97:fc:37:10:85:3f:
af:82:5a:de:49:f9:c7:ad:44:26:af:24:e4:81:10:b0:5b:55:
ed:68:78:55:5e:fb:a9:da:f8:64:1c:b2:08:5a:19:a3:b6:bf:
ce:0f:f7:7c:51:89:22:71:bd:c4:75:fd:cf:58:a4:b7:14:07:
ed:e6:3b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 08:34:37 2026 by rpki-client