Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS216129.roa
File: AS216129.roa (raw, json)
Hash identifier: ZZSgASigoyinu4Tfiwfy/7Nv0y0lnO/I1MtRJGmmhf8=
Subject key identifier: 78:C5:F8:F5:18:F1:84:38:FE:18:3E:38:14:F2:8A:40:7E:0F:26:00
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 2B81866BA757BD5F64E4E66F36C9020C6617B599
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS216129.roa
Signing time: Sun 28 Sep 2025 09:13:19 +0000
ROA not before: Sun 28 Sep 2025 09:08:19 +0000
ROA not after: Sun 27 Sep 2026 09:13:19 +0000
asID: 216129
IP address blocks: 143.20.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:18:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:81:86:6b:a7:57:bd:5f:64:e4:e6:6f:36:c9:02:0c:66:17:b5:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 28 09:08:19 2025 GMT
Not After : Sep 27 09:13:19 2026 GMT
Subject: CN=78C5F8F518F18438FE183E3814F28A407E0F2600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9c:1e:d8:59:d5:de:dd:06:56:c1:b3:d4:ee:
5b:64:c1:e0:3f:dd:c9:a6:35:27:92:88:79:ee:f9:
cd:02:78:8b:34:ac:23:a3:97:15:93:36:35:f0:3e:
cc:a4:cd:e8:e3:e3:1a:df:40:11:e2:6d:0c:95:6c:
63:47:90:a9:d1:f2:63:21:5c:32:83:60:11:e8:4e:
81:02:64:ca:91:71:6e:3b:71:f4:e3:0c:f5:e8:ea:
4a:ce:3c:b5:a3:a1:c3:9b:4a:d8:37:76:28:3b:2e:
bd:99:3c:53:af:65:96:ef:0c:9a:92:8c:ab:77:3f:
6f:55:ae:91:d8:c9:48:e8:1d:b2:b1:bb:87:69:a1:
77:2d:86:2b:05:91:99:78:2b:c1:a4:08:da:bf:f5:
ec:64:34:08:0f:1f:9d:e4:f8:e0:f3:5c:5a:8a:6f:
11:5f:17:3a:80:48:66:13:d6:8e:17:c6:e0:fb:5e:
53:7e:62:7a:ae:5c:6c:b0:4d:61:ce:51:f5:bf:84:
3e:d9:e3:3e:2c:f2:38:f6:40:ea:dd:ff:ab:12:7a:
ef:e6:60:ae:72:e2:e1:c0:2e:dc:dc:16:7a:2a:05:
53:41:bf:80:5a:4f:ab:69:15:f9:0e:84:6f:79:be:
df:1f:c8:0f:6d:93:bd:34:fe:10:5b:45:20:af:da:
15:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C5:F8:F5:18:F1:84:38:FE:18:3E:38:14:F2:8A:40:7E:0F:26:00
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS216129.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.155.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:74:75:0f:7a:9a:b4:72:77:93:7c:c6:56:f3:e8:85:11:32:
2d:19:e7:e2:a8:ff:f5:1f:30:12:e3:eb:6c:5f:35:a7:a8:24:
ad:7e:c1:78:7e:84:47:51:6d:3f:2b:7a:3f:96:f1:04:77:32:
5c:f8:13:06:31:fd:76:85:ba:41:8f:0f:46:5d:7d:9e:49:bb:
6f:14:83:ca:1c:fc:e2:4b:a1:77:c7:e4:5e:db:b2:e0:04:15:
f7:14:4d:c3:2b:0f:a4:32:35:85:6b:5f:27:b5:dc:3e:93:74:
7b:a9:fc:95:c1:a0:b6:6a:4d:25:7a:33:41:e0:e3:25:0e:cb:
55:95:1b:54:74:66:89:21:0c:b7:96:01:c2:1b:6a:6c:a9:b7:
bb:64:ff:7c:34:96:b5:c0:fc:89:6e:59:46:8c:e8:96:d8:63:
0d:53:70:a5:d9:a5:65:83:c1:5d:3c:13:6d:56:9f:c6:8a:af:
b2:20:4a:aa:f0:15:02:f7:0f:67:b0:de:84:38:45:c7:db:98:
bf:e4:fa:08:35:f7:e3:b4:b8:41:c6:9b:f7:ed:14:7e:b4:f7:
36:dc:06:36:6d:e0:25:d3:d3:88:31:ea:1b:f0:61:82:e5:3b:
e8:e8:1e:a2:73:4e:18:fd:ed:b6:42:7e:bf:dc:90:8f:8b:da:
83:24:6d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:02:41 2025 by rpki-client