Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS393942.roa
File: AS393942.roa (raw, json)
Hash identifier: 0UvicOeqEKwJA4DE+jPIGcMtzLMTHo1iNGTzsnexVTE=
Subject key identifier: E0:14:2B:D4:13:FC:BF:DE:D7:A7:74:51:E8:26:00:5E:C7:BB:71:79
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 0DE9896F0787B3CF875FBE8E8B3D15CD06BEEF13
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS393942.roa
Signing time: Thu 21 Aug 2025 00:00:39 +0000
ROA not before: Wed 20 Aug 2025 23:55:39 +0000
ROA not after: Thu 20 Aug 2026 00:00:39 +0000
asID: 393942
IP address blocks: 143.20.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:49:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:e9:89:6f:07:87:b3:cf:87:5f:be:8e:8b:3d:15:cd:06:be:ef:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Aug 20 23:55:39 2025 GMT
Not After : Aug 20 00:00:39 2026 GMT
Subject: CN=E0142BD413FCBFDED7A77451E826005EC7BB7179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:39:b4:3f:3c:96:ae:52:3c:cc:b8:e8:63:da:
ce:05:5b:92:8d:63:4f:cf:2f:6a:0c:6c:ee:97:ce:
c4:4e:aa:cb:9a:48:65:9e:4b:3b:19:10:e1:6f:d9:
4f:80:ca:d7:03:3b:a9:ef:9a:4b:f8:e0:8c:de:3b:
3e:33:0d:20:ee:fb:99:cf:9b:86:2b:d1:d7:3d:b8:
8e:3b:d7:6d:2c:d2:a7:89:78:2e:db:62:5d:db:9d:
26:00:4e:16:a7:e5:43:66:1d:cc:9b:d7:39:09:7a:
9d:98:a1:ac:5c:64:c0:04:fa:66:b3:f6:40:d5:c2:
41:e1:cc:d4:33:91:65:58:55:36:43:04:1e:f4:ec:
45:40:52:16:bc:1d:8c:6a:92:ad:3d:72:73:e3:d4:
8d:2b:be:fe:a1:6e:f6:e6:ee:80:a9:c5:f9:00:4e:
6b:9a:1b:d4:91:60:52:63:7b:79:de:ec:e4:6e:0c:
42:56:1f:18:39:9a:1a:0a:a3:0f:24:64:66:52:cb:
9d:8c:6b:40:02:7e:b0:ef:25:f9:14:99:9f:d5:24:
88:71:70:90:0a:0c:bb:93:21:16:4e:76:d6:3f:04:
54:87:c7:9f:e2:11:3b:fb:25:02:c2:46:5d:34:6a:
22:bf:2d:23:49:c8:7c:1a:3d:76:87:f4:af:1b:c8:
40:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:14:2B:D4:13:FC:BF:DE:D7:A7:74:51:E8:26:00:5E:C7:BB:71:79
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS393942.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.91.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:b5:02:81:13:34:f5:cd:89:fd:c5:bc:2f:e0:48:79:7e:91:
ff:c6:da:3e:9f:96:0a:fd:0c:a1:41:17:a3:19:48:b3:17:59:
e1:b2:e2:82:db:b7:39:f9:ed:72:6f:bb:9b:04:e6:4a:9a:47:
c4:75:5b:14:8c:21:4f:d2:16:49:67:ed:24:c3:22:8b:10:6d:
0b:d5:a6:2f:cf:3b:41:73:99:9c:50:0e:82:b0:88:10:d5:55:
fe:ea:be:7a:bc:02:60:d7:12:c5:7d:99:1a:fe:95:15:9e:13:
40:1c:c7:31:5e:4a:53:b2:db:9f:a0:73:7c:0d:f1:63:49:c1:
98:50:d4:35:29:4e:6e:6e:f4:ff:70:9f:50:ac:1c:9d:2d:ad:
e2:88:ef:55:34:12:a6:7e:60:08:fd:f0:36:c1:9d:88:6c:40:
31:2b:5d:c4:87:d4:44:15:83:3b:5d:2c:b6:01:0a:66:00:2d:
7f:d6:d6:4b:ac:dd:da:b6:31:3d:db:4e:bb:38:19:ac:26:d4:
29:20:90:f6:0f:e8:58:44:c8:da:22:ca:6c:bd:98:e8:78:54:
32:63:d9:7d:50:f5:f4:3d:82:27:ce:13:62:6e:8a:52:93:12:
b0:44:99:4a:be:ae:65:ca:9d:9e:59:e8:7e:1a:40:19:f9:a2:
5b:e7:8f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:35:54 2025 by rpki-client