Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS39521.roa
File: AS39521.roa (raw, json)
Hash identifier: wzPqLnvjWRLZeQWM3NnNQqPBDrUXETzgKQqx+sZLHLs=
Subject key identifier: 95:00:D7:FE:5B:CA:57:F7:97:61:E2:0E:ED:C0:C2:6F:DB:5F:AF:F0
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 4DC7E67C9F6726FC9D3356A5E4A19A79CD910C0A
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS39521.roa
Signing time: Wed 11 Nov 2026 00:06:37 +0000
ROA not before: Wed 11 Nov 2026 00:01:37 +0000
ROA not after: Wed 10 Nov 2027 00:06:37 +0000
asID: 39521
IP address blocks: 143.20.54.0/24 maxlen: 24
143.20.61.0/24 maxlen: 24
143.20.62.0/24 maxlen: 24
143.20.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 14:50:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:c7:e6:7c:9f:67:26:fc:9d:33:56:a5:e4:a1:9a:79:cd:91:0c:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Nov 11 00:01:37 2026 GMT
Not After : Nov 10 00:06:37 2027 GMT
Subject: CN=9500D7FE5BCA57F79761E20EEDC0C26FDB5FAFF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8a:83:8e:e9:05:dd:a6:ce:fb:ee:27:2e:db:
d7:4b:c1:d1:f0:7c:21:22:b8:80:b2:50:99:b5:76:
0c:d4:4b:38:22:31:bc:6e:50:87:4f:13:f6:ad:f7:
b7:c7:1d:70:5e:04:b4:01:d8:b5:33:97:f4:39:39:
f7:fa:81:f6:b7:da:0d:72:bf:2d:23:ac:dc:20:33:
0c:e8:74:dc:a6:fa:80:2e:a3:7c:f7:22:2e:2f:1c:
6d:cd:a1:6e:b6:20:68:f9:9a:6d:ae:f9:cd:ef:41:
b4:fd:76:6b:92:6c:67:7b:74:b8:f8:db:e0:51:98:
35:24:2f:5b:84:63:93:4b:98:7e:8c:50:07:c4:50:
b1:78:f1:5d:74:b7:6b:05:62:e0:7d:20:d8:3b:83:
e9:9d:8f:a1:56:40:2f:68:6b:13:26:fc:a1:17:a6:
e2:f7:32:8f:15:5b:90:c6:0e:27:20:27:07:54:ef:
36:65:1e:59:a7:7d:79:8a:79:55:72:91:0d:ed:49:
17:08:f3:27:48:b3:17:82:3b:91:4c:4e:1b:a0:b5:
8b:f6:bd:2c:df:d8:30:4e:bf:7d:96:58:aa:c5:24:
59:00:6f:37:2c:fe:03:36:c0:52:d2:88:0b:ca:5a:
40:c0:74:5c:45:62:fc:cb:24:ac:e7:cd:81:60:14:
9b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:00:D7:FE:5B:CA:57:F7:97:61:E2:0E:ED:C0:C2:6F:DB:5F:AF:F0
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS39521.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.54.0/24
143.20.61.0-143.20.62.255
143.20.104.0/24
Signature Algorithm: sha256WithRSAEncryption
68:6c:a5:97:a9:b0:f4:9a:b6:aa:e9:9e:f6:07:40:f1:f3:32:
a0:bb:0f:ac:43:7e:6a:78:f9:5d:24:91:33:a4:fb:e2:68:52:
ac:63:a1:c9:d3:f4:ca:a8:81:6c:32:1d:95:14:f3:7b:f4:01:
b7:70:4e:52:40:35:3b:24:a2:8e:64:06:20:3e:ac:d2:83:02:
5a:bd:e9:d6:d3:46:75:6d:18:d5:95:ca:ec:0c:56:a4:52:23:
a6:5d:1f:c8:08:d6:40:c1:c6:88:e9:26:92:49:4f:d3:88:bf:
1f:5a:ac:c9:f2:0c:a2:b6:a0:1a:54:04:0c:c6:a7:08:16:25:
f8:ad:f5:90:71:22:0b:c7:1b:41:6c:69:31:1e:28:31:fc:bf:
f6:11:92:db:6a:95:30:f3:88:44:9a:c3:2d:2c:70:8f:26:64:
52:8a:c0:5b:a9:4a:a6:81:f8:95:75:7f:ce:71:c5:90:98:da:
a4:d7:4b:88:da:41:ce:1e:0d:2b:b1:cf:7f:08:b5:68:46:6e:
33:c5:26:73:b1:65:40:19:ba:7c:88:bf:28:7e:f2:72:c6:2b:
8b:a3:c2:97:af:c1:34:79:0d:fe:18:d3:f3:b9:47:31:0f:53:
bb:25:67:cc:d2:d4:ff:51:8b:b1:13:38:c1:75:bf:08:c6:90:
cd:f8:e3:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 23:48:59 2026 by rpki-client