Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS399646.roa
File: AS399646.roa (raw, json)
Hash identifier: ujfpNYMA7egZEVjQp7RXhFcl15ncppFGKeVnk01Tamw=
Subject key identifier: C4:12:DF:20:E3:0F:12:1F:D4:4C:96:1E:2C:DD:EB:D3:6D:D7:9C:AF
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 03BCB20C2EF64AFFC2BF86B5A32234CAC8F6212A
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS399646.roa
Signing time: Wed 22 Jul 2026 00:00:11 +0000
ROA not before: Tue 21 Jul 2026 23:55:11 +0000
ROA not after: Wed 21 Jul 2027 00:00:11 +0000
asID: 399646
IP address blocks: 143.20.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:36:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:bc:b2:0c:2e:f6:4a:ff:c2:bf:86:b5:a3:22:34:ca:c8:f6:21:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Jul 21 23:55:11 2026 GMT
Not After : Jul 21 00:00:11 2027 GMT
Subject: CN=C412DF20E30F121FD44C961E2CDDEBD36DD79CAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:69:a0:bb:f3:4d:b7:b0:9f:1a:3b:3e:79:13:
be:8e:11:32:14:fc:af:7a:70:aa:6a:0e:ae:fd:9b:
31:93:40:88:15:a7:09:a8:7b:7e:4c:31:5c:7f:ed:
c4:45:ff:6c:57:73:93:05:d1:81:ec:df:cc:f1:ca:
8f:cd:f6:7a:07:8d:1e:93:96:c3:58:aa:32:ef:3a:
05:90:05:03:3d:4f:e1:bc:c5:e5:91:79:8e:24:42:
b2:90:8e:9f:4e:b2:c0:ce:b3:ee:20:70:fa:7e:d5:
c5:5f:08:ce:cf:eb:e8:4c:04:70:6c:22:f6:cc:06:
fb:4d:f8:17:2b:c2:01:72:12:0f:45:46:43:a9:6d:
53:79:77:df:53:c0:16:2d:13:2d:86:f4:d0:66:06:
32:f2:8e:51:b4:10:bd:df:9d:f4:c5:1e:3a:b8:ab:
3d:c1:a0:1d:88:3f:92:17:35:c5:ac:bf:74:cb:8d:
22:72:35:86:0c:d0:51:ac:8d:5e:f5:a7:bb:ee:6c:
64:07:94:ea:fc:a4:30:22:01:ad:73:75:f8:90:f8:
a9:04:48:28:68:84:8b:db:c6:76:f2:e6:56:bf:54:
87:87:3a:fd:cd:5d:21:13:d0:3a:00:5f:da:18:01:
45:e3:99:17:77:21:25:5a:1a:32:3e:ea:8d:24:3f:
bf:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:12:DF:20:E3:0F:12:1F:D4:4C:96:1E:2C:DD:EB:D3:6D:D7:9C:AF
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS399646.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.143.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:5c:b0:d5:32:e9:56:94:84:7b:9a:e7:40:29:f1:c4:d4:95:
2f:ab:e1:69:6e:74:7d:59:a1:e9:7a:0e:fc:78:e0:bb:76:92:
ad:a8:0c:f3:cd:08:54:e2:c8:ba:2c:72:c1:e3:16:0c:3c:5f:
aa:d1:33:ad:3a:b6:08:19:65:13:45:d6:47:3f:50:ae:c5:7c:
ec:b2:7a:8d:aa:a2:12:8f:03:37:de:6c:1e:0f:b1:92:e1:f5:
4f:ca:fb:35:e8:03:9a:cc:fd:95:bb:f5:b3:0d:c1:3e:98:16:
8a:71:12:9b:3d:7e:49:10:6b:ae:7b:59:87:28:3e:de:c9:6b:
14:49:02:b4:18:69:48:2d:91:83:1c:1b:2b:4a:f1:ac:cc:b7:
ce:a0:59:01:39:79:c9:1f:06:28:48:d8:9c:ba:3a:9a:b8:9d:
91:fa:70:1b:0b:ae:64:34:8a:0d:73:36:a2:d0:2a:d4:6a:0c:
97:ec:44:0b:bb:26:73:a6:71:b6:95:38:86:5e:46:b9:00:53:
80:e7:55:6e:65:f5:2c:c4:ef:9a:63:6f:4a:83:a4:50:a3:ac:
f3:ad:53:30:71:90:31:17:8a:37:62:c1:f6:73:88:94:91:ab:
57:3c:14:37:84:1f:d3:b9:27:96:db:24:f7:95:cf:d8:5a:3f:
76:fc:28:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:36:42 2026 by rpki-client