Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS401476.roa
File: AS401476.roa (raw, json)
Hash identifier: U2ybBK0UAK6C3Gbko1bjL+9j9ehRyyLt+UsGXXZ49sE=
Subject key identifier: 90:CD:B1:6A:CE:2F:73:6D:82:C4:68:8C:B7:72:29:85:D6:49:A8:CE
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 24D155F5FB23C32F73BE21D95C1C730F051F98DD
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS401476.roa
Signing time: Tue 30 Sep 2025 12:52:03 +0000
ROA not before: Tue 30 Sep 2025 12:47:03 +0000
ROA not after: Tue 29 Sep 2026 12:52:03 +0000
asID: 401476
IP address blocks: 143.20.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:18:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:d1:55:f5:fb:23:c3:2f:73:be:21:d9:5c:1c:73:0f:05:1f:98:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 30 12:47:03 2025 GMT
Not After : Sep 29 12:52:03 2026 GMT
Subject: CN=90CDB16ACE2F736D82C4688CB7722985D649A8CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:02:53:16:23:b8:6f:fe:46:a0:f0:50:33:73:
64:49:13:bc:92:d9:54:11:19:6c:0b:7f:84:ef:63:
c9:9c:cc:b1:34:36:09:6c:f7:c3:22:11:2f:70:42:
fa:1e:d0:51:f7:3f:80:e0:ed:20:b9:21:95:64:55:
a6:b0:45:96:f6:f6:21:56:26:06:05:b4:29:a3:54:
46:9f:12:65:76:3d:95:ba:5a:3c:00:ea:20:43:8c:
f9:3d:e8:e9:10:35:dd:98:f4:3d:5f:f2:c1:0e:e6:
60:38:bd:a2:cc:92:84:c7:7c:41:c0:21:98:09:6b:
59:89:c0:a0:aa:8a:5d:51:c0:f8:b2:43:2a:63:02:
7a:43:fd:e7:f6:5b:4d:f0:60:52:28:7f:29:ee:6a:
95:48:4d:54:ae:a7:90:99:ce:75:77:d1:4f:e2:0e:
2d:c9:e8:d9:31:03:a2:57:b5:2a:73:55:fa:8b:2c:
f0:83:ab:ff:34:0d:db:fd:d8:c7:25:ca:1c:7e:f9:
67:57:23:87:4f:b2:bb:35:7f:62:e1:a1:8d:32:f9:
35:27:7a:a4:b9:7a:78:16:3d:42:26:54:5a:6c:fd:
e1:7b:af:3a:30:aa:67:fb:df:5f:e1:e3:11:79:16:
32:f1:c7:19:2f:4c:e2:ed:1f:61:5a:35:c5:2f:82:
ea:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:CD:B1:6A:CE:2F:73:6D:82:C4:68:8C:B7:72:29:85:D6:49:A8:CE
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS401476.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.137.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:66:34:68:0f:04:a8:af:4a:0a:28:93:59:0b:8f:a1:42:3e:
4f:92:5c:5f:88:cc:ec:89:db:16:26:02:68:4b:07:26:b7:6b:
0e:cc:1f:bf:50:a4:16:81:61:cc:dd:30:dc:78:71:81:2c:47:
cb:24:81:44:83:e1:df:98:44:34:ea:d4:1b:56:b4:a8:40:05:
9e:a8:cb:f3:b6:82:f2:10:92:7d:2c:07:0f:cf:d9:60:f6:e2:
41:69:54:22:6c:a8:8a:50:9d:b2:4f:92:8d:45:5b:64:ba:e4:
22:b6:46:fd:7a:bf:8f:da:12:a2:d1:c4:48:b8:79:71:df:06:
16:45:f6:1f:d6:25:83:ed:5a:d8:86:46:b8:03:b1:1b:43:f0:
aa:c0:26:38:86:f9:74:07:ec:b0:1c:5f:2a:39:f6:30:74:b1:
66:3a:8b:a9:bc:77:9c:ff:a1:9e:b5:59:eb:6c:ed:61:1f:5a:
c3:fb:ee:f5:02:94:f7:02:ce:4e:ae:93:c1:ca:b1:8e:60:f5:
3a:fc:89:ca:b1:0c:f8:01:47:03:39:52:19:5b:57:1d:37:e9:
fa:33:2a:0c:b5:10:79:d4:68:54:ae:7c:78:93:b4:b2:90:e3:
80:bd:be:39:86:50:15:b9:cf:a4:30:ce:82:90:1c:d6:33:14:
c9:47:a3:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:02:48 2025 by rpki-client