Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS58062.roa
File: AS58062.roa (raw, json)
Hash identifier: EH8lMpHFg7eP6mse1HqHy28Dim75snV9OnF7UDI1DX4=
Subject key identifier: F1:A5:72:13:AE:9C:EC:EE:D2:4D:9A:55:44:D6:CD:A0:4F:F5:BB:19
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 1BCAF6850FE3B5BCE2C58B1C6E970432D8FD71E3
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS58062.roa
Signing time: Mon 29 Sep 2025 06:15:43 +0000
ROA not before: Mon 29 Sep 2025 06:10:43 +0000
ROA not after: Mon 28 Sep 2026 06:15:43 +0000
asID: 58062
IP address blocks: 143.20.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:18:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:ca:f6:85:0f:e3:b5:bc:e2:c5:8b:1c:6e:97:04:32:d8:fd:71:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 29 06:10:43 2025 GMT
Not After : Sep 28 06:15:43 2026 GMT
Subject: CN=F1A57213AE9CECEED24D9A5544D6CDA04FF5BB19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:19:d9:f4:6d:cb:99:fe:8b:48:2b:2e:26:aa:
ce:bd:55:bd:72:99:ea:ae:70:64:1e:b8:2a:17:e9:
c3:ef:89:d1:ec:78:17:4a:21:d8:77:30:71:01:dc:
16:81:57:f5:5e:6c:45:74:12:16:fb:ed:06:c6:a5:
4c:ac:b4:f4:1d:5d:6c:b2:23:5c:82:1f:7a:c7:cc:
70:e5:16:cf:86:31:b9:06:80:70:63:7c:86:0a:2e:
98:73:a0:0a:7b:81:94:66:6d:0b:67:de:cd:95:49:
84:1e:a7:f7:44:28:0b:52:44:3f:5c:d9:ec:17:49:
24:1a:1b:3e:59:ea:cc:f4:8a:00:a1:e1:f5:90:53:
79:51:19:71:c8:32:ce:15:95:92:4e:c1:23:55:ad:
20:fc:aa:a0:32:8b:b3:3b:7e:d5:f0:06:9a:21:a4:
6c:a7:52:62:f0:1e:a9:bf:85:73:00:c8:6a:ac:e3:
6b:2a:c5:61:4b:0c:9e:2d:14:b9:c4:bf:7c:ba:f7:
b4:74:f4:fc:e5:4e:8c:73:26:d8:6c:67:c0:6b:37:
ae:70:3e:1e:c8:22:09:e1:54:66:ea:5c:11:cf:d3:
cb:a3:c9:7f:ca:cb:00:45:e2:97:c2:10:1b:26:3f:
e3:50:db:12:eb:62:72:6c:69:7d:1a:72:2e:31:1a:
14:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A5:72:13:AE:9C:EC:EE:D2:4D:9A:55:44:D6:CD:A0:4F:F5:BB:19
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS58062.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.14.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:46:75:83:87:16:f4:f8:0a:af:0b:c4:c6:65:78:5a:52:ba:
ca:6a:56:d0:ce:d0:d3:9b:a1:13:8e:37:df:08:47:70:3e:54:
88:06:f0:5d:a4:3e:53:94:6a:4a:2a:e8:dd:f0:e3:51:b9:32:
fa:53:12:38:22:16:ba:d7:02:44:bf:31:fe:4b:4f:3a:29:9e:
e6:75:70:5c:1d:c7:f0:78:42:9b:63:a9:b5:58:84:2a:92:71:
6d:84:57:75:62:ca:36:7f:34:64:d8:93:59:65:a7:11:23:38:
df:c5:94:a1:6a:51:1f:e7:39:96:57:24:43:e1:1b:0e:1e:0d:
fe:d3:e3:15:3f:66:e8:25:29:99:ce:c7:2f:bc:4e:08:a8:8a:
83:2d:55:16:ce:a5:6d:37:76:09:40:75:b7:a1:3b:0a:86:38:
00:98:e3:f8:6c:12:ed:93:92:73:a9:02:1f:43:db:8e:b3:63:
3b:af:30:d1:3e:d4:e3:c7:0b:3a:b9:40:c8:c2:58:79:9d:73:
39:b7:62:08:45:2d:c5:e5:4f:5d:99:44:b7:a0:a2:a7:bc:2e:
9c:18:79:4a:58:aa:64:77:a6:60:b4:d9:aa:ef:60:21:a7:62:
04:ae:0c:b8:9d:31:cb:f9:fc:4f:2e:8e:e0:63:06:7a:7e:73:
6b:28:cb:13
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUG8r2hQ/jtbzixYscbpcEMtj9ceMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk
ZWI5M2Q5ZDAeFw0yNTA5MjkwNjEwNDNaFw0yNjA5MjgwNjE1NDNaMDMxMTAvBgNV
BAMTKEYxQTU3MjEzQUU5Q0VDRUVEMjREOUE1NTQ0RDZDREEwNEZGNUJCMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Gdn0bcuZ/otIKy4mqs69Vb1y
mequcGQeuCoX6cPvidHseBdKIdh3MHEB3BaBV/VebEV0Ehb77QbGpUystPQdXWyy
I1yCH3rHzHDlFs+GMbkGgHBjfIYKLphzoAp7gZRmbQtn3s2VSYQep/dEKAtSRD9c
2ewXSSQaGz5Z6sz0igCh4fWQU3lRGXHIMs4VlZJOwSNVrSD8qqAyi7M7ftXwBpoh
pGynUmLwHqm/hXMAyGqs42sqxWFLDJ4tFLnEv3y697R09PzlToxzJthsZ8BrN65w
Ph7IIgnhVGbqXBHP08ujyX/KywBF4pfCEBsmP+NQ2xLrYnJsaX0aci4xGhRzAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQU8aVyE66c7O7STZpVRNbNoE/1uxkwHwYDVR0j
BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2
MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2
NVBaMC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt
NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTNTgwNjIucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACPFA4w
DQYJKoZIhvcNAQELBQADggEBAJtGdYOHFvT4Cq8LxMZleFpSuspqVtDO0NOboROO
N98IR3A+VIgG8F2kPlOUakoq6N3w41G5MvpTEjgiFrrXAkS/Mf5LTzopnuZ1cFwd
x/B4QptjqbVYhCqScW2EV3ViyjZ/NGTYk1llpxEjON/FlKFqUR/nOZZXJEPhGw4e
Df7T4xU/ZuglKZnOxy+8TgioioMtVRbOpW03dglAdbehOwqGOACY4/hsEu2TknOp
Ah9D246zYzuvMNE+1OPHCzq5QMjCWHmdczm3YghFLcXlT12ZRLegoqe8LpwYeUpY
qmR3pmC02arvYCGnYgSuDLidMcv5/E8ujuBjBnp+c2soyxM=
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:02:46 2025 by rpki-client