Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS154294.roa
File: AS154294.roa (raw, json)
Hash identifier: BiJZsxtCBVEt+TZB+ImsmshE7hME5+9E6n8jtK9fu6s=
Subject key identifier: 7F:07:50:05:EF:DC:2B:1E:D3:2E:10:38:28:C8:44:49:0D:26:E6:9B
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 25A7A53BCED216733498CD3EAC760F25614BEAAC
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS154294.roa
Signing time: Fri 16 Oct 2026 08:49:37 +0000
ROA not before: Fri 16 Oct 2026 08:44:37 +0000
ROA not after: Fri 15 Oct 2027 08:49:37 +0000
asID: 154294
IP address blocks: 143.20.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:a7:a5:3b:ce:d2:16:73:34:98:cd:3e:ac:76:0f:25:61:4b:ea:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Oct 16 08:44:37 2026 GMT
Not After : Oct 15 08:49:37 2027 GMT
Subject: CN=7F075005EFDC2B1ED32E103828C844490D26E69B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:50:f8:87:cd:2e:85:cf:1b:c0:0f:24:d6:79:
d2:aa:3e:c8:94:45:de:0d:c7:3e:d5:83:b6:c2:5d:
93:d2:17:91:33:d5:d9:76:fd:4e:52:04:da:d5:a8:
81:11:51:21:d1:c3:30:b1:f1:89:ff:64:ca:92:fa:
60:24:da:00:53:5b:fb:55:7b:39:eb:87:27:49:47:
e6:2a:84:8f:d1:3f:20:83:9f:34:99:7b:83:3a:ed:
20:9c:34:2d:12:8a:bf:4c:17:49:35:3c:43:a7:b9:
74:4a:26:32:69:be:1c:42:ad:04:69:4c:41:6d:f0:
bd:1a:b5:51:43:b2:67:8c:eb:f5:6c:4f:4f:9b:b6:
56:2d:a5:e1:ee:06:a3:b6:bc:3d:10:e8:9c:56:1b:
74:7a:c1:c1:cf:88:78:f7:89:56:98:fd:e5:db:fa:
16:0d:9b:56:72:26:67:4d:40:e5:66:54:26:de:ee:
24:d8:2c:0e:d5:fd:df:7a:2e:82:98:d1:32:2a:64:
12:09:f2:3d:e2:06:ae:65:79:91:ae:17:35:b4:fc:
3a:be:17:9e:6b:89:f2:18:d9:02:42:22:0f:23:df:
fe:a3:f9:c9:cb:7f:ac:a8:3c:f6:63:4a:7e:4e:92:
d0:13:82:2e:12:9e:17:bd:14:f1:7c:9e:f8:27:0f:
fa:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:07:50:05:EF:DC:2B:1E:D3:2E:10:38:28:C8:44:49:0D:26:E6:9B
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS154294.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.31.0/24
Signature Algorithm: sha256WithRSAEncryption
84:8a:6e:23:be:fb:a5:e7:59:47:62:0a:23:42:fa:b3:d0:94:
f2:1e:19:26:f0:0b:d7:4a:4f:8a:e6:5d:14:56:92:e2:cd:bb:
d4:cd:43:b2:da:23:30:25:83:a6:93:aa:ae:2c:e3:24:f6:4c:
e2:ed:7e:7f:da:92:48:f9:01:51:9d:fe:b4:d9:76:13:82:05:
e3:3b:8b:3d:fa:28:1d:41:d1:e4:81:3b:a6:69:c4:97:db:cd:
1d:1e:b5:d4:49:6e:16:78:9e:3a:7b:4c:ea:8b:93:b9:3f:c5:
71:c7:d6:17:a9:99:3a:0f:90:f2:e2:c2:f2:ca:ec:bc:76:41:
76:d4:fc:a5:a3:6a:66:77:cb:a9:c4:21:64:e4:df:44:42:a1:
cd:08:98:19:17:1e:c9:f3:07:ce:99:ef:17:bf:1e:f5:f1:14:
1d:a3:fb:5e:9c:54:3d:a6:ae:fe:97:0a:e5:3a:66:0b:17:5e:
7c:db:b0:a4:4b:20:7f:6f:d2:25:fe:fc:39:1d:8f:c3:7f:4c:
82:ed:7a:45:99:eb:9e:4d:c6:74:9e:44:a2:73:32:bc:d3:cf:
8d:73:e4:1f:5f:bc:51:ba:44:3d:00:a2:13:df:34:df:2e:d5:
38:b1:90:6b:60:e2:0f:09:24:2d:32:fd:68:6b:f1:4e:26:35:
be:a4:d0:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 14:22:12 2026 by rpki-client