Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS214647.roa
File: AS214647.roa (raw, json)
Hash identifier: Yu9QIMXhUvPni2ZXTuCl9AZQmcSLnnGiV4Bb0Jw4X20=
Subject key identifier: A6:FC:31:18:8D:15:B7:DF:32:80:E8:3F:2E:3A:2E:78:83:1F:EF:A0
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 5D0B7B5FD4274980EB3A57DCD0DAE702FE6311AE
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS214647.roa
Signing time: Fri 09 Oct 2026 17:01:16 +0000
ROA not before: Fri 09 Oct 2026 16:56:16 +0000
ROA not after: Fri 08 Oct 2027 17:01:16 +0000
asID: 214647
IP address blocks: 143.20.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:0b:7b:5f:d4:27:49:80:eb:3a:57:dc:d0:da:e7:02:fe:63:11:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Oct 9 16:56:16 2026 GMT
Not After : Oct 8 17:01:16 2027 GMT
Subject: CN=A6FC31188D15B7DF3280E83F2E3A2E78831FEFA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:88:08:90:d5:7b:5e:13:e2:6a:e7:33:7b:e8:
69:d0:9e:f9:c6:8a:03:46:4b:5b:18:f2:71:80:73:
da:f6:c8:d6:4d:5b:5f:64:93:64:08:1b:4c:11:02:
3b:55:e3:87:c1:6e:43:81:3b:67:f6:07:0f:d9:2b:
72:ed:ed:1f:ab:84:3e:75:9e:c1:d9:3c:a9:79:bf:
45:37:61:2d:6b:f9:da:1d:04:98:60:78:1e:04:00:
13:b5:77:f9:f7:2f:e1:b8:35:2f:5c:7c:d3:fa:07:
ba:2f:d3:37:a1:a9:d5:42:9a:0d:3b:d6:6f:c9:9b:
ea:a7:b0:64:0d:38:11:af:b6:b8:e0:dd:45:f2:d7:
b5:32:b2:9b:14:53:28:d1:1d:24:6f:5e:05:a2:a1:
8f:82:53:9e:23:df:3c:86:ac:40:10:ad:4a:3c:ef:
f4:48:c4:7f:76:cb:0b:da:c0:3d:33:40:38:0e:f5:
57:0f:cb:76:54:75:16:42:6b:e4:61:0b:c6:2f:33:
e2:97:51:e4:e2:08:f7:2c:db:f9:2b:da:6e:b6:ee:
3f:19:53:5f:56:b7:39:d9:fe:b3:0d:1f:fc:03:3d:
f0:6a:63:fc:ca:67:0f:d4:0b:ac:78:f7:53:16:bb:
0c:9d:72:54:20:53:94:8c:d8:2e:5b:41:e3:20:55:
39:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:FC:31:18:8D:15:B7:DF:32:80:E8:3F:2E:3A:2E:78:83:1F:EF:A0
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS214647.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.229.0/24
Signature Algorithm: sha256WithRSAEncryption
92:53:8b:b3:dc:80:dc:c9:c4:6d:a2:e9:dc:61:62:8c:af:72:
aa:a8:77:53:41:f4:be:70:61:df:17:ba:47:05:6b:79:3e:c8:
20:e7:d2:fd:11:7a:db:ca:2a:dc:09:58:1f:67:cf:3e:10:2d:
0a:95:b6:b2:e7:08:00:87:2d:a7:4d:f0:79:67:34:00:b7:6c:
83:7f:eb:9d:b6:06:4c:9c:6a:da:45:2d:b7:86:30:3a:26:57:
20:55:aa:77:9b:d6:cc:78:4d:47:c2:df:62:cb:ec:e9:92:96:
d9:cc:36:3e:ba:ba:dd:40:82:4e:dd:4d:5d:58:52:2e:ea:d1:
d5:23:d2:a9:db:63:95:a8:22:1c:54:47:ef:8d:22:4e:87:25:
5b:5d:e5:9f:d1:d1:df:1d:c2:da:82:cf:8e:a0:72:b0:5d:48:
58:c1:d4:ca:f9:e0:7e:f2:ed:df:63:a3:99:9f:46:7b:56:bb:
a1:0e:71:44:5a:13:f4:3c:27:5a:72:d7:58:ba:35:b5:bf:9d:
de:87:fb:0a:08:07:d5:b0:d3:d5:0b:43:02:34:3a:46:8a:15:
b5:52:31:ec:22:6a:ce:98:e4:6c:d1:5c:d4:09:6b:b9:be:a1:
ef:a8:a3:cf:ed:1f:51:8e:a5:8d:bc:c6:7f:17:a2:a2:96:99:
0a:0e:2d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 13:23:45 2026 by rpki-client