Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS218479.roa
File: AS218479.roa (raw, json)
Hash identifier: inGC7DA5gp5ahGjYj2idMQhzL8FXGJDcMjnfcl7sVVo=
Subject key identifier: 0A:01:47:67:DA:54:79:07:A2:9C:B4:39:88:A7:F0:C9:C7:14:D0:EF
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 15C97D04AE86DA1D298EA5CE9D07C4739AC27B60
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS218479.roa
Signing time: Fri 09 Oct 2026 11:32:34 +0000
ROA not before: Fri 09 Oct 2026 11:27:34 +0000
ROA not after: Fri 08 Oct 2027 11:32:34 +0000
asID: 218479
IP address blocks: 143.20.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 02:40:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:c9:7d:04:ae:86:da:1d:29:8e:a5:ce:9d:07:c4:73:9a:c2:7b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Oct 9 11:27:34 2026 GMT
Not After : Oct 8 11:32:34 2027 GMT
Subject: CN=0A014767DA547907A29CB43988A7F0C9C714D0EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ac:df:6e:2c:df:71:91:d2:ff:4b:41:a8:4c:
f7:f7:23:d1:66:fc:7e:ba:ed:80:53:d3:00:b6:e0:
cd:7f:01:22:3e:cf:b8:eb:1d:a4:8a:2f:54:2a:b4:
02:6a:0a:bd:8a:dd:17:f5:d4:47:f0:87:08:8f:e8:
9f:9d:dd:98:48:0a:83:b1:47:54:8f:7b:6e:14:6d:
de:f1:35:3b:39:5d:cd:fa:40:be:66:bc:57:ca:79:
57:c4:fd:00:7b:e3:43:2b:5b:a5:5f:4b:42:a9:b7:
5b:e6:d8:af:cf:7d:6f:6e:7c:fd:80:af:a0:f5:d3:
e5:fc:9d:01:a2:bf:0c:70:8d:84:21:72:80:3e:ba:
64:17:57:55:90:1b:9e:a9:ba:fd:8d:72:03:c1:f7:
4c:4f:f4:ba:ef:59:00:b3:fe:7f:e5:14:49:61:3f:
ed:01:7e:87:10:1a:a5:24:43:7f:d3:84:0b:15:57:
3b:03:d8:c0:c7:37:50:74:25:d5:a8:34:f9:3a:50:
57:3b:77:60:09:ee:99:c3:3e:c0:f1:f5:fd:db:17:
5e:cc:65:67:ac:09:1d:41:42:d0:aa:7a:43:d5:30:
d3:14:d3:af:8d:2a:bd:6f:44:34:cf:9b:a3:b9:08:
2f:51:7e:60:03:dc:f9:5d:18:5d:e3:88:60:4f:ae:
64:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:01:47:67:DA:54:79:07:A2:9C:B4:39:88:A7:F0:C9:C7:14:D0:EF
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS218479.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.69.0/24
Signature Algorithm: sha256WithRSAEncryption
50:be:1f:2b:89:d2:5a:2a:b2:2f:1a:90:53:df:63:18:cf:1c:
bd:20:e5:23:52:6e:a3:8b:9d:b6:9b:09:18:6b:9d:00:ff:1c:
a0:b7:ed:9a:b3:b6:9b:48:cf:19:8a:08:9c:bd:00:75:12:62:
6d:23:90:0d:9a:31:6d:e4:25:f0:a9:87:fa:16:74:b0:5a:dd:
9d:91:5e:13:3e:f5:24:e7:d0:c4:83:6d:71:7a:b0:bd:0f:bb:
11:ef:e3:02:0c:f3:56:63:14:4e:37:ea:25:42:a9:70:3c:c3:
46:ff:4b:9d:54:a9:a4:c1:99:86:58:c9:87:8c:17:45:a7:d9:
38:8e:b2:02:cf:47:a3:4d:ba:de:c8:e6:ff:64:a2:46:27:24:
e3:7e:40:fa:02:b5:85:d1:68:5b:f2:a0:da:bf:4e:45:82:65:
5f:43:48:82:00:89:a1:0a:ff:86:eb:ba:ff:fd:6c:e2:73:6e:
21:93:16:32:1d:29:ea:bd:11:26:3e:a5:17:b4:8e:7a:aa:a9:
15:fe:3e:63:2c:86:e3:33:bb:81:d5:e2:aa:61:b6:16:fd:97:
e5:81:a5:08:1a:dc:b8:9c:63:e6:13:6f:e7:d6:27:7c:9d:65:
4d:1b:03:ce:40:a2:53:17:88:8c:43:0b:86:d7:5e:37:97:ff:
ed:06:eb:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 14:54:35 2026 by rpki-client