Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS273091.roa
File: AS273091.roa (raw, json)
Hash identifier: tF+QQE4oafPunjyPP5fxGFxkFjzHyvSTPvFaObBXKCk=
Subject key identifier: B8:88:97:E1:C9:FF:93:B9:C8:95:43:24:50:3A:E7:B8:41:FD:09:CD
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 2DF565552F5961707931FBAB98E175B3AEC8FBB7
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS273091.roa
Signing time: Tue 13 Oct 2026 01:22:20 +0000
ROA not before: Tue 13 Oct 2026 01:17:20 +0000
ROA not after: Tue 12 Oct 2027 01:22:20 +0000
asID: 273091
IP address blocks: 143.20.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 06:59:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:f5:65:55:2f:59:61:70:79:31:fb:ab:98:e1:75:b3:ae:c8:fb:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Oct 13 01:17:20 2026 GMT
Not After : Oct 12 01:22:20 2027 GMT
Subject: CN=B88897E1C9FF93B9C8954324503AE7B841FD09CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a2:14:14:ce:af:e0:62:4c:65:04:a9:9d:82:
12:17:7b:7a:3e:33:97:7e:5c:f9:c0:8e:a2:9f:24:
41:15:52:73:fb:c0:d4:c9:68:db:d0:c8:9c:ed:53:
28:38:d2:a1:22:15:05:f0:3e:53:20:5e:28:0f:bf:
0d:59:e5:bf:0b:ec:a6:ac:13:f7:e5:1a:09:e2:50:
20:27:fb:20:ed:99:df:ee:d4:36:9a:04:57:b4:64:
a0:53:19:a0:6d:a3:e1:46:26:6b:ea:db:43:8f:a8:
e0:1e:ab:aa:44:bb:bc:41:61:dc:d6:de:f7:2a:d6:
bc:a1:d8:73:41:72:71:b5:14:2f:0b:16:25:3f:db:
90:53:73:db:23:22:e4:09:ed:c2:a1:9d:de:e4:db:
84:a9:f3:68:8a:df:47:c6:e4:9f:92:b4:fe:1e:34:
d3:51:3e:82:9f:85:a7:62:aa:1c:90:83:11:22:52:
1a:54:69:d7:09:4e:97:87:36:f7:8b:a5:82:57:50:
db:26:d4:28:d5:29:ae:74:18:77:62:3f:81:54:52:
ce:83:9c:ab:4e:d4:11:18:a1:ca:34:c5:28:ff:ed:
10:59:88:bd:8a:3f:f2:8e:d7:a3:ea:bd:04:60:19:
4d:4f:5e:98:f7:9d:33:a6:e0:83:e1:53:9a:31:7d:
14:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:88:97:E1:C9:FF:93:B9:C8:95:43:24:50:3A:E7:B8:41:FD:09:CD
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS273091.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.151.0/24
Signature Algorithm: sha256WithRSAEncryption
97:58:1c:c9:38:e8:df:7f:84:43:3d:ae:3c:ad:93:d3:a4:7a:
7f:69:d3:2e:88:de:1e:9b:b2:af:57:da:e0:17:b1:4b:d3:db:
f5:de:a4:e3:6e:dc:59:88:9b:2a:ee:85:c4:6c:3d:32:91:dd:
e5:9a:56:c3:f9:c5:e0:5f:9d:12:57:aa:54:8d:f4:d7:f0:e7:
b7:17:d3:50:9b:db:bf:c7:1c:9d:f9:fc:2c:3b:e0:da:83:db:
b6:20:ec:9d:4b:f5:6e:c9:0e:ee:33:b7:34:37:c6:00:d5:95:
63:98:71:09:df:87:f2:62:6d:66:68:93:27:10:b3:b3:fc:f8:
72:23:b5:d6:e8:2d:e2:24:7f:05:1f:08:88:42:21:96:5d:a0:
28:ed:e5:ae:1c:39:6e:fc:5b:fb:1d:30:90:62:8f:6b:54:5c:
bd:c5:89:cf:13:8a:a5:ee:29:45:ba:e6:62:82:f6:f0:32:de:
76:47:c6:2f:3d:b1:33:8d:fa:e8:57:5b:4a:3b:61:0a:38:46:
15:45:ef:ec:9e:3a:f2:d0:cb:a7:00:3f:3b:03:ed:ab:78:4e:
a5:f5:1e:46:14:89:3f:c5:f5:d8:7d:69:ac:8c:79:bb:ee:c2:
53:d2:70:b4:ad:cf:98:29:15:11:44:2a:d9:41:05:1f:33:6d:
de:07:97:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 22:46:24 2026 by rpki-client