Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS137962.roa
File: AS137962.roa (raw, json)
Hash identifier: jtOKiQMSh9DP5J+E7oLEuXOE159mZBjawB0LoFlSPPU=
Subject key identifier: 21:70:EB:CD:72:CC:B9:6E:29:E5:18:24:9E:AF:FC:52:D6:98:A9:02
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 24D79D0DC45FAF3C2256E66D5027E89935CE5DAF
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS137962.roa
Signing time: Wed 30 Sep 2026 03:49:35 +0000
ROA not before: Wed 30 Sep 2026 03:44:35 +0000
ROA not after: Wed 29 Sep 2027 03:49:35 +0000
asID: 137962
IP address blocks: 143.20.55.0/24 maxlen: 24
143.20.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 13:17:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:d7:9d:0d:c4:5f:af:3c:22:56:e6:6d:50:27:e8:99:35:ce:5d:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 30 03:44:35 2026 GMT
Not After : Sep 29 03:49:35 2027 GMT
Subject: CN=2170EBCD72CCB96E29E518249EAFFC52D698A902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6a:95:3c:18:2e:cf:c5:b3:b3:1e:81:ce:d8:
e6:5a:ce:74:fd:7f:a3:97:84:b9:f3:e8:23:06:d3:
69:d4:f8:25:27:a6:8e:3f:c1:3b:38:67:b1:89:2d:
86:f9:b8:fe:95:b7:24:16:c1:87:03:19:a6:9e:b8:
c9:e4:75:7d:a8:20:e3:e0:80:ef:c4:00:c6:00:66:
de:91:ca:b5:9b:6e:0c:da:85:8a:7e:45:70:d4:56:
4c:3a:b8:69:df:12:37:35:83:8e:fa:af:53:8c:38:
87:66:8b:36:0c:6a:e9:73:27:86:7e:f6:01:66:61:
e2:70:1c:3e:99:7f:42:ff:53:77:14:41:60:69:63:
63:7d:c9:7d:39:66:04:0a:69:ab:39:bd:bb:bc:02:
45:f9:f4:72:d0:08:dc:76:89:1c:ee:fa:0f:a3:c0:
84:25:2c:80:6a:6a:63:a8:eb:d3:d1:a5:5d:25:99:
b0:49:bf:2e:da:de:7e:6b:3f:6f:24:e9:d5:79:d6:
89:f3:b3:cf:4b:20:f3:8d:ad:5d:8e:0e:7e:f3:74:
df:74:8e:40:f7:2b:47:21:8f:52:8b:ec:cc:ee:74:
f1:90:15:27:da:82:d1:17:79:94:06:94:6f:c5:59:
32:cb:a7:04:3b:e7:1e:f8:c7:1f:18:11:94:b9:7f:
68:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:70:EB:CD:72:CC:B9:6E:29:E5:18:24:9E:AF:FC:52:D6:98:A9:02
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS137962.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.55.0/24
143.20.68.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:3d:fb:73:2e:44:2c:23:4c:1c:b6:2e:28:4c:89:a8:60:ac:
55:fc:b7:c7:a4:ff:e7:4e:ef:fe:99:36:e0:75:f8:11:fa:f0:
98:70:0e:3c:25:68:a0:af:40:0e:dd:14:89:e2:ca:ee:b5:ca:
c4:c3:69:7b:81:50:08:7f:2e:6e:52:11:94:7a:09:7f:23:7e:
d7:6a:19:39:c2:27:af:ff:6f:f4:e1:5a:41:e1:0e:f8:97:37:
dd:58:f3:08:64:20:32:69:14:b4:c5:ec:e3:1c:88:a1:ab:f8:
3c:50:0a:89:18:af:f8:23:6c:40:dc:0e:ca:e0:26:d7:b5:b6:
2b:e9:3e:12:93:e9:33:ea:d1:a9:15:bb:bd:80:72:83:84:8b:
0a:a1:3e:52:f2:f8:46:d3:bb:1d:a4:aa:9e:26:97:2c:f7:28:
e3:7e:d3:60:b8:9e:03:a2:df:c6:61:0d:bf:c3:2c:7c:de:4a:
65:37:b6:2a:9d:8e:e1:a3:03:02:08:6d:64:9e:3f:3d:18:33:
d5:6c:dc:ad:8e:cf:1a:6d:ca:d8:4d:94:ba:b1:1b:2b:0d:24:
dc:83:a3:2c:8c:09:32:3a:7e:dd:21:45:00:ff:b2:9b:eb:67:
1c:10:82:61:ef:74:80:19:f8:a8:b5:f0:2f:55:6c:e4:26:8f:
6a:c2:e8:cc
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUJNedDcRfrzwiVuZtUCfomTXOXa8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk
ZWI5M2Q5ZDAeFw0yNjA5MzAwMzQ0MzVaFw0yNzA5MjkwMzQ5MzVaMDMxMTAvBgNV
BAMTKDIxNzBFQkNENzJDQ0I5NkUyOUU1MTgyNDlFQUZGQzUyRDY5OEE5MDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbapU8GC7PxbOzHoHO2OZaznT9
f6OXhLnz6CMG02nU+CUnpo4/wTs4Z7GJLYb5uP6VtyQWwYcDGaaeuMnkdX2oIOPg
gO/EAMYAZt6RyrWbbgzahYp+RXDUVkw6uGnfEjc1g476r1OMOIdmizYMaulzJ4Z+
9gFmYeJwHD6Zf0L/U3cUQWBpY2N9yX05ZgQKaas5vbu8AkX59HLQCNx2iRzu+g+j
wIQlLIBqamOo69PRpV0lmbBJvy7a3n5rP28k6dV51onzs89LIPONrV2ODn7zdN90
jkD3K0chj1KL7MzudPGQFSfagtEXeZQGlG/FWTLLpwQ75x74xx8YEZS5f2gnAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUIXDrzXLMuW4p5Rgknq/8UtaYqQIwHwYDVR0j
BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2
MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2
NVBaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt
NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTMTM3OTYyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAjxQ3
AwQAjxREMA0GCSqGSIb3DQEBCwUAA4IBAQBMPftzLkQsI0wcti4oTImoYKxV/LfH
pP/nTu/+mTbgdfgR+vCYcA48JWigr0AO3RSJ4srutcrEw2l7gVAIfy5uUhGUegl/
I37Xahk5wiev/2/04VpB4Q74lzfdWPMIZCAyaRS0xezjHIihq/g8UAqJGK/4I2xA
3A7K4CbXtbYr6T4Sk+kz6tGpFbu9gHKDhIsKoT5S8vhG07sdpKqeJpcs9yjjftNg
uJ4Dot/GYQ2/wyx83kplN7YqnY7howMCCG1knj89GDPVbNytjs8abcrYTZS6sRsr
DSTcg6MsjAkyOn7dIUUA/7Kb62ccEIJh73SAGfiotfAvVWzkJo9qwujM
-----END CERTIFICATE-----
Generated at Wed Oct 7 23:13:48 2026 by rpki-client