Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS154383.roa
File: AS154383.roa (raw, json)
Hash identifier: GZAkj6k09MZ2IOZ/36cQxHnZFChwZlD+Ki3w15s1nOI=
Subject key identifier: D7:88:50:5D:17:78:9C:F8:66:9F:77:05:C0:05:14:C1:FF:D0:98:5F
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 224A4756F85D8735DFA26BAE6C5377F6603F4373
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS154383.roa
Signing time: Sat 30 May 2026 03:54:05 +0000
ROA not before: Sat 30 May 2026 03:49:05 +0000
ROA not after: Sat 29 May 2027 03:54:05 +0000
asID: 154383
IP address blocks: 143.20.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 21:46:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:4a:47:56:f8:5d:87:35:df:a2:6b:ae:6c:53:77:f6:60:3f:43:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: May 30 03:49:05 2026 GMT
Not After : May 29 03:54:05 2027 GMT
Subject: CN=D788505D17789CF8669F7705C00514C1FFD0985F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b8:78:80:b4:7b:56:f3:39:e9:a6:60:ea:38:
db:47:27:72:80:a8:64:3e:70:d8:0f:ef:15:34:a8:
29:94:10:11:ac:a3:76:f9:85:28:8c:45:4f:a1:41:
8d:13:08:19:fe:69:18:1a:47:f9:98:05:43:74:59:
85:6b:7d:e9:7a:7c:ff:da:1d:4f:18:63:1d:a2:d4:
ef:ff:7e:34:95:93:69:28:76:44:77:f5:57:87:d0:
38:46:3d:26:25:12:ff:12:7b:a0:51:fe:43:e8:f9:
82:a6:83:a3:9e:d0:8f:5a:08:b7:11:9d:85:4c:1f:
6c:ec:91:f6:90:de:4f:a1:e3:47:00:ef:d6:58:d4:
07:f6:43:6d:67:6c:ec:ed:26:1b:f9:5f:7f:2f:89:
3c:51:d1:30:0c:0b:a3:1d:9f:66:9e:bc:60:23:cd:
ad:7e:ab:c5:49:59:60:42:c4:db:8c:82:cb:22:a8:
d8:14:5c:fd:0b:fb:c2:6c:5d:8d:12:6f:fc:2a:49:
dc:8e:c6:26:6b:59:c3:be:62:e9:1e:f4:c0:24:46:
a9:b3:68:ab:b1:8a:a5:75:a5:35:11:6e:f9:5e:08:
74:55:2b:ac:2e:cb:d6:fe:e4:b3:e0:3b:2f:47:7d:
46:33:a9:21:61:2c:f5:79:d1:f3:80:e8:9a:f9:a6:
c2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:88:50:5D:17:78:9C:F8:66:9F:77:05:C0:05:14:C1:FF:D0:98:5F
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS154383.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.145.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:a4:bd:4a:50:81:97:87:59:1b:f5:73:1b:1c:e3:0a:33:ab:
24:58:fb:a6:8c:d9:12:52:b1:cb:03:fd:87:42:fd:65:8a:0d:
07:45:be:1d:c2:a9:b6:18:5b:29:d8:f8:59:b8:f7:a7:13:36:
f3:1d:6e:87:68:df:fc:82:fd:18:5d:71:29:ef:55:c6:4d:df:
e7:98:89:70:57:b9:9b:fd:01:d4:ad:0b:26:f8:93:c0:17:04:
b9:23:43:80:11:94:0e:ea:7c:e2:8d:57:50:f2:2c:07:96:fe:
5f:d3:3a:f8:f1:ef:57:6a:b2:34:bc:2b:7a:f0:7c:ad:03:3d:
41:99:cf:53:90:90:09:67:98:88:17:7f:bf:c1:69:03:e1:1d:
a3:9a:99:cd:6a:98:11:09:03:30:cc:f0:e2:51:db:f1:db:ec:
dd:93:ab:bd:e0:8f:cf:35:a9:a3:00:c3:18:f7:43:10:05:39:
78:ad:63:85:99:a6:dd:e2:02:9d:65:40:f2:7a:b2:50:38:60:
81:d8:f1:e5:2e:fe:87:95:1e:2f:f4:83:d4:91:cd:df:92:b7:
21:f2:a1:15:cf:76:25:74:e2:db:2c:2f:6a:f0:0a:a0:56:c8:
67:3f:ab:f0:4e:95:36:e0:77:76:ea:41:ba:30:0a:c1:f3:a2:
68:be:b8:ad
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUIkpHVvhdhzXfomuubFN39mA/Q3MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk
ZWI5M2Q5ZDAeFw0yNjA1MzAwMzQ5MDVaFw0yNzA1MjkwMzU0MDVaMDMxMTAvBgNV
BAMTKEQ3ODg1MDVEMTc3ODlDRjg2NjlGNzcwNUMwMDUxNEMxRkZEMDk4NUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4uHiAtHtW8znppmDqONtHJ3KA
qGQ+cNgP7xU0qCmUEBGso3b5hSiMRU+hQY0TCBn+aRgaR/mYBUN0WYVrfel6fP/a
HU8YYx2i1O//fjSVk2kodkR39VeH0DhGPSYlEv8Se6BR/kPo+YKmg6Oe0I9aCLcR
nYVMH2zskfaQ3k+h40cA79ZY1Af2Q21nbOztJhv5X38viTxR0TAMC6Mdn2aevGAj
za1+q8VJWWBCxNuMgssiqNgUXP0L+8JsXY0Sb/wqSdyOxiZrWcO+Yuke9MAkRqmz
aKuxiqV1pTURbvleCHRVK6wuy9b+5LPgOy9HfUYzqSFhLPV50fOA6Jr5psLlAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQU14hQXRd4nPhmn3cFwAUUwf/QmF8wHwYDVR0j
BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2
MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2
NVBaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt
NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTMTU0MzgzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjxSR
MA0GCSqGSIb3DQEBCwUAA4IBAQDQpL1KUIGXh1kb9XMbHOMKM6skWPumjNkSUrHL
A/2HQv1lig0HRb4dwqm2GFsp2PhZuPenEzbzHW6HaN/8gv0YXXEp71XGTd/nmIlw
V7mb/QHUrQsm+JPAFwS5I0OAEZQO6nzijVdQ8iwHlv5f0zr48e9XarI0vCt68Hyt
Az1Bmc9TkJAJZ5iIF3+/wWkD4R2jmpnNapgRCQMwzPDiUdvx2+zdk6u94I/PNamj
AMMY90MQBTl4rWOFmabd4gKdZUDyerJQOGCB2PHlLv6HlR4v9IPUkc3fkrch8qEV
z3YldOLbLC9q8AqgVshnP6vwTpU24Hd26kG6MArB86Jovrit
-----END CERTIFICATE-----
Generated at Thu Jun 4 09:59:31 2026 by rpki-client