Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS199829.roa
File: AS199829.roa (raw, json)
Hash identifier: Zo3Jd/0ZlKpfoFP5p8kiPUDsAf/JYFtd7e2Nn/+DOdg=
Subject key identifier: 5C:E5:37:9D:50:2D:FB:EB:5F:A4:DE:8A:FF:F7:9B:4A:80:88:75:54
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 7ABAE0447593B6DBCBC660EC367D29BB6D627EAB
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS199829.roa
Signing time: Mon 31 Aug 2026 01:54:05 +0000
ROA not before: Mon 31 Aug 2026 01:49:05 +0000
ROA not after: Mon 30 Aug 2027 01:54:05 +0000
asID: 199829
IP address blocks: 143.20.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 22:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:ba:e0:44:75:93:b6:db:cb:c6:60:ec:36:7d:29:bb:6d:62:7e:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Aug 31 01:49:05 2026 GMT
Not After : Aug 30 01:54:05 2027 GMT
Subject: CN=5CE5379D502DFBEB5FA4DE8AFFF79B4A80887554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7e:cd:00:c5:5b:f0:cf:c0:59:31:60:c1:2d:
92:18:4a:9b:a5:2f:38:2c:5f:b8:1f:9d:1d:29:a6:
df:f9:94:7e:7d:7d:1f:eb:55:20:5a:d6:be:d6:c2:
ef:a6:ad:3c:f7:09:35:c2:af:bb:21:23:27:e5:a9:
90:63:0a:63:7f:6d:7b:ca:79:49:69:f3:38:9b:75:
23:58:26:1b:09:d0:4b:37:42:2e:10:65:67:ab:84:
47:0d:ff:94:df:05:46:54:f1:2c:a8:df:e9:79:1c:
ff:a3:89:86:dc:9f:4a:20:0f:94:5a:ac:a4:f9:92:
bf:79:0f:9d:36:76:77:31:c5:71:06:0c:e6:f6:c1:
b0:18:62:aa:da:3e:59:5d:48:5c:7e:25:6d:18:ff:
2d:cf:29:7a:cb:f9:5f:ab:a1:88:87:a9:10:f9:17:
a4:e2:21:cd:dc:37:d4:62:29:70:d2:32:7f:09:a8:
28:e7:a9:b8:0c:29:77:e4:ba:88:13:ab:6c:f9:3a:
89:e8:cf:71:aa:cc:a8:e6:65:eb:2a:0d:47:51:01:
86:30:0c:fe:0b:c7:db:e0:f9:87:a8:5b:24:7a:5e:
94:6e:6f:e9:87:2a:0d:85:60:0d:a5:43:76:2b:db:
40:6d:44:9a:97:38:76:87:90:b4:43:31:8e:11:81:
bc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E5:37:9D:50:2D:FB:EB:5F:A4:DE:8A:FF:F7:9B:4A:80:88:75:54
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS199829.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.50.0/24
Signature Algorithm: sha256WithRSAEncryption
28:0f:81:71:83:52:4a:7b:75:7d:1a:f9:94:88:1c:fe:10:c9:
b4:b7:c6:73:aa:01:c2:83:77:a5:36:14:d0:e5:6c:dc:a4:d3:
bc:f0:0d:b7:57:05:05:f2:60:df:97:6c:e5:da:b0:0c:9a:97:
48:e7:42:0b:74:fc:2c:21:b3:1a:50:6b:86:3f:39:0a:2a:db:
9a:8f:08:96:b0:52:76:b6:e9:81:f6:f3:79:f4:63:d7:71:88:
13:32:e6:84:34:37:9c:26:94:15:b2:1a:8e:cb:fa:6d:bb:71:
d7:4d:ce:c0:a3:db:8f:d5:8e:a0:8d:2b:92:21:be:c7:65:97:
ac:6f:5b:40:00:a0:9a:58:6f:53:61:9a:ad:c8:9e:aa:9d:a8:
8a:35:c7:12:92:5a:af:8c:5c:02:63:80:b1:87:29:e9:37:94:
32:0b:28:75:57:44:4f:68:cb:18:3a:2c:51:bb:a5:42:f4:ac:
3b:2d:15:43:6c:a4:11:6b:3d:ee:19:3d:70:5b:5f:4e:e8:93:
f4:d9:ea:96:08:8c:d6:79:0e:69:6e:73:e3:d8:41:73:a7:71:
5f:03:2c:c2:d8:2e:00:ed:f3:7b:21:d5:cf:b5:3b:59:c1:42:
18:d5:8b:01:9c:f0:3d:f3:ad:56:5d:ce:92:92:46:1a:21:1d:
91:27:4c:86
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUerrgRHWTttvLxmDsNn0pu21ifqswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk
ZWI5M2Q5ZDAeFw0yNjA4MzEwMTQ5MDVaFw0yNzA4MzAwMTU0MDVaMDMxMTAvBgNV
BAMTKDVDRTUzNzlENTAyREZCRUI1RkE0REU4QUZGRjc5QjRBODA4ODc1NTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKfs0AxVvwz8BZMWDBLZIYSpul
LzgsX7gfnR0ppt/5lH59fR/rVSBa1r7Wwu+mrTz3CTXCr7shIyflqZBjCmN/bXvK
eUlp8zibdSNYJhsJ0Es3Qi4QZWerhEcN/5TfBUZU8Syo3+l5HP+jiYbcn0ogD5Ra
rKT5kr95D502dncxxXEGDOb2wbAYYqraPlldSFx+JW0Y/y3PKXrL+V+roYiHqRD5
F6TiIc3cN9RiKXDSMn8JqCjnqbgMKXfkuogTq2z5Oonoz3GqzKjmZesqDUdRAYYw
DP4Lx9vg+YeoWyR6XpRub+mHKg2FYA2lQ3Yr20BtRJqXOHaHkLRDMY4RgbxVAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUXOU3nVAt++tfpN6K//ebSoCIdVQwHwYDVR0j
BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2
MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2
NVBaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt
NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTMTk5ODI5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjxQy
MA0GCSqGSIb3DQEBCwUAA4IBAQAoD4Fxg1JKe3V9GvmUiBz+EMm0t8ZzqgHCg3el
NhTQ5WzcpNO88A23VwUF8mDfl2zl2rAMmpdI50ILdPwsIbMaUGuGPzkKKtuajwiW
sFJ2tumB9vN59GPXcYgTMuaENDecJpQVshqOy/ptu3HXTc7Ao9uP1Y6gjSuSIb7H
ZZesb1tAAKCaWG9TYZqtyJ6qnaiKNccSklqvjFwCY4CxhynpN5QyCyh1V0RPaMsY
OixRu6VC9Kw7LRVDbKQRaz3uGT1wW19O6JP02eqWCIzWeQ5pbnPj2EFzp3FfAyzC
2C4A7fN7IdXPtTtZwUIY1YsBnPA9861WXc6SkkYaIR2RJ0yG
-----END CERTIFICATE-----
Generated at Fri Sep 4 07:39:36 2026 by rpki-client