Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS200019.roa
File: AS200019.roa (raw, json)
Hash identifier: VMTcwljYa8HvvWDUEYM7tUQbuTauW/lKw3r00JXqjE4=
Subject key identifier: 90:55:4C:7A:FE:95:12:B1:7A:AE:15:0D:07:55:68:15:0D:3B:2A:23
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 431EA855A314D08D67B333B400650DF13DFE5308
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS200019.roa
Signing time: Thu 24 Sep 2026 07:49:35 +0000
ROA not before: Thu 24 Sep 2026 07:44:35 +0000
ROA not after: Thu 23 Sep 2027 07:49:35 +0000
asID: 200019
IP address blocks: 143.20.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:1e:a8:55:a3:14:d0:8d:67:b3:33:b4:00:65:0d:f1:3d:fe:53:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 24 07:44:35 2026 GMT
Not After : Sep 23 07:49:35 2027 GMT
Subject: CN=90554C7AFE9512B17AAE150D075568150D3B2A23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:da:8b:53:a7:cc:7f:2f:49:ae:5d:b0:4a:dc:
d1:c6:b3:3a:08:39:a6:eb:83:e3:bc:8c:68:5c:a4:
de:f7:c7:c1:cb:0a:57:e0:ad:51:32:ae:40:ee:6c:
e7:73:64:6b:d2:55:5e:a0:0b:6d:c1:a0:18:09:e2:
67:82:93:3e:2d:43:1d:14:f7:61:f5:92:b3:b3:16:
d0:07:90:02:04:d2:08:94:80:b2:96:b2:e4:be:52:
21:aa:f8:db:61:7d:c4:60:49:bc:b3:07:cc:ec:c4:
4d:df:dc:c4:cc:50:05:2a:51:7e:74:d6:b9:b0:98:
a4:2e:f3:27:99:09:79:e8:92:74:15:fd:d3:79:40:
46:2e:68:6c:ed:eb:57:67:f0:cd:4c:25:48:15:09:
f8:e0:46:d9:72:e4:87:63:d3:29:45:85:34:0d:47:
2d:ae:5a:37:5f:c3:9c:46:fe:52:36:41:80:cd:7d:
f4:57:4f:db:05:8b:5b:8f:a3:ef:de:d0:11:ee:57:
ff:6f:bf:f8:da:cc:a0:db:b7:39:4d:99:15:1e:43:
57:be:a8:71:0e:bd:85:23:b0:dd:50:64:bd:93:99:
8f:c2:e2:52:7f:bb:2f:0d:57:b4:92:b0:ce:9e:5e:
1a:eb:50:9c:f4:db:3f:fd:1b:0a:97:95:9b:c7:9b:
0d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:55:4C:7A:FE:95:12:B1:7A:AE:15:0D:07:55:68:15:0D:3B:2A:23
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS200019.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.44.0/24
Signature Algorithm: sha256WithRSAEncryption
58:80:c9:90:02:1c:08:e5:8c:b2:5e:f2:30:f5:96:b8:73:40:
fd:9a:6a:f6:f4:0c:87:0d:b1:bd:20:85:04:ea:72:1a:ae:84:
9a:54:14:69:79:f0:1d:1e:f3:fa:be:ad:77:8c:cf:c5:d0:f9:
3a:f3:cd:5c:7e:d8:e9:cd:35:1b:af:e6:bd:f5:28:9f:c7:cf:
58:51:24:ed:a5:79:e9:36:5b:b5:30:f7:d1:e2:85:c3:fe:57:
fd:58:58:69:7b:5a:aa:60:e6:79:72:77:40:3a:4b:3a:d3:17:
15:da:b5:dd:94:2b:a3:d7:c9:69:a9:02:78:92:1b:d3:4d:98:
ea:db:eb:98:8a:bf:f2:0f:f9:b0:cb:c6:d8:96:e1:b8:38:9f:
60:d7:f8:e9:ef:b2:22:92:90:86:9e:28:0b:b3:a9:98:48:4f:
d7:06:8a:61:24:ec:9e:86:be:9c:65:20:29:dd:8f:40:69:b1:
94:ad:a6:d8:c2:40:63:8b:8f:7c:87:39:f0:8c:21:8d:d6:a7:
56:6f:24:4b:9e:81:4c:c3:1c:15:9c:a2:8d:b9:81:03:ff:3f:
84:40:8b:5e:6c:8a:bb:e5:c3:3b:30:ef:77:ce:88:02:d9:a0:
f1:20:dd:78:c0:09:f9:6b:5e:8b:32:53:f8:b0:98:ba:c3:34:
eb:44:f5:fa
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUQx6oVaMU0I1nszO0AGUN8T3+UwgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk
ZWI5M2Q5ZDAeFw0yNjA5MjQwNzQ0MzVaFw0yNzA5MjMwNzQ5MzVaMDMxMTAvBgNV
BAMTKDkwNTU0QzdBRkU5NTEyQjE3QUFFMTUwRDA3NTU2ODE1MEQzQjJBMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN2otTp8x/L0muXbBK3NHGszoI
Oabrg+O8jGhcpN73x8HLClfgrVEyrkDubOdzZGvSVV6gC23BoBgJ4meCkz4tQx0U
92H1krOzFtAHkAIE0giUgLKWsuS+UiGq+NthfcRgSbyzB8zsxE3f3MTMUAUqUX50
1rmwmKQu8yeZCXnoknQV/dN5QEYuaGzt61dn8M1MJUgVCfjgRtly5Idj0ylFhTQN
Ry2uWjdfw5xG/lI2QYDNffRXT9sFi1uPo+/e0BHuV/9vv/jazKDbtzlNmRUeQ1e+
qHEOvYUjsN1QZL2TmY/C4lJ/uy8NV7SSsM6eXhrrUJz02z/9GwqXlZvHmw35AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUkFVMev6VErF6rhUNB1VoFQ07KiMwHwYDVR0j
BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2
MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2
NVBaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt
NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTMjAwMDE5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjxQs
MA0GCSqGSIb3DQEBCwUAA4IBAQBYgMmQAhwI5YyyXvIw9Za4c0D9mmr29AyHDbG9
IIUE6nIaroSaVBRpefAdHvP6vq13jM/F0Pk6881cftjpzTUbr+a99Sifx89YUSTt
pXnpNlu1MPfR4oXD/lf9WFhpe1qqYOZ5cndAOks60xcV2rXdlCuj18lpqQJ4khvT
TZjq2+uYir/yD/mwy8bYluG4OJ9g1/jp77IikpCGnigLs6mYSE/XBophJOyehr6c
ZSAp3Y9AabGUrabYwkBji498hznwjCGN1qdWbyRLnoFMwxwVnKKNuYED/z+EQIte
bIq75cM7MO93zogC2aDxIN14wAn5a16LMlP4sJi6wzTrRPX6
-----END CERTIFICATE-----
Generated at Wed Oct 21 10:28:46 2026 by rpki-client