Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS200506.roa
File: AS200506.roa (raw, json)
Hash identifier: X0A59iWbVZvHs31BW4kXUtkNPdfGchY52lPeqhwzVIM=
Subject key identifier: 9C:F7:5E:2D:BE:69:E8:78:0B:D1:0A:19:FF:71:13:BE:F1:66:97:0C
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 124EF9A3EB3D304DBF0C2DFEAD92692A9D318B7B
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS200506.roa
Signing time: Tue 31 Mar 2026 08:56:40 +0000
ROA not before: Tue 31 Mar 2026 08:51:40 +0000
ROA not after: Tue 30 Mar 2027 08:56:40 +0000
asID: 200506
IP address blocks: 143.20.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 Apr 2026 05:15:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:4e:f9:a3:eb:3d:30:4d:bf:0c:2d:fe:ad:92:69:2a:9d:31:8b:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Mar 31 08:51:40 2026 GMT
Not After : Mar 30 08:56:40 2027 GMT
Subject: CN=9CF75E2DBE69E8780BD10A19FF7113BEF166970C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:43:9a:12:14:22:0e:4d:d3:cb:cb:c9:d2:e4:
ad:f2:38:09:6a:31:33:0d:1a:d3:0f:12:e4:a2:11:
a3:07:29:cf:4e:a0:fc:ea:dd:b2:4f:c7:41:45:38:
0d:82:5a:d9:f8:f2:ec:e1:ff:f0:e2:94:d4:84:c6:
fc:3e:b6:f1:ac:15:75:d2:35:10:1b:ad:23:7a:ac:
77:ec:bf:0f:3a:a8:6b:6a:79:f4:2a:3f:7a:62:2b:
aa:32:72:fd:ef:5e:53:74:b5:07:bc:65:c0:2d:d0:
92:52:64:2c:90:f7:76:3b:1f:07:95:15:d1:2f:de:
de:11:f5:31:1c:cf:39:91:81:09:2e:b0:cf:b2:16:
4c:4b:18:1b:04:6e:cb:6e:e5:fd:ad:11:6e:14:76:
04:b9:a9:92:57:45:f4:e2:c6:da:8c:70:f6:a5:35:
10:28:90:3a:26:7a:a2:22:71:16:c8:0a:3c:bb:50:
9d:24:09:fb:8e:fc:e7:b5:d2:0f:a3:1d:3a:26:76:
76:0c:0d:a8:fc:89:54:72:27:bb:e5:2d:be:fb:ea:
0b:f7:81:ae:4c:17:35:c9:33:84:9e:e1:38:b0:fb:
2d:ba:a7:78:7e:04:23:af:df:b1:3e:bb:6d:f3:9e:
0f:44:7c:61:15:e2:0e:c0:14:ca:79:03:64:58:e3:
51:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F7:5E:2D:BE:69:E8:78:0B:D1:0A:19:FF:71:13:BE:F1:66:97:0C
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS200506.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.14.0/24
Signature Algorithm: sha256WithRSAEncryption
09:df:11:22:8a:fa:9a:ac:4f:99:ba:70:55:91:bb:a0:0d:36:
ad:c8:8c:c9:94:fb:22:23:74:a9:68:2e:00:8d:15:16:d2:32:
58:da:4c:eb:b7:65:f6:5e:b3:ba:51:80:ba:c8:56:ea:94:dd:
53:7b:9e:42:ad:4b:ca:cc:f4:d6:ba:c1:32:b9:9d:4b:c5:f0:
b9:82:4e:d9:52:29:32:e3:3c:6e:3d:08:d6:ac:5f:b4:16:fc:
c5:77:58:58:ff:27:f5:7f:e2:24:05:bd:0e:78:07:e7:6c:17:
c5:40:21:d5:a4:c6:5a:d5:c2:20:da:90:66:1a:11:06:13:28:
c1:dd:84:5b:35:7c:53:2a:41:01:6e:83:04:8c:d9:3d:bb:d8:
d7:54:31:c7:5e:9b:e2:71:4b:92:ff:c0:98:79:ee:3c:54:6d:
7d:23:b4:1e:e8:f9:12:f7:66:ba:32:9e:d8:7e:e9:92:a6:b0:
d5:c0:42:7a:87:0b:66:1c:a5:ec:1f:e9:13:88:97:22:5b:45:
dc:dc:f3:d8:2d:20:35:31:c9:9a:d0:f1:26:3e:57:fa:c5:64:
82:35:62:57:df:dc:01:48:35:11:a2:44:de:9a:55:b7:13:03:
d3:9c:c7:0b:40:ce:d9:59:39:05:6a:5f:f5:5d:ab:d3:54:12:
94:11:07:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 13:05:56 2026 by rpki-client