Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS202673.roa
File: AS202673.roa (raw, json)
Hash identifier: /zgTtlJvOi3Mf+ihWZ8F2cXxboSAWQOkf1CC+aqK0B0=
Subject key identifier: D8:C3:53:CF:9E:8F:11:BF:A0:4F:8A:B1:F5:27:5A:96:A2:6D:01:30
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 47361C9AA815902733B9251B658160EABF5EB479
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS202673.roa
Signing time: Wed 02 Sep 2026 13:49:32 +0000
ROA not before: Wed 02 Sep 2026 13:44:32 +0000
ROA not after: Wed 01 Sep 2027 13:49:32 +0000
asID: 202673
IP address blocks: 143.20.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Sep 2026 16:27:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:36:1c:9a:a8:15:90:27:33:b9:25:1b:65:81:60:ea:bf:5e:b4:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 2 13:44:32 2026 GMT
Not After : Sep 1 13:49:32 2027 GMT
Subject: CN=D8C353CF9E8F11BFA04F8AB1F5275A96A26D0130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6f:90:57:b3:45:e4:ec:80:45:15:f4:08:01:
85:44:c2:74:26:9d:c3:4f:e4:3b:16:7a:fa:b6:cc:
46:3a:a0:d1:3b:31:dd:40:7c:d4:14:35:64:1d:af:
a5:3f:82:00:43:20:01:0b:4a:ac:dc:f2:6d:65:17:
91:c5:93:20:71:dd:cf:ea:df:08:9d:8c:b4:ee:44:
ad:3d:fb:51:10:63:20:e9:7a:39:4a:b6:6e:55:e2:
2f:16:8d:d4:8d:e7:17:e6:a2:f1:62:ed:97:a5:ef:
25:1d:c1:fc:ea:c2:59:5a:0a:c6:13:60:f5:17:fb:
b5:cd:fe:42:11:c0:6d:41:cd:17:94:f9:35:54:57:
f9:5c:2d:96:c9:d3:b5:97:5b:29:da:b5:c0:67:af:
bb:d3:c0:22:ba:1a:de:00:ee:55:f7:da:c4:59:b8:
57:03:45:68:25:a4:fb:c2:8e:cc:42:ae:7c:71:c0:
b6:38:29:f0:be:be:5d:1f:6a:eb:92:f0:ec:84:53:
06:51:41:d0:0a:fd:c3:dc:83:70:b9:c3:7c:75:42:
61:6f:f3:40:78:fd:b5:4b:7d:13:de:62:e7:00:9b:
bb:44:96:e2:a9:42:70:da:88:b1:53:62:d8:c9:32:
2e:3f:2f:5b:a4:c3:ed:93:03:bb:bc:6c:7a:08:9a:
60:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C3:53:CF:9E:8F:11:BF:A0:4F:8A:B1:F5:27:5A:96:A2:6D:01:30
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS202673.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.129.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:a2:cb:91:dd:07:37:78:b8:2b:a5:ba:70:2e:58:99:65:41:
42:b4:bd:74:30:36:f2:26:33:e2:ca:81:a2:07:d5:41:00:66:
fb:7d:8f:38:8d:10:19:06:f0:c2:af:5d:5f:b9:04:b4:c3:09:
db:d0:77:65:4b:4a:3a:a9:5b:1b:a8:27:6d:0e:aa:ca:43:dd:
8f:0a:2b:39:73:04:c8:d6:41:7c:19:f1:d6:45:0a:a6:fd:39:
2c:72:56:9a:25:48:85:66:f9:64:18:45:c1:7f:2b:f4:a3:7f:
90:63:19:6c:ef:a4:6c:07:23:fd:64:bd:dc:4e:b6:8b:9e:09:
ad:95:13:a1:45:11:8a:da:6d:c9:95:3a:2f:54:0c:e7:1e:bd:
f1:60:93:9f:6f:a3:a3:d4:9f:1f:46:3d:b4:22:77:82:bb:a4:
57:19:aa:09:04:7c:99:e0:6f:bd:07:fe:fd:ff:07:18:23:cf:
e8:06:13:89:1a:fe:78:03:a1:8c:fe:2f:8b:8d:34:55:d1:e7:
ee:4b:17:68:71:f4:e3:70:89:d5:a3:e4:20:48:7e:f6:7b:6d:
1e:a7:9d:5f:43:23:b4:ed:4f:cd:a3:61:2d:82:e1:f2:dc:5c:
41:1a:da:b4:ae:6a:a2:76:e2:eb:70:37:45:1c:ba:70:6e:06:
be:46:11:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 02:58:16 2026 by rpki-client