Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS204957.roa
File: AS204957.roa (raw, json)
Hash identifier: jxgKI/9CeEFDtKVE6CGdAsZcd4NBnYphOFLVjv2vJ2Y=
Subject key identifier: A2:76:29:79:4F:D6:71:45:E0:00:02:32:A7:03:08:1B:51:DE:4C:FB
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 1773391C2C8F6BFB5DBAA3F8D4810124C4DE54A1
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS204957.roa
Signing time: Wed 17 Jun 2026 09:47:39 +0000
ROA not before: Wed 17 Jun 2026 09:42:39 +0000
ROA not after: Wed 16 Jun 2027 09:47:39 +0000
asID: 204957
IP address blocks: 143.20.164.0/24 maxlen: 24
143.20.169.0/24 maxlen: 24
143.20.171.0/24 maxlen: 24
143.20.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:73:39:1c:2c:8f:6b:fb:5d:ba:a3:f8:d4:81:01:24:c4:de:54:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Jun 17 09:42:39 2026 GMT
Not After : Jun 16 09:47:39 2027 GMT
Subject: CN=A27629794FD67145E0000232A703081B51DE4CFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e3:70:4a:41:fe:6b:c7:5f:bc:bc:99:75:c2:
b6:ba:4a:e7:3c:cf:9c:26:19:bd:33:3e:c3:64:a9:
30:7a:9c:72:2a:61:41:cf:90:d4:35:00:da:2b:24:
67:77:d0:74:a0:0c:4b:80:8c:58:cd:e2:ab:f3:44:
b1:bf:95:18:3d:b9:83:9d:01:68:f3:37:cb:8a:7b:
6d:2c:80:7c:69:ad:f4:12:7d:6d:6d:34:51:cf:ca:
0c:59:e7:0b:e5:55:a8:28:49:4c:43:93:5a:b3:02:
5b:e8:95:f1:ba:6f:00:46:b3:a4:07:de:a7:b4:3a:
55:27:9c:83:6f:9b:32:ec:b8:d6:1a:2c:93:24:63:
d1:bb:cb:ea:c6:48:c8:8a:00:82:99:94:12:2c:34:
df:c8:c7:11:0f:1a:26:b3:63:c1:2f:8b:f2:fc:65:
21:a5:75:d4:59:ea:f5:86:f4:32:cc:63:c3:32:d7:
ff:4e:57:cf:f4:68:63:09:6b:27:24:64:e1:b0:d1:
e1:0c:34:b6:e5:2e:74:bb:b2:73:0e:c6:fa:6e:c8:
3d:5d:0d:96:2b:c4:cc:c2:b9:8b:44:b3:6b:75:96:
1a:9b:a5:b2:43:a4:0a:7d:1c:ed:ee:81:58:fa:32:
76:db:e2:e1:4d:9d:69:10:38:66:50:1e:3f:2f:e8:
52:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:76:29:79:4F:D6:71:45:E0:00:02:32:A7:03:08:1B:51:DE:4C:FB
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS204957.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.164.0/24
143.20.169.0/24
143.20.171.0-143.20.172.255
Signature Algorithm: sha256WithRSAEncryption
56:e7:6b:24:1c:51:29:b9:3d:00:57:bb:b7:5b:58:d0:69:00:
21:72:f3:ae:d8:a6:77:51:f3:8d:b2:24:78:30:7a:91:13:e2:
51:bd:3b:21:34:50:cd:5e:a0:f6:58:5e:8d:b9:fc:e0:95:75:
03:81:83:5a:11:d4:f7:a0:dc:0a:f7:7b:84:f7:a9:53:1b:95:
0b:bf:e6:4e:23:c3:d2:48:96:d1:cb:50:f6:6a:4d:13:01:a7:
32:53:28:b3:0e:5e:95:66:08:9f:37:66:18:8a:42:72:5c:0a:
01:cc:47:c9:15:54:b0:41:cb:3f:8f:d2:b4:76:6b:20:c1:53:
ab:1b:bb:2e:78:93:38:70:ba:ef:b1:21:46:f7:da:6e:b5:78:
19:e6:6f:cc:63:6d:b2:1e:fd:b0:82:42:a4:0e:f2:5c:5f:18:
b6:de:ac:42:21:60:da:98:92:26:65:af:fc:e9:f5:b8:94:ac:
bd:99:32:38:6c:8d:13:0a:08:90:64:f7:a9:33:85:34:1d:48:
17:32:64:51:95:0f:ad:b8:9b:5b:f6:ed:23:35:ff:f0:64:88:
07:8a:0e:e4:43:f4:93:54:37:f1:98:d0:61:ae:31:e3:93:f7:
53:2d:38:50:19:04:84:ff:a5:ac:16:3c:65:a6:0d:a7:c8:03:
f4:05:94:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:00:31 2026 by rpki-client