Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS20771.roa
File: AS20771.roa (raw, json)
Hash identifier: qMiRMN2No92Qu1h/zbMk1o/caNZy361KQfZW2y1TiZU=
Subject key identifier: 65:76:93:6D:A9:62:15:7B:10:C7:07:F1:E7:9F:75:F6:EC:3D:17:D2
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 45E08CC4567E3DB0AAA807846263C77466BA4C09
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS20771.roa
Signing time: Thu 03 Sep 2026 19:40:46 +0000
ROA not before: Thu 03 Sep 2026 19:35:46 +0000
ROA not after: Thu 02 Sep 2027 19:40:46 +0000
asID: 20771
IP address blocks: 143.20.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 22:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:e0:8c:c4:56:7e:3d:b0:aa:a8:07:84:62:63:c7:74:66:ba:4c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 3 19:35:46 2026 GMT
Not After : Sep 2 19:40:46 2027 GMT
Subject: CN=6576936DA962157B10C707F1E79F75F6EC3D17D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ed:74:a9:88:70:de:0a:af:28:55:b9:6c:23:
ef:c9:33:4e:f0:99:39:26:32:b3:5a:ac:a8:41:d0:
e5:54:8b:a6:ed:92:44:0a:24:35:43:5f:a1:de:be:
1a:d0:23:31:a4:2a:00:de:0a:be:79:51:f3:9a:2c:
5c:ed:15:8e:ee:90:5c:e6:00:9f:a8:3a:24:56:30:
4a:a5:5f:02:de:39:ab:91:01:83:81:be:08:81:83:
dc:74:c5:21:1b:6b:51:d6:5b:36:d0:c6:20:17:36:
10:7a:be:ff:70:9f:c5:3f:b8:64:88:f8:d3:67:08:
72:a0:af:cf:9b:d3:92:21:94:0e:89:75:1b:a0:03:
d4:df:ee:34:e8:0a:89:83:b2:c6:a9:02:6a:b1:68:
67:39:05:a4:89:91:2a:60:17:5a:4c:7c:1b:ca:fb:
6d:83:32:6d:ca:de:97:4b:20:f9:34:b2:07:d4:44:
9b:8d:bb:3d:0f:72:0f:86:b9:ec:92:78:96:21:7f:
3e:f6:c3:5f:a2:5e:a1:4b:eb:f6:9e:7f:53:a7:17:
06:1b:0e:c3:f3:0c:50:4e:6f:ab:b1:41:a3:da:53:
4c:1b:d5:b6:eb:a3:f4:ed:d1:c6:b1:0a:b4:27:eb:
35:ce:b9:e5:9e:05:59:9f:ff:54:66:3c:97:6b:53:
ad:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:76:93:6D:A9:62:15:7B:10:C7:07:F1:E7:9F:75:F6:EC:3D:17:D2
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS20771.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.53.0/24
Signature Algorithm: sha256WithRSAEncryption
56:9a:72:b4:e8:a0:5a:80:2d:03:be:7e:af:e4:e6:98:c3:a4:
50:2f:0c:d0:8c:a5:fc:87:f2:ae:dc:f9:ed:28:9f:0f:b7:af:
14:b7:7b:4a:6c:40:92:89:e0:c5:26:1f:dd:84:d0:4f:98:c3:
2c:4e:29:0f:1e:7b:64:6e:f4:8c:8e:ef:fd:00:ef:8a:86:73:
cc:16:36:04:5c:74:f9:50:4d:88:7d:75:ce:97:0a:a3:04:3c:
f5:98:aa:93:15:8a:d7:46:0d:37:7c:5b:a6:5f:7c:07:1d:e1:
07:f2:5b:40:3f:3b:6b:5f:88:1b:e4:bb:ab:e5:d3:a9:4d:11:
53:fd:0b:cc:71:55:c6:01:e8:51:3a:f9:18:6b:d3:0d:f9:0d:
e6:a5:af:be:02:4f:44:1c:af:b8:16:02:6e:d2:01:42:28:38:
33:2e:a8:fa:7e:9e:32:c0:c0:57:74:e9:db:50:4b:45:0a:9a:
b2:43:e1:2d:2d:4d:dd:72:9f:d3:83:11:2f:bf:3f:6c:a6:04:
60:2a:54:63:9e:9d:5e:bf:30:6d:25:2b:46:17:20:76:20:54:
5d:c6:bd:be:44:27:99:80:fa:48:2b:43:a3:96:e8:97:d6:f8:
f7:aa:d2:88:f5:b1:60:f3:b9:d6:15:ef:ac:38:2b:81:df:67:
49:c3:33:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 07:25:00 2026 by rpki-client