Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS208394.roa
File: AS208394.roa (raw, json)
Hash identifier: pN/qerQP9TQkWkIWr+6zAdwZ8UZ6grl5h4xjPHNYJYg=
Subject key identifier: 2A:9A:1E:54:30:3D:F5:CA:AD:A1:A0:24:7C:8F:9B:DB:2D:B3:17:3A
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 7354CAA0FDFEA835FB611A42C81CFF43CF8125D8
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS208394.roa
Signing time: Tue 07 Jul 2026 19:45:31 +0000
ROA not before: Tue 07 Jul 2026 19:40:31 +0000
ROA not after: Tue 06 Jul 2027 19:45:31 +0000
asID: 208394
IP address blocks: 143.20.20.0/24 maxlen: 24
143.20.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:54:ca:a0:fd:fe:a8:35:fb:61:1a:42:c8:1c:ff:43:cf:81:25:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Jul 7 19:40:31 2026 GMT
Not After : Jul 6 19:45:31 2027 GMT
Subject: CN=2A9A1E54303DF5CAADA1A0247C8F9BDB2DB3173A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b6:e3:f5:a2:83:8b:55:ba:99:27:50:73:e5:
a1:99:92:05:90:3d:87:0f:5f:e1:f9:ae:4b:06:98:
be:40:e3:0c:a5:c1:bb:f3:ee:5b:d0:76:4a:ea:48:
de:23:5d:13:47:94:af:03:9b:5c:a1:47:8f:73:fd:
11:0e:3d:5c:85:3d:6c:4f:57:fa:ae:f0:a5:fc:93:
84:9b:63:b0:de:b2:06:6f:0d:cf:ff:35:ab:19:ea:
68:97:78:c6:2d:05:cb:f0:c6:fe:37:8f:69:b7:36:
e2:05:ca:e5:e7:90:3f:cd:ef:43:5a:3d:f3:33:c2:
68:c6:66:e3:42:fc:87:44:cb:59:ba:e9:6f:20:ec:
6a:55:d1:16:61:41:b8:a0:08:fc:97:d2:71:f8:03:
95:2e:15:70:3c:ab:f4:d5:4c:d6:f2:59:e8:9c:bb:
d9:af:bc:f0:16:b8:75:01:5d:e2:f0:a9:e4:7a:1d:
a8:d4:f3:df:dc:c1:60:8d:61:8b:58:0b:d5:a2:2a:
76:91:24:80:ff:c0:4e:f9:5f:6a:2f:13:60:1f:1a:
28:6a:4d:b6:c0:12:dc:07:c8:f2:1b:1f:0e:56:64:
18:47:ba:f4:a4:38:14:83:86:84:e2:e6:35:ca:56:
fe:8e:91:a9:84:db:20:2e:47:b6:df:c0:d3:1b:72:
2b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:9A:1E:54:30:3D:F5:CA:AD:A1:A0:24:7C:8F:9B:DB:2D:B3:17:3A
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS208394.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.20.0/23
Signature Algorithm: sha256WithRSAEncryption
98:e6:d3:ed:bb:32:38:c6:a2:a9:37:65:6c:11:1c:f1:65:29:
1b:76:86:61:80:56:be:4d:0b:f8:12:00:26:18:8f:55:c7:d3:
4e:c6:07:71:ab:ca:9a:7c:be:62:43:c6:26:6a:40:71:49:5c:
5d:4a:34:1a:5d:ed:f9:43:1a:63:80:de:4c:a3:4c:71:6b:23:
e8:eb:30:af:a4:3f:f7:0b:a1:a2:ef:2b:ef:95:7e:ec:ca:06:
3a:ff:50:80:7b:2b:44:52:05:19:39:9b:17:01:8d:0e:ac:13:
d5:ef:f6:f0:8b:8b:65:f4:ad:59:02:b1:e5:79:6f:8c:af:ec:
df:9f:c4:10:aa:a1:3a:c5:0c:22:e4:e3:0c:b9:d1:87:dc:47:
33:ef:51:9d:b5:20:64:7b:cc:cd:3e:a2:56:99:95:ab:52:9c:
2b:c3:f9:74:6b:e2:cb:47:4d:15:96:97:8f:20:00:2c:09:74:
d8:ed:be:28:3d:d5:15:c8:e3:bb:26:e1:3c:f4:6b:18:39:5e:
b8:6c:f0:44:9d:ec:9f:07:73:cc:0e:39:ca:8b:09:cf:b1:b5:
0d:e0:bf:e6:57:0a:57:00:72:d9:dd:76:fd:ac:47:cd:5d:35:
ec:e9:7a:48:68:33:12:dc:ca:10:08:5d:00:53:56:37:c8:c9:
8e:94:9b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 10:58:11 2026 by rpki-client