Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS211407.roa
File: AS211407.roa (raw, json)
Hash identifier: tXfHr0U6clmYAYrAWJBN1GbWI3uoMTDjiQUeVY3INP8=
Subject key identifier: 98:10:1E:68:11:04:4F:50:14:D2:6B:85:C6:27:22:B5:FA:B8:1C:2B
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 672847790D9DE2A38BA738D8A51468CA69D150D1
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS211407.roa
Signing time: Sat 03 Oct 2026 05:49:35 +0000
ROA not before: Sat 03 Oct 2026 05:44:35 +0000
ROA not after: Sat 02 Oct 2027 05:49:35 +0000
asID: 211407
IP address blocks: 143.20.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 12:42:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:28:47:79:0d:9d:e2:a3:8b:a7:38:d8:a5:14:68:ca:69:d1:50:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Oct 3 05:44:35 2026 GMT
Not After : Oct 2 05:49:35 2027 GMT
Subject: CN=98101E6811044F5014D26B85C62722B5FAB81C2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1a:b6:ee:f9:56:26:2b:5b:ea:33:17:aa:52:
23:9c:4b:6a:56:7a:b0:8f:7f:cd:46:35:7d:cf:9a:
bb:cd:14:36:b2:4e:01:9d:20:cc:fa:4f:f9:19:4d:
8f:43:4a:a3:37:01:07:f5:04:fb:0a:62:06:a7:cd:
79:09:87:d2:cd:99:32:9f:d2:c0:a9:d4:b3:63:f3:
7b:27:6e:9e:97:ca:3f:30:ec:fe:3a:9a:e3:df:a4:
ce:81:9f:6b:e4:9e:ff:79:d1:86:6a:0e:f8:31:ab:
e0:ee:63:bd:8d:5b:6d:77:5c:a7:19:3f:a5:5f:26:
bc:6f:5a:aa:7f:da:92:07:2b:7e:42:a2:58:25:3e:
93:19:d3:a5:3c:18:31:f7:a3:2b:2c:4e:b3:5b:ce:
c0:38:a7:78:ba:d4:03:68:64:61:6f:e1:ed:21:79:
51:96:c8:a9:e0:76:74:a4:2a:22:d1:8e:2f:12:e8:
66:ea:f3:74:c6:7f:f3:fe:45:ef:19:07:79:f4:83:
df:1e:91:9f:1f:71:f1:6b:3f:5e:70:1e:35:24:63:
cc:d2:ef:0c:99:1f:d5:74:02:2f:51:04:f8:0f:22:
9e:1b:c5:83:77:36:f4:af:44:c8:45:41:4e:60:3b:
4f:ff:31:e6:f8:16:ab:12:69:84:2e:78:02:65:87:
85:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:10:1E:68:11:04:4F:50:14:D2:6B:85:C6:27:22:B5:FA:B8:1C:2B
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS211407.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.10.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:fc:79:f2:20:94:57:d2:ad:78:4c:95:a5:2d:89:8b:52:89:
42:89:12:38:34:66:98:2c:7e:30:fa:0a:81:60:a3:d6:2c:5e:
96:1b:1d:cf:1c:53:38:eb:0b:e7:16:2e:65:71:be:36:16:5b:
af:80:02:ba:ff:4b:26:5a:1a:05:4a:89:96:88:14:e1:4e:9b:
25:c2:e2:f9:c4:69:20:a9:87:e1:56:76:98:d3:c2:39:76:0c:
43:ed:c3:dc:49:01:ec:b5:25:d6:7c:eb:9d:00:e7:78:c4:f4:
4c:55:21:8d:f6:de:8d:96:85:a6:66:34:64:ee:7f:dc:e1:09:
ca:91:4a:cb:c9:f4:d6:ec:df:6a:64:11:8b:58:1f:49:eb:14:
ed:78:dd:4a:dd:a9:30:c0:7c:1d:d2:9a:91:e6:d0:87:1b:d5:
2c:34:14:65:cb:b0:49:4b:bb:d3:9e:52:dc:20:6d:9a:f7:97:
87:2c:2e:66:0c:81:05:5c:2f:58:af:db:cb:e8:83:56:7b:9d:
72:04:45:87:ee:2c:0e:21:11:81:a4:fe:4a:a8:a3:f0:97:3c:
f7:0b:e8:21:c8:78:f0:43:1b:72:e4:6e:a9:50:f4:77:a3:12:
0b:93:a7:1a:e1:a2:59:dc:89:ea:84:e2:49:b3:0c:54:02:ed:
af:a9:18:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:10:29 2026 by rpki-client