Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS211693.roa
File: AS211693.roa (raw, json)
Hash identifier: W+9SozrycA/U8NO2+SyTG5yjQ7vjvm6WQ1+/tcim8oA=
Subject key identifier: EA:80:83:FF:51:48:A3:C3:DF:A7:20:6D:F5:0F:50:D6:45:D5:99:ED
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 4AF1F54EA51E742F0CF19D5416E1C4C20E6DD015
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS211693.roa
Signing time: Sun 30 Aug 2026 21:28:44 +0000
ROA not before: Sun 30 Aug 2026 21:23:44 +0000
ROA not after: Sun 29 Aug 2027 21:28:44 +0000
asID: 211693
IP address blocks: 143.20.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 10:17:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:f1:f5:4e:a5:1e:74:2f:0c:f1:9d:54:16:e1:c4:c2:0e:6d:d0:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Aug 30 21:23:44 2026 GMT
Not After : Aug 29 21:28:44 2027 GMT
Subject: CN=EA8083FF5148A3C3DFA7206DF50F50D645D599ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:35:05:b0:29:60:30:b9:ba:fa:b4:9d:42:f7:
eb:37:97:39:69:2f:e6:39:15:bc:54:a8:c4:3f:43:
db:8b:dc:28:95:59:5c:42:bc:65:34:45:f0:07:e9:
ea:3d:20:da:af:f5:6d:8f:70:4e:bf:32:2f:0c:18:
e1:c9:ad:6a:91:dc:98:e8:78:1f:c6:0d:6d:52:a8:
98:d6:15:de:9b:d9:3d:d2:c6:77:f0:be:fd:78:79:
77:43:1f:00:8d:c4:59:05:72:68:15:3b:d7:c0:28:
73:94:75:31:6a:58:54:46:9d:95:22:5e:93:30:f4:
8b:b3:26:0c:46:99:e1:92:4d:74:10:b7:6d:1d:23:
07:4f:f9:d1:4a:a4:55:42:29:35:24:7e:f3:05:3e:
34:0a:40:40:21:34:df:c9:1b:da:80:1b:4b:f9:08:
8b:03:3c:68:59:17:52:71:93:a2:8f:dc:ba:3b:ac:
58:3e:de:e2:fc:89:1f:96:fd:3f:27:c9:81:2d:a9:
ed:7f:f3:c2:9b:ba:16:f5:27:ca:e0:ca:2b:43:a2:
ba:56:49:9f:56:6f:28:68:c5:11:58:db:b1:c6:00:
84:2d:93:2f:4c:d3:19:cc:3b:9f:24:ba:35:fa:b5:
cc:a4:ed:83:7a:f5:14:6d:24:bc:35:ad:e9:7b:b0:
4b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:80:83:FF:51:48:A3:C3:DF:A7:20:6D:F5:0F:50:D6:45:D5:99:ED
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS211693.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.32.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:a0:d1:17:5e:96:f2:64:86:a2:b8:43:71:dc:27:52:6e:fa:
2c:f2:e8:89:f2:18:df:73:bd:15:69:58:28:b0:ff:50:5d:4d:
03:68:ac:77:1b:f5:02:d0:e0:b6:68:ec:c7:57:77:16:74:da:
28:da:e5:11:18:49:77:67:e2:7f:f6:e6:05:c4:03:8e:33:8e:
71:6f:6d:d8:9f:5d:6d:99:e8:b1:82:8d:16:8d:80:ec:e8:b7:
fa:86:df:b1:bd:3a:39:8f:ac:a5:3b:38:6a:2f:9d:d5:ec:20:
20:b6:98:c9:61:8e:b1:69:d3:ad:b1:2f:54:dc:f6:79:66:1e:
99:15:93:b2:e1:55:3d:da:5f:c8:48:0e:e6:c4:5d:fc:0b:bc:
d7:3f:24:fc:ce:5d:36:8e:be:ab:58:e3:f2:c8:64:f6:e7:1e:
39:d8:91:da:8e:5a:43:75:7e:f6:07:89:28:57:8d:9a:e3:d2:
33:75:a1:9f:1e:28:f4:0a:b3:ba:a7:5b:da:bb:0b:87:34:88:
c6:8c:20:31:ca:29:4c:94:cc:e5:41:76:41:7f:65:45:a0:3c:
5a:7e:a9:af:59:bd:a3:0b:23:42:19:06:4a:95:f2:62:48:7a:
35:fe:81:34:4f:9d:67:b7:5c:6a:4b:66:2e:51:0a:91:c8:98:
e6:96:ad:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:42:27 2026 by rpki-client