Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS212384.roa
File: AS212384.roa (raw, json)
Hash identifier: PEboZdjb+NU4PW5qfiUWZm60w7TkLxIaEmXaHZc/B8I=
Subject key identifier: 5F:D9:24:BA:D5:B5:F4:30:DE:FB:FA:98:5F:95:04:43:C5:C0:A9:17
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 15CADDC8613AFF2F7FCB2932DE3396F642F7CF39
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS212384.roa
Signing time: Fri 10 Jul 2026 13:49:30 +0000
ROA not before: Fri 10 Jul 2026 13:44:30 +0000
ROA not after: Fri 09 Jul 2027 13:49:30 +0000
asID: 212384
IP address blocks: 143.20.4.0/24 maxlen: 24
143.20.51.0/24 maxlen: 24
143.20.126.0/24 maxlen: 24
143.20.127.0/24 maxlen: 24
143.20.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Jul 2026 23:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:ca:dd:c8:61:3a:ff:2f:7f:cb:29:32:de:33:96:f6:42:f7:cf:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Jul 10 13:44:30 2026 GMT
Not After : Jul 9 13:49:30 2027 GMT
Subject: CN=5FD924BAD5B5F430DEFBFA985F950443C5C0A917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:5e:b2:50:17:30:1e:56:77:2e:d2:6c:c7:4f:
bf:b1:06:10:09:09:db:50:10:46:c6:12:d8:be:59:
15:bc:6e:dd:04:1d:fd:34:9c:b7:f1:21:4f:6c:1f:
17:e5:6b:b2:ce:5d:52:9f:64:ef:e4:91:1d:08:9f:
03:d3:c9:3e:43:d2:a3:cf:2d:db:c7:2f:23:e3:75:
ec:b0:aa:c8:8f:29:3e:9f:71:1a:01:91:99:23:9d:
c7:39:b5:78:4e:91:b6:0a:06:92:bf:74:58:5e:f5:
3b:9a:7b:3d:62:39:9d:0c:e9:02:11:c3:5d:b6:a6:
1c:95:ab:4a:37:8c:b7:87:6e:81:fa:b6:99:f0:61:
1b:60:b7:fc:05:53:62:0b:af:2e:d5:b7:f3:6a:a8:
2b:d9:32:7b:01:a0:49:f5:fa:00:11:8f:c5:01:a8:
f2:72:b1:05:c3:38:71:56:30:23:ab:2c:79:05:db:
ab:61:b1:32:d0:5a:86:9d:b0:ba:28:46:87:4e:58:
40:e7:92:0c:98:d5:4d:ed:f6:19:1f:d8:88:47:00:
2a:6e:5b:df:2a:df:6e:fc:b7:ba:85:a0:8e:b0:24:
5c:ae:c5:41:20:b5:e8:76:35:23:45:84:73:57:2e:
49:18:b8:60:44:77:93:92:bd:ce:27:c7:eb:1b:18:
e1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D9:24:BA:D5:B5:F4:30:DE:FB:FA:98:5F:95:04:43:C5:C0:A9:17
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS212384.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.4.0/24
143.20.51.0/24
143.20.126.0/23
143.20.182.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:55:c6:01:4d:a6:68:f5:c7:af:59:15:f9:58:9c:08:0e:b6:
be:4c:58:a0:48:83:9d:93:ff:cc:91:24:08:bd:46:a5:98:26:
c5:99:fe:ed:af:82:66:35:33:7e:5b:de:b2:e6:cd:93:9e:74:
90:ec:38:69:c4:0f:69:d8:33:23:63:db:70:88:fb:5b:90:a1:
71:9a:70:4e:8d:4e:ab:39:d6:82:a2:86:14:27:42:a7:4e:cb:
00:7c:e4:1f:e4:8d:93:a6:90:f2:c7:f7:8c:3f:0c:3b:ad:ab:
83:51:d0:85:a4:ab:5e:af:f5:79:0a:5b:5c:16:48:79:c9:14:
e2:cf:fd:7a:ad:86:09:c9:ed:5b:ad:8b:9b:de:95:da:6c:50:
98:02:31:73:ea:59:e9:ee:bf:63:3c:f6:72:6a:a9:45:49:01:
aa:27:d8:34:9f:2b:76:8f:24:cd:ef:99:12:af:7d:85:de:40:
e9:bb:bf:56:9b:4a:79:09:0c:2a:8c:1f:cd:8c:38:05:05:18:
22:c9:60:5f:14:ec:97:c0:e1:aa:80:4b:6f:74:3e:83:60:34:
93:f6:7c:4a:c7:af:55:94:60:fb:a5:72:ff:6d:4a:78:cd:51:
46:70:90:4d:09:6e:4e:20:b3:50:5f:9d:d8:60:92:d8:07:a1:
73:d0:d2:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 08:53:10 2026 by rpki-client