Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS212384.roa
File: AS212384.roa (raw, json)
Hash identifier: f+Rfmvd4yYfkJU/f9fg2rquCHXo4jyZG2pyeKNfJWcQ=
Subject key identifier: 0E:AD:21:9E:0F:48:34:EC:F2:A9:92:31:7B:81:74:10:EE:4B:74:10
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 47CF664ECD0B8B36AE5842185ECCB389A4FEA3D5
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS212384.roa
Signing time: Thu 21 May 2026 13:47:15 +0000
ROA not before: Thu 21 May 2026 13:42:15 +0000
ROA not after: Thu 20 May 2027 13:47:15 +0000
asID: 212384
IP address blocks: 143.20.4.0/24 maxlen: 24
143.20.51.0/24 maxlen: 24
143.20.126.0/24 maxlen: 24
143.20.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jun 2026 15:09:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:cf:66:4e:cd:0b:8b:36:ae:58:42:18:5e:cc:b3:89:a4:fe:a3:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: May 21 13:42:15 2026 GMT
Not After : May 20 13:47:15 2027 GMT
Subject: CN=0EAD219E0F4834ECF2A992317B817410EE4B7410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4a:6c:d3:14:88:df:47:cd:1c:05:e7:e9:1b:
1b:0d:9e:6a:9e:6f:0a:11:04:8b:a6:ee:e0:8c:de:
c7:93:f7:65:fc:6f:f2:a1:06:67:06:35:28:b9:be:
c4:b9:86:77:c0:f7:72:31:2b:4f:fc:28:e7:88:f7:
74:7e:64:4e:12:eb:3a:21:4c:0e:74:ab:16:5c:03:
2a:5c:dd:43:b3:b3:e7:d3:79:3d:db:86:f0:1f:1b:
fd:2f:63:50:19:6f:45:0f:28:23:ba:d4:a9:58:70:
f3:30:98:79:21:f0:1d:95:43:6b:85:f0:ec:e1:b9:
e7:86:2e:89:80:4d:be:d5:67:76:d5:07:bc:3a:37:
62:0d:3c:94:39:97:b4:65:58:96:ad:be:d6:c0:4e:
b7:12:7d:ee:6b:2a:f3:96:85:c2:d1:dc:b6:bc:16:
45:9e:f2:52:ea:37:12:9c:5c:3e:90:e0:c0:a0:ad:
3e:d4:fb:52:6e:f0:d3:7b:a3:e1:73:0d:a2:5c:d6:
a8:a5:ec:da:f0:35:6d:b2:a6:73:df:0f:e3:c4:27:
8c:ac:4c:78:11:ab:6b:a4:b0:ba:ee:2f:6c:da:9e:
22:fa:92:4c:01:2f:1c:ab:91:8c:1a:cc:82:06:57:
ac:a3:07:c8:50:2c:47:31:3e:44:8c:96:34:9f:b8:
b3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:AD:21:9E:0F:48:34:EC:F2:A9:92:31:7B:81:74:10:EE:4B:74:10
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS212384.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.4.0/24
143.20.51.0/24
143.20.126.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:d4:30:ef:ba:45:ce:c3:a5:c2:19:fc:8b:5e:bc:bf:0a:6c:
f9:c7:89:cb:79:a4:02:96:f1:95:74:4a:1b:ae:2e:72:81:bd:
98:93:c8:df:e5:99:05:a0:e2:e7:eb:06:f1:48:4c:de:74:7d:
93:88:ee:c8:65:76:0d:7c:b1:4a:ca:08:7a:3b:4d:5d:7c:57:
69:23:78:a9:ae:12:e9:ba:1c:21:b3:44:43:07:af:13:2c:84:
cd:d9:f5:74:13:c5:a4:6d:c0:78:ba:17:85:f8:51:9a:4a:c9:
aa:81:67:57:6f:fb:5d:8f:5a:46:5f:84:c3:d3:d4:af:38:8f:
ef:d5:c2:49:1a:23:71:33:25:4d:57:ce:21:63:cb:28:6c:1d:
5a:38:a5:3e:18:64:b7:0d:eb:3c:9c:64:c5:60:99:47:23:f0:
75:f8:e2:3b:7e:03:7d:4b:25:4e:2e:bd:bc:b3:06:af:78:b4:
65:71:3b:44:01:d1:d6:e3:ac:01:13:f9:29:a8:dd:62:7b:a2:
3b:1a:64:65:ad:e7:d2:78:56:dc:fc:84:3c:ed:f5:64:2e:c7:
b0:7b:a0:e7:71:54:18:41:ce:ec:9d:a6:1d:bb:13:bb:55:f4:
e9:79:58:91:d9:c8:49:e8:eb:58:65:49:78:68:e6:1b:ab:37:
12:b1:e8:4b
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIUR89mTs0LizauWEIYXsyziaT+o9UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk
ZWI5M2Q5ZDAeFw0yNjA1MjExMzQyMTVaFw0yNzA1MjAxMzQ3MTVaMDMxMTAvBgNV
BAMTKDBFQUQyMTlFMEY0ODM0RUNGMkE5OTIzMTdCODE3NDEwRUU0Qjc0MTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHSmzTFIjfR80cBefpGxsNnmqe
bwoRBIum7uCM3seT92X8b/KhBmcGNSi5vsS5hnfA93IxK0/8KOeI93R+ZE4S6zoh
TA50qxZcAypc3UOzs+fTeT3bhvAfG/0vY1AZb0UPKCO61KlYcPMwmHkh8B2VQ2uF
8OzhueeGLomATb7VZ3bVB7w6N2INPJQ5l7RlWJatvtbATrcSfe5rKvOWhcLR3La8
FkWe8lLqNxKcXD6Q4MCgrT7U+1Ju8NN7o+FzDaJc1qil7NrwNW2ypnPfD+PEJ4ys
THgRq2uksLruL2zaniL6kkwBLxyrkYwazIIGV6yjB8hQLEcxPkSMljSfuLPPAgMB
AAGjggIWMIICEjAdBgNVHQ4EFgQUDq0hng9INOzyqZIxe4F0EO5LdBAwHwYDVR0j
BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2
MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2
NVBaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt
NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTMjEyMzg0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAjxQE
AwQAjxQzAwQBjxR+MA0GCSqGSIb3DQEBCwUAA4IBAQC21DDvukXOw6XCGfyLXry/
Cmz5x4nLeaQClvGVdEobri5ygb2Yk8jf5ZkFoOLn6wbxSEzedH2TiO7IZXYNfLFK
ygh6O01dfFdpI3iprhLpuhwhs0RDB68TLITN2fV0E8WkbcB4uheF+FGaSsmqgWdX
b/tdj1pGX4TD09SvOI/v1cJJGiNxMyVNV84hY8sobB1aOKU+GGS3Des8nGTFYJlH
I/B1+OI7fgN9SyVOLr28swaveLRlcTtEAdHW46wBE/kpqN1ie6I7GmRlrefSeFbc
/IQ87fVkLsewe6DncVQYQc7snaYduxO7VfTpeViR2chJ6OtYZUl4aOYbqzcSsehL
-----END CERTIFICATE-----
Generated at Mon Jun 1 19:24:49 2026 by rpki-client