Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS212416.roa
File: AS212416.roa (raw, json)
Hash identifier: rIt837moTD9IQZ4lJnbMgfdxmnwI9MccjiWDe3joqeg=
Subject key identifier: E0:F1:BC:E6:5A:66:1A:24:65:04:41:D6:DF:1E:37:17:8E:A0:F0:B2
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 0D9BBD0A4C75EBEBB13097E3E7B9E664F2F6F594
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS212416.roa
Signing time: Tue 08 Sep 2026 11:42:03 +0000
ROA not before: Tue 08 Sep 2026 11:37:03 +0000
ROA not after: Tue 07 Sep 2027 11:42:03 +0000
asID: 212416
IP address blocks: 143.20.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:9b:bd:0a:4c:75:eb:eb:b1:30:97:e3:e7:b9:e6:64:f2:f6:f5:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 8 11:37:03 2026 GMT
Not After : Sep 7 11:42:03 2027 GMT
Subject: CN=E0F1BCE65A661A24650441D6DF1E37178EA0F0B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ce:ec:f9:b8:e5:ec:3a:df:73:b3:11:fd:85:
87:3b:95:2e:4f:fe:43:e0:e7:77:d6:36:39:ac:d9:
b9:0c:4f:8d:0e:5e:ec:35:23:3c:5e:0a:0b:2e:38:
15:f2:3c:cf:1c:c1:9f:ae:11:24:91:19:f3:44:0c:
d9:40:98:1d:dd:6f:df:5e:6d:4e:2c:d4:ab:6a:be:
77:c0:94:41:4d:7f:38:a4:8f:dd:c8:5c:4e:b7:d3:
95:48:54:20:9a:1c:87:e6:44:30:37:b1:01:ec:9a:
42:ab:c7:ce:1d:b1:d9:a2:dc:1e:f0:fe:3d:f4:08:
9e:bd:0a:82:a1:39:b5:77:f8:d9:f3:1b:f3:f4:1a:
ac:56:fd:4a:d0:81:c4:9f:20:f0:bf:ad:cf:a8:c1:
fd:de:27:2d:a1:da:52:83:33:61:0d:d3:45:78:d9:
9f:44:14:54:79:4e:32:71:6b:97:6d:0a:a0:18:11:
a6:61:9b:4c:c9:00:e4:5a:cb:de:65:b5:84:85:81:
89:ae:cf:10:a8:60:48:57:5b:77:49:10:61:27:ab:
69:88:c5:d6:bc:a6:93:86:e9:20:f7:0b:dd:81:f9:
38:81:b3:fa:be:d9:4f:1f:0d:25:d0:7d:1f:ea:d2:
8e:98:90:41:ae:57:75:57:13:cc:51:76:5b:00:7a:
3f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F1:BC:E6:5A:66:1A:24:65:04:41:D6:DF:1E:37:17:8E:A0:F0:B2
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS212416.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.132.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:7c:a1:65:66:bd:84:5d:74:4f:1f:54:eb:a8:f4:1b:fd:1c:
c7:5f:52:32:d2:cb:fd:33:95:10:84:aa:a2:a6:85:ca:6b:51:
6a:5b:e6:39:cd:0a:cf:77:17:b2:bb:83:0c:56:e9:70:08:dd:
35:5f:2e:ea:95:dd:92:3c:e7:bf:71:0d:aa:1d:41:d1:54:43:
63:91:a0:74:7a:95:71:5b:05:55:67:5e:80:d4:eb:4b:4e:5e:
58:f7:77:23:78:d3:02:b2:7a:b8:ed:b3:c6:cc:d2:8e:1c:10:
1f:17:ea:19:28:da:4d:fa:f3:5c:45:8e:19:a4:bd:a0:20:24:
dc:82:b7:f8:e6:b2:21:0a:1b:c3:8d:f1:30:d3:11:aa:36:c7:
81:e8:be:df:09:6d:6b:90:c6:98:2e:b1:9d:ee:41:ac:eb:9f:
30:a2:ca:d8:92:19:e0:24:cd:50:65:d4:8d:3a:b6:e1:24:7e:
a2:07:30:63:b1:11:24:25:4a:42:94:93:7b:a6:54:42:0e:ec:
54:05:52:62:3d:da:fa:7c:4e:9b:4a:59:ab:70:02:0e:21:0b:
e7:d1:1b:38:18:9a:9d:08:6e:9e:53:72:57:88:2d:77:f1:67:
48:1a:08:9e:24:de:9a:c1:92:99:5a:5f:f4:fa:b7:b7:03:40:
f6:1e:97:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:49:29 2026 by rpki-client