Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS214062.roa
File: AS214062.roa (raw, json)
Hash identifier: gAPIz24OZI9dRJpdhiHTdxWkMN+P0ewsoy5iycN7q+Y=
Subject key identifier: 14:A1:1B:2D:86:84:7F:6B:9D:BF:93:34:5A:27:F0:9A:96:2F:89:59
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 4E9937028D0AA6CE4364A5F0355F9B4EB6BBB075
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS214062.roa
Signing time: Thu 27 Aug 2026 10:06:07 +0000
ROA not before: Thu 27 Aug 2026 10:01:07 +0000
ROA not after: Thu 26 Aug 2027 10:06:07 +0000
asID: 214062
IP address blocks: 143.20.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 10:17:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:99:37:02:8d:0a:a6:ce:43:64:a5:f0:35:5f:9b:4e:b6:bb:b0:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Aug 27 10:01:07 2026 GMT
Not After : Aug 26 10:06:07 2027 GMT
Subject: CN=14A11B2D86847F6B9DBF93345A27F09A962F8959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e7:66:9c:40:a8:5b:43:63:02:33:4a:90:17:
56:a9:1b:0f:52:5f:96:2a:fa:98:0f:c4:3d:cd:1e:
8b:66:bb:a6:33:1a:66:17:05:aa:aa:dd:53:54:f4:
d9:04:5a:58:49:e8:24:ec:5e:d1:f7:8d:b0:66:83:
69:12:63:7f:66:37:82:33:3e:3d:9e:78:8e:0c:ba:
46:0d:8e:79:98:29:00:95:c9:85:21:4a:e6:e0:41:
a6:c2:cd:9d:3b:c7:d1:4f:14:f8:a3:73:88:1e:96:
4d:83:96:ac:7b:8d:1d:2b:bb:4d:02:67:ff:87:9b:
1d:f8:72:37:47:0d:3b:04:f2:4b:9a:81:b8:fe:4a:
41:86:b8:e0:3b:68:52:bb:bd:b3:23:e9:f0:dd:41:
d7:89:b0:63:79:1e:16:c4:63:71:20:e5:25:1c:b4:
32:63:71:dd:8c:d2:54:8c:85:fd:d6:35:a2:e5:50:
02:63:ba:1a:4d:9b:21:64:e9:98:fb:36:4a:c1:99:
e2:44:73:d5:c8:87:2c:e8:c2:e5:b6:03:d3:1e:55:
57:a9:ba:61:67:2c:e3:48:6b:04:5b:00:8b:f4:fc:
c5:06:a6:53:a1:19:b0:63:5f:92:d0:04:af:43:19:
60:b5:2a:cd:29:0d:de:51:5d:3f:f3:58:4d:65:9e:
2a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A1:1B:2D:86:84:7F:6B:9D:BF:93:34:5A:27:F0:9A:96:2F:89:59
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS214062.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.80.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:e5:b0:1d:de:35:6d:18:d5:08:3d:aa:e6:90:f2:d8:30:2c:
18:38:27:30:ad:81:88:66:19:c3:8e:28:a3:41:f0:d4:eb:9f:
90:de:d7:e8:8e:c2:ea:38:da:7b:54:e3:e3:6b:fd:b3:9f:24:
51:bc:11:35:47:e8:be:8a:ce:8c:3f:f2:7b:dc:76:aa:0f:55:
03:e5:13:9d:21:c3:0b:b0:f0:7a:52:10:d9:b9:64:0e:1f:5e:
bc:70:c1:09:f6:79:df:e2:c5:cc:ed:c3:e8:e0:a5:fd:72:5b:
07:f9:c2:32:23:37:d3:8a:2b:64:5c:7e:7f:3d:89:a7:90:f0:
24:13:b9:82:e2:2e:0a:3a:56:8f:53:de:70:84:27:38:bc:9f:
e6:5f:f7:f5:f5:5a:3c:93:7d:0c:1b:cb:43:5c:c2:d9:54:27:
eb:ca:9e:55:bd:c1:6e:c0:a4:c0:0b:36:7d:55:c1:a0:eb:d4:
db:d1:2d:8b:8f:fd:b0:b9:37:11:3c:a9:ed:a6:1b:0e:29:38:
99:ae:f1:c9:79:2c:55:da:7a:00:9a:8a:6e:51:76:62:1b:60:
69:b1:6c:21:c4:bd:b4:60:d9:fd:39:9e:46:77:51:76:55:75:
96:4a:f3:2f:d4:b4:52:0f:e4:73:76:c6:94:ad:40:3d:39:64:
04:b7:48:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:42:23 2026 by rpki-client