Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS214209.roa
File: AS214209.roa (raw, json)
Hash identifier: thzX85Uf6tA0aGSfyEE7uWHRD+oSjmGxCgsqqy4k+CI=
Subject key identifier: 94:35:74:A8:4D:B8:C0:9A:0A:34:88:5E:31:DD:63:97:C4:30:BA:FF
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 4E0A164096DFEF5E844A77E9FCAF5BB1B27910B3
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS214209.roa
Signing time: Sun 06 Sep 2026 15:49:33 +0000
ROA not before: Sun 06 Sep 2026 15:44:33 +0000
ROA not after: Sun 05 Sep 2027 15:49:33 +0000
asID: 214209
IP address blocks: 143.20.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:0a:16:40:96:df:ef:5e:84:4a:77:e9:fc:af:5b:b1:b2:79:10:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 6 15:44:33 2026 GMT
Not After : Sep 5 15:49:33 2027 GMT
Subject: CN=943574A84DB8C09A0A34885E31DD6397C430BAFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e9:60:70:e1:92:02:40:6b:f0:36:4f:d2:f0:
a1:3b:49:c9:1a:f4:10:4e:07:39:00:38:88:e7:03:
2e:34:9f:3c:e2:4b:84:5f:1e:9f:5b:66:80:c0:a5:
e4:53:d5:6d:ba:80:48:e5:45:03:59:95:93:81:9f:
94:78:fb:54:17:85:34:c3:ea:26:1b:00:05:e2:8e:
52:be:5d:c2:ee:17:b1:cd:b0:9a:34:9a:79:b2:84:
e0:30:cf:f2:64:e6:0c:12:15:56:c0:4d:ce:3f:d3:
88:ce:bc:98:52:3e:4b:02:9e:6e:a2:d2:c4:40:e2:
36:42:38:49:a6:f0:9a:7e:b8:9b:ca:09:09:19:1b:
c4:cf:e0:c3:b6:47:2a:d6:5c:7a:8b:21:08:ae:9b:
da:69:94:58:17:01:22:83:67:c6:68:77:ad:b6:8e:
62:04:94:aa:9e:c9:bf:dd:49:af:90:70:2b:ca:d4:
a6:e5:a5:5d:a2:25:98:2f:73:d7:39:4a:38:2a:eb:
a8:da:87:02:13:34:99:65:01:f3:75:fe:3c:92:70:
bc:ff:49:f1:17:07:ce:cb:9a:2d:25:52:6f:96:3b:
6a:e5:83:fd:04:80:df:22:f4:50:1d:ee:c8:47:92:
90:50:21:c2:bc:e7:9a:42:13:43:8b:34:2d:65:48:
0f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:35:74:A8:4D:B8:C0:9A:0A:34:88:5E:31:DD:63:97:C4:30:BA:FF
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS214209.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.185.0/24
Signature Algorithm: sha256WithRSAEncryption
66:0e:72:7b:c9:b9:f5:f0:8d:f6:53:58:fc:37:41:91:9d:1b:
f8:cb:47:86:18:3c:44:7f:19:cb:f2:c6:4b:19:77:3a:4a:e9:
6b:42:89:89:67:99:5f:f8:d4:73:c3:92:5c:e7:dc:48:77:f8:
2f:c6:c5:ce:81:bb:6f:2d:b0:f1:b4:18:c2:09:05:da:bf:4e:
d2:a9:38:71:d8:e7:10:09:59:ef:1b:05:36:b1:80:ee:b5:57:
72:a6:ef:3c:ec:1e:f3:77:5f:18:c0:c9:73:e9:8a:ba:d8:34:
70:f0:e1:07:74:7e:a1:d9:9b:37:e2:92:b7:fd:c9:4a:b0:52:
c1:5b:44:7f:4e:3b:85:66:56:ca:45:de:1e:f6:43:d6:53:89:
55:4e:bb:75:18:24:0b:ca:c4:80:0a:22:dd:c0:25:1a:1a:da:
88:e2:e3:ff:5d:90:85:5d:58:56:f9:71:07:be:33:09:73:d5:
77:2d:43:0c:66:70:96:36:85:a2:b1:b2:57:09:74:f7:03:62:
cf:61:41:0f:00:b9:7e:80:3b:f3:b6:86:d5:57:81:ed:cd:58:
80:87:1f:67:18:89:bd:58:77:36:82:a8:c4:82:42:34:c8:83:
e7:31:c7:87:53:ac:24:84:eb:f9:97:d9:ac:00:24:38:d6:2e:
eb:52:3b:cc
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUTgoWQJbf716ESnfp/K9bsbJ5ELMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk
ZWI5M2Q5ZDAeFw0yNjA5MDYxNTQ0MzNaFw0yNzA5MDUxNTQ5MzNaMDMxMTAvBgNV
BAMTKDk0MzU3NEE4NERCOEMwOUEwQTM0ODg1RTMxREQ2Mzk3QzQzMEJBRkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX6WBw4ZICQGvwNk/S8KE7Scka
9BBOBzkAOIjnAy40nzziS4RfHp9bZoDApeRT1W26gEjlRQNZlZOBn5R4+1QXhTTD
6iYbAAXijlK+XcLuF7HNsJo0mnmyhOAwz/Jk5gwSFVbATc4/04jOvJhSPksCnm6i
0sRA4jZCOEmm8Jp+uJvKCQkZG8TP4MO2RyrWXHqLIQium9pplFgXASKDZ8Zod622
jmIElKqeyb/dSa+QcCvK1KblpV2iJZgvc9c5Sjgq66jahwITNJllAfN1/jyScLz/
SfEXB87Lmi0lUm+WO2rlg/0EgN8i9FAd7shHkpBQIcK855pCE0OLNC1lSA+3AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUlDV0qE24wJoKNIheMd1jl8Qwuv8wHwYDVR0j
BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2
MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2
NVBaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt
NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTMjE0MjA5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjxS5
MA0GCSqGSIb3DQEBCwUAA4IBAQBmDnJ7ybn18I32U1j8N0GRnRv4y0eGGDxEfxnL
8sZLGXc6SulrQomJZ5lf+NRzw5Jc59xId/gvxsXOgbtvLbDxtBjCCQXav07SqThx
2OcQCVnvGwU2sYDutVdypu887B7zd18YwMlz6Yq62DRw8OEHdH6h2Zs34pK3/clK
sFLBW0R/TjuFZlbKRd4e9kPWU4lVTrt1GCQLysSACiLdwCUaGtqI4uP/XZCFXVhW
+XEHvjMJc9V3LUMMZnCWNoWisbJXCXT3A2LPYUEPALl+gDvztobVV4HtzViAhx9n
GIm9WHc2gqjEgkI0yIPnMceHU6wkhOv5l9msACQ41i7rUjvM
-----END CERTIFICATE-----
Generated at Thu Sep 10 15:30:31 2026 by rpki-client