Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS214481.roa
File: AS214481.roa (raw, json)
Hash identifier: TACPYd+/PXWCxiC2qVz16hjaTZES1WRXTIzQXGrstj0=
Subject key identifier: EF:EE:64:3C:21:2F:87:85:22:9D:50:DB:29:CA:7D:98:1F:E6:60:C0
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 45EF2CF6C12215CD51B821E774BAFEDA4FF0199A
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS214481.roa
Signing time: Wed 07 Oct 2026 19:49:36 +0000
ROA not before: Wed 07 Oct 2026 19:44:36 +0000
ROA not after: Wed 06 Oct 2027 19:49:36 +0000
asID: 214481
IP address blocks: 143.20.64.0/24 maxlen: 24
143.20.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 12:42:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:ef:2c:f6:c1:22:15:cd:51:b8:21:e7:74:ba:fe:da:4f:f0:19:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Oct 7 19:44:36 2026 GMT
Not After : Oct 6 19:49:36 2027 GMT
Subject: CN=EFEE643C212F8785229D50DB29CA7D981FE660C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e2:e7:5d:c0:e6:4e:b6:be:e6:b2:db:fe:f6:
3c:33:2b:02:18:da:00:b3:9d:58:f9:b9:63:09:e0:
bc:22:31:bf:69:7e:1c:15:b4:eb:76:5f:ce:c5:c5:
95:b1:d3:e6:04:01:9d:90:58:4b:b8:c8:ea:40:d0:
a5:a2:36:ac:8a:49:e3:18:2f:4b:cf:2f:12:52:dc:
5a:a6:e8:f2:0a:71:35:74:3e:42:b2:0a:76:06:c8:
ce:30:e9:a9:e0:7c:a5:ea:b9:2a:ac:7e:ac:6a:6a:
09:75:78:31:a3:66:4f:ff:e7:bb:5b:95:16:2f:ba:
71:2f:00:89:c6:39:ad:f3:4f:63:7c:b3:16:30:e0:
25:70:29:54:c9:af:7a:83:4b:cb:69:2e:86:ce:b3:
43:48:b1:82:96:2d:9f:d6:bb:c2:fa:1b:c5:58:de:
9e:73:7c:45:4d:0f:07:08:cd:f8:d0:68:45:34:8f:
7f:db:af:85:3e:b3:ce:6e:a3:14:15:7c:72:81:83:
17:b0:ce:e6:1b:0f:21:48:5a:25:d7:31:82:1e:b3:
da:04:0f:5e:ba:b0:f3:54:b6:ea:c3:da:84:88:40:
e6:e2:ff:7b:79:7c:78:4c:4a:d0:ab:0f:fd:4a:e4:
10:4a:ca:4d:d7:eb:31:aa:a4:48:4c:a8:5a:66:0b:
b2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:EE:64:3C:21:2F:87:85:22:9D:50:DB:29:CA:7D:98:1F:E6:60:C0
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS214481.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.64.0/24
143.20.97.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:14:05:9f:8f:02:d2:e8:9a:37:ee:84:8d:8f:5a:4a:4c:f4:
88:28:67:df:a2:02:17:ca:a1:83:6b:05:59:65:b3:13:8b:6a:
b3:09:dc:81:74:a1:71:f3:04:bd:6f:47:81:aa:11:96:88:0a:
c6:42:75:27:e1:52:79:05:d8:85:48:a5:2c:da:aa:c2:51:4f:
2f:80:e4:88:fb:2a:91:36:79:9f:14:02:20:d2:40:20:fe:83:
28:cf:7f:4c:b0:7e:01:b3:c8:24:62:e5:74:cc:10:03:66:fa:
7d:94:b2:d6:9f:b3:d9:d6:21:e7:16:71:5d:50:d3:b5:78:f6:
ae:17:ef:d4:92:65:8f:51:12:94:a9:35:1b:23:4d:ae:17:2c:
b6:1c:96:aa:6d:4e:c7:3f:73:7b:e7:cc:df:65:70:3b:52:d9:
e4:ab:1d:90:6e:2b:b1:ba:2c:22:c2:36:09:cb:ce:2c:39:64:
c3:43:18:13:3b:78:32:40:d8:ef:a2:cf:a0:35:66:00:d2:e0:
71:e2:22:e1:b5:d1:82:66:d4:04:18:d4:fc:03:a1:3d:7e:95:
56:4b:9c:59:47:8a:f1:6d:67:43:a9:06:69:6f:2d:63:3f:68:
5d:db:93:6a:60:ed:46:5f:3f:08:43:c4:fd:f8:bb:24:63:e3:
45:c2:d3:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:18:46 2026 by rpki-client