Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS214483.roa
File: AS214483.roa (raw, json)
Hash identifier: 1pmz6PQv4QB2Z0SMnxmhf0CR+SQoMrkIqKKct5UfHUo=
Subject key identifier: 1E:12:E9:DB:98:94:E2:1B:29:6D:41:98:21:33:05:B9:82:44:7D:4A
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 0FC1FFBC1BCCB34A0D60D113DFF9E65B5EBCD386
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS214483.roa
Signing time: Thu 03 Sep 2026 01:05:14 +0000
ROA not before: Thu 03 Sep 2026 01:00:14 +0000
ROA not after: Thu 02 Sep 2027 01:05:14 +0000
asID: 214483
IP address blocks: 143.20.102.0/24 maxlen: 24
143.20.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 22:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:c1:ff:bc:1b:cc:b3:4a:0d:60:d1:13:df:f9:e6:5b:5e:bc:d3:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 3 01:00:14 2026 GMT
Not After : Sep 2 01:05:14 2027 GMT
Subject: CN=1E12E9DB9894E21B296D4198213305B982447D4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7f:92:fd:96:66:fb:a5:37:a2:4c:93:a4:b0:
8b:65:c1:ec:e8:31:29:57:da:d5:13:f2:7d:79:7e:
68:4d:e7:17:3b:f9:0c:7d:02:b5:73:47:3a:93:c5:
24:58:e7:ee:bc:f5:d7:05:af:3a:e5:d4:67:e5:ff:
02:5d:8c:4f:61:87:be:72:4b:19:32:a1:73:ca:a3:
e6:17:be:01:a1:49:fd:6c:90:1c:dc:a6:a9:7d:d7:
c5:db:ed:f0:13:ff:5e:5d:1f:03:b8:58:0c:57:86:
d4:8b:3b:fc:9f:93:38:2f:68:1a:9e:59:18:94:1b:
af:1a:bf:7a:09:64:cc:a1:10:39:67:45:46:e2:6b:
73:80:96:6e:f0:b1:70:8f:82:18:de:2f:40:8f:54:
4e:d9:6b:74:ff:9f:3f:14:ed:61:eb:53:72:26:3e:
61:66:fa:15:0b:e3:5b:ee:1f:9b:f4:0d:9a:7b:79:
39:3c:6b:7f:42:3a:35:f0:92:7d:98:97:8f:86:75:
e9:c9:a1:f5:3d:f9:db:39:da:82:17:63:01:b9:74:
2a:2a:91:76:33:34:b0:40:77:e0:65:41:a8:b4:2f:
57:4d:ec:d4:2c:99:53:ae:88:86:91:d5:f8:bf:a5:
09:21:61:9d:b4:c1:87:32:7e:55:24:1e:4c:bf:5e:
82:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:12:E9:DB:98:94:E2:1B:29:6D:41:98:21:33:05:B9:82:44:7D:4A
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS214483.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.102.0/24
143.20.200.0/24
Signature Algorithm: sha256WithRSAEncryption
89:15:b4:a6:9b:3e:00:14:d5:7d:7a:e8:b6:80:26:e3:75:b1:
89:44:ab:39:e6:1a:bb:b6:20:cd:12:5c:bd:9c:4a:19:c1:f3:
ce:e4:af:15:e9:98:9d:80:83:aa:71:7a:82:f1:ce:2d:0a:dc:
2f:22:9e:b9:3a:b1:a9:6a:47:3c:f4:7f:8a:af:2f:7f:c7:63:
50:cb:5f:e2:96:4f:a9:6c:6c:88:96:79:95:16:66:a9:12:50:
5a:a7:3f:3a:18:f4:86:b4:46:a9:a5:4d:40:f5:fc:13:6a:03:
30:b6:09:f0:78:94:58:95:d3:55:47:54:1f:6d:d7:dd:6d:e6:
d2:b2:6f:97:da:51:ee:f6:91:a8:da:1d:bb:ab:37:d1:3f:f6:
97:f5:42:63:a9:69:41:8f:fe:60:af:a5:4f:81:50:14:5c:d8:
39:57:c2:f6:62:d8:94:4d:41:df:00:c2:38:fc:50:be:d6:56:
42:54:4e:58:57:9d:eb:b3:7f:3d:77:e6:6c:c7:5c:24:ad:75:
b5:7e:ae:a3:41:fc:be:8c:04:f7:73:19:7c:83:88:27:71:73:
0b:ff:a9:fe:29:59:c4:70:74:f9:20:d3:68:b5:64:86:7c:20:
59:6d:ac:3a:f7:c7:2c:54:c2:f3:72:20:61:2d:a3:80:cf:db:
c3:5f:53:d1
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUD8H/vBvMs0oNYNET3/nmW16804YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk
ZWI5M2Q5ZDAeFw0yNjA5MDMwMTAwMTRaFw0yNzA5MDIwMTA1MTRaMDMxMTAvBgNV
BAMTKDFFMTJFOURCOTg5NEUyMUIyOTZENDE5ODIxMzMwNUI5ODI0NDdENEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDef5L9lmb7pTeiTJOksItlwezo
MSlX2tUT8n15fmhN5xc7+Qx9ArVzRzqTxSRY5+689dcFrzrl1Gfl/wJdjE9hh75y
SxkyoXPKo+YXvgGhSf1skBzcpql918Xb7fAT/15dHwO4WAxXhtSLO/yfkzgvaBqe
WRiUG68av3oJZMyhEDlnRUbia3OAlm7wsXCPghjeL0CPVE7Za3T/nz8U7WHrU3Im
PmFm+hUL41vuH5v0DZp7eTk8a39COjXwkn2Yl4+GdenJofU9+ds52oIXYwG5dCoq
kXYzNLBAd+BlQai0L1dN7NQsmVOuiIaR1fi/pQkhYZ20wYcyflUkHky/XoIzAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUHhLp25iU4hspbUGYITMFuYJEfUowHwYDVR0j
BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2
MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2
NVBaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt
NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTMjE0NDgzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAjxRm
AwQAjxTIMA0GCSqGSIb3DQEBCwUAA4IBAQCJFbSmmz4AFNV9eui2gCbjdbGJRKs5
5hq7tiDNEly9nEoZwfPO5K8V6ZidgIOqcXqC8c4tCtwvIp65OrGpakc89H+Kry9/
x2NQy1/ilk+pbGyIlnmVFmapElBapz86GPSGtEappU1A9fwTagMwtgnweJRYldNV
R1QfbdfdbebSsm+X2lHu9pGo2h27qzfRP/aX9UJjqWlBj/5gr6VPgVAUXNg5V8L2
YtiUTUHfAMI4/FC+1lZCVE5YV53rs389d+Zsx1wkrXW1fq6jQfy+jAT3cxl8g4gn
cXML/6n+KVnEcHT5INNotWSGfCBZbaw698csVMLzciBhLaOAz9vDX1PR
-----END CERTIFICATE-----
Generated at Fri Sep 4 05:38:05 2026 by rpki-client