Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS215152.roa
File: AS215152.roa (raw, json)
Hash identifier: yYatNUbYddkDiL5eVlquxDkLeMCGHEADnozxPUPRyuM=
Subject key identifier: 01:A1:31:E2:F9:D7:65:63:46:C0:B8:74:82:A3:2F:73:EC:8F:1E:C0
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 193F72E1BF4168B5A96F851067F9F2FF17EDA615
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS215152.roa
Signing time: Sat 04 Apr 2026 01:48:24 +0000
ROA not before: Sat 04 Apr 2026 01:43:24 +0000
ROA not after: Sat 03 Apr 2027 01:48:24 +0000
asID: 215152
IP address blocks: 143.20.47.0/24 maxlen: 24
143.20.105.0/24 maxlen: 24
143.20.120.0/24 maxlen: 24
143.20.145.0/24 maxlen: 24
143.20.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Apr 2026 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:3f:72:e1:bf:41:68:b5:a9:6f:85:10:67:f9:f2:ff:17:ed:a6:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Apr 4 01:43:24 2026 GMT
Not After : Apr 3 01:48:24 2027 GMT
Subject: CN=01A131E2F9D7656346C0B87482A32F73EC8F1EC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:02:d6:15:60:08:c3:40:51:5e:0e:5a:fd:e6:
40:e4:a9:40:dc:fd:5d:85:93:f8:22:ed:7d:42:4a:
49:9e:aa:7f:6a:6c:aa:29:2e:02:ce:5d:67:e4:e2:
dd:0e:82:6c:3b:8c:b7:dc:d3:f4:d5:31:f5:e9:b3:
1b:9c:89:b1:3f:ca:de:b7:e7:37:b4:08:2b:a2:68:
07:48:a2:e6:ac:30:f7:9f:2a:71:d1:1b:b2:c7:b4:
9f:77:ee:a2:9c:13:dc:32:d8:9e:9a:9c:0d:34:d9:
65:47:bc:b4:bd:27:39:0b:23:55:2e:f7:97:fc:72:
9f:99:df:bc:0d:ef:92:2c:6c:27:49:cb:bb:42:53:
5f:46:67:5e:93:33:31:c3:5b:4a:8b:1a:0d:6c:3a:
23:d8:de:4f:db:bf:eb:9a:85:49:33:5d:c4:08:55:
d7:b8:18:48:dd:ab:6a:68:8b:35:90:04:cf:4b:b2:
16:7d:67:00:df:2c:19:d8:75:6e:0c:da:83:2e:bb:
f4:fc:cf:78:2c:de:d1:f7:b4:09:aa:1e:88:65:76:
7a:67:57:46:7f:f3:de:32:1f:49:27:bd:5f:18:50:
96:42:7c:53:81:2c:27:2d:b9:f1:84:25:77:58:88:
90:d9:44:a9:a0:f6:55:2c:38:21:a9:16:59:17:17:
d3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A1:31:E2:F9:D7:65:63:46:C0:B8:74:82:A3:2F:73:EC:8F:1E:C0
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS215152.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.47.0/24
143.20.105.0/24
143.20.120.0/24
143.20.145.0/24
143.20.180.0/24
Signature Algorithm: sha256WithRSAEncryption
30:66:a2:0e:18:90:98:f0:cc:88:af:5d:1a:2e:d5:62:08:e4:
d7:64:70:67:43:6f:b7:b6:c1:54:0e:a0:30:8e:64:5d:c5:11:
9c:60:6e:22:4e:a0:a8:f6:f4:e7:cb:e5:67:7a:51:a4:b1:3a:
37:78:09:6e:0c:c4:13:38:72:25:95:58:84:e1:d6:29:6f:ce:
b3:0f:fa:ed:dc:71:9a:35:ea:ee:d6:95:b0:06:46:48:ba:fe:
e8:9b:ff:92:68:a8:e1:2c:c7:0e:86:2a:12:fe:95:25:98:67:
43:d7:5e:5f:08:8b:4b:91:73:d6:5b:30:4f:ae:39:c1:3b:fe:
66:89:da:09:e5:1a:3c:4d:60:c1:e6:8b:6d:67:48:6a:e5:ca:
49:8f:72:23:20:ab:0d:5f:b7:87:fe:d2:48:8a:ab:7b:62:92:
19:eb:4e:f8:01:d1:01:69:22:16:25:b4:29:6b:9d:50:f8:31:
9e:e1:08:92:5f:a6:6b:22:c1:c8:b3:18:cd:60:2e:94:86:22:
36:f2:9c:b0:83:c6:22:1f:45:38:91:ff:16:1b:3c:51:db:2c:
8d:fe:54:43:3a:6c:3a:3e:40:b1:8c:f7:81:0e:fe:e6:3e:13:
d8:49:a8:00:2d:8d:2b:60:38:89:94:80:05:59:b1:3a:26:92:
6a:7a:41:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:27:09 2026 by rpki-client