Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS215728.roa
File: AS215728.roa (raw, json)
Hash identifier: pOQSbF7TvoAKPp1q/NtNokFrCvrf6bjyXRdx10FzpWg=
Subject key identifier: EC:2D:F3:44:3E:BC:EB:A2:FC:A5:06:51:44:95:7F:D9:C8:70:06:88
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 291C2EC9E91988A3D44518A43351162C41A6A3A4
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS215728.roa
Signing time: Wed 02 Sep 2026 14:55:41 +0000
ROA not before: Wed 02 Sep 2026 14:50:41 +0000
ROA not after: Wed 01 Sep 2027 14:55:41 +0000
asID: 215728
IP address blocks: 143.20.42.0/24 maxlen: 24
143.20.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 22:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:1c:2e:c9:e9:19:88:a3:d4:45:18:a4:33:51:16:2c:41:a6:a3:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 2 14:50:41 2026 GMT
Not After : Sep 1 14:55:41 2027 GMT
Subject: CN=EC2DF3443EBCEBA2FCA5065144957FD9C8700688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c0:e3:62:ed:1d:a1:e7:7a:7b:ae:e3:a7:d6:
a4:74:e4:2b:a4:8a:72:bc:a3:46:05:37:ad:9a:15:
8e:cc:63:ef:68:62:d4:01:f8:2a:b1:04:a0:f8:e3:
d4:1c:90:58:66:67:89:31:7a:fd:c7:96:8a:2c:ff:
b9:9d:d6:a3:53:70:fa:57:43:a9:31:d1:cd:09:e8:
5a:e8:57:3b:0c:4e:de:c0:ad:9f:27:20:c1:9c:ab:
83:68:8b:39:55:08:1e:5b:af:dd:98:51:eb:79:ea:
28:f9:3f:62:5b:72:33:8f:92:ce:b0:62:d0:08:be:
f1:ac:3c:a2:20:b8:84:de:6e:33:ac:3d:21:a6:43:
83:3e:d5:19:23:8b:3a:e6:b9:55:19:d6:bf:a8:f4:
b1:0e:cc:99:4a:6f:7b:de:cf:ab:9f:27:72:b1:7d:
d4:ef:e2:1f:a6:c5:51:51:4a:ac:7a:32:af:5d:01:
a4:85:2d:8c:66:17:b4:44:ec:ce:b5:a0:86:33:14:
5a:e3:7c:19:49:b5:0f:46:d4:c1:89:a2:41:c5:7e:
8b:45:0a:17:9c:67:c1:d5:dc:eb:01:77:7a:62:b4:
b2:4c:23:17:2b:95:57:72:6b:f3:a6:8e:73:02:eb:
54:7d:b9:f4:53:01:c0:c9:f2:e2:ff:9d:63:e4:38:
1b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:2D:F3:44:3E:BC:EB:A2:FC:A5:06:51:44:95:7F:D9:C8:70:06:88
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS215728.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.42.0/24
143.20.105.0/24
Signature Algorithm: sha256WithRSAEncryption
84:3e:61:c2:0e:50:1f:47:60:df:93:e0:96:82:cb:25:4d:25:
95:10:f6:72:d6:5a:a8:99:df:a3:83:c2:78:ec:de:5e:03:e5:
b8:4c:ad:63:5f:60:d1:d2:7b:99:c2:f5:a5:e1:ba:4e:2a:c9:
ec:32:80:8e:b6:eb:69:44:13:3b:ca:6b:73:57:06:82:2a:7d:
ce:f6:8e:52:b6:27:35:91:b8:10:16:89:b7:6a:09:98:f1:52:
cd:fa:18:a3:30:85:bf:1f:69:ba:a0:7c:02:ff:d8:c4:d6:57:
c8:c4:05:3c:ca:1e:a3:c8:b1:7b:4e:cc:11:a8:94:7c:90:70:
a2:15:b3:58:ef:0c:82:7c:28:52:a3:0b:7a:61:56:72:dd:b4:
e6:f5:7a:c3:da:04:0c:f9:6d:d5:22:02:93:4e:be:51:de:6c:
7c:03:29:5d:d2:eb:d3:fc:80:91:79:24:8e:7e:c8:e2:c5:bd:
28:48:4b:ad:2c:bd:05:1b:ce:9d:76:67:b7:b4:38:74:8c:32:
ed:6d:aa:3c:00:c8:86:a9:d8:22:64:0c:a8:0c:46:b1:e9:e5:
2f:30:ff:b9:bc:6e:7e:83:18:c1:4c:7e:32:e7:2e:b8:4e:54:
fe:a4:e2:b2:d3:c9:ed:ed:7a:6e:69:8e:4a:04:6a:b3:f5:15:
37:60:23:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 07:24:38 2026 by rpki-client