Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS216129.roa
File: AS216129.roa (raw, json)
Hash identifier: cibLSlgAharWNEj/JAaA/dpJbEUfcKLkkrNlE3/1OwI=
Subject key identifier: F3:CD:29:0C:19:09:47:61:C8:A5:B8:00:19:A5:F6:83:C7:8F:F6:ED
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 0AC86B13C1BAC70F0938EF4D3342800F886389C6
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS216129.roa
Signing time: Sun 30 Aug 2026 09:49:30 +0000
ROA not before: Sun 30 Aug 2026 09:44:30 +0000
ROA not after: Sun 29 Aug 2027 09:49:30 +0000
asID: 216129
IP address blocks: 143.20.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 07:42:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:c8:6b:13:c1:ba:c7:0f:09:38:ef:4d:33:42:80:0f:88:63:89:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Aug 30 09:44:30 2026 GMT
Not After : Aug 29 09:49:30 2027 GMT
Subject: CN=F3CD290C19094761C8A5B80019A5F683C78FF6ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:37:9e:cb:2f:3b:92:1e:5c:59:4c:bd:eb:ab:
d9:b5:47:44:16:df:c9:c0:a4:41:77:eb:a0:5c:0f:
08:93:de:97:a1:16:82:f1:a6:4b:bb:24:b3:60:e9:
e3:b0:15:ea:d3:50:2c:76:1d:f0:15:5e:24:7c:6d:
ad:0a:f1:cc:1f:63:3b:28:9a:00:5a:f8:6f:b0:4d:
49:23:9f:34:e5:21:71:1f:53:28:b5:65:8a:e5:72:
35:80:1e:59:e3:de:65:21:a4:9f:33:9d:bc:75:78:
be:cc:8f:1a:9b:ef:9e:37:a1:1b:2f:1c:22:95:a4:
4f:56:24:4c:e2:24:64:19:79:f8:42:a1:a4:69:8c:
92:ff:5e:89:7e:6f:90:78:45:c7:1f:e6:dc:8e:ef:
ac:34:59:21:4e:af:72:0a:90:af:45:e9:61:be:a0:
79:10:00:a0:d2:79:96:bb:5e:f5:fe:1d:0e:0a:6e:
6d:97:b9:ac:de:54:0f:4d:6c:57:6a:46:d2:06:3d:
f8:ca:62:81:53:84:68:cb:60:1e:93:96:77:45:94:
3e:d6:43:76:9d:10:aa:e4:28:fa:73:55:67:76:ab:
dd:d2:d3:a0:60:61:64:eb:1d:51:dc:ff:a5:27:b6:
66:1f:37:af:0a:5f:53:36:e1:5f:ca:08:a6:7f:97:
fe:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:CD:29:0C:19:09:47:61:C8:A5:B8:00:19:A5:F6:83:C7:8F:F6:ED
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS216129.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.155.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:bf:83:87:49:08:4c:87:cd:09:1a:ac:fa:0e:57:96:fb:77:
1a:e4:0a:f0:3c:1f:68:69:89:dc:ef:67:e3:b0:f3:1f:96:97:
e1:be:a0:9e:19:29:f4:1b:a5:dc:e5:52:94:29:31:29:82:2a:
45:7d:83:2c:89:8f:77:a2:10:f1:91:62:6a:b5:50:ea:72:9b:
7b:5b:f6:26:6d:eb:42:46:bf:f5:68:90:f1:64:fb:17:91:35:
58:b4:37:b3:9a:e0:2f:74:ee:5f:ad:84:a5:93:c9:11:d7:41:
a7:cd:d3:0b:45:8c:a8:90:e1:71:87:a3:06:5d:97:92:68:ca:
16:f0:08:4a:69:11:0b:ed:66:76:08:ce:3c:51:d2:bc:41:77:
7f:58:a6:2f:b9:db:cb:ad:7b:24:c6:45:6e:16:e3:ad:0e:08:
ce:41:da:d6:b2:dd:b7:77:b4:a2:2a:41:7c:6b:30:c8:46:2a:
8e:0a:7b:4a:38:5f:ec:ed:e3:14:9f:0c:ee:99:db:49:b1:07:
56:5e:52:c1:44:a9:a3:ad:16:d1:bd:3f:42:83:23:91:94:11:
13:5f:2e:ba:94:57:ee:6e:fb:97:10:2f:7a:32:18:88:9d:77:
ab:6a:bb:ae:e9:02:bf:56:da:d7:54:19:72:40:b2:de:2b:b4:
a1:57:a4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 12:57:59 2026 by rpki-client