Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS218853.roa
File: AS218853.roa (raw, json)
Hash identifier: zoEFGbahMpiW73SnpQmb0xssEqTQtcbacxo0wJEoKas=
Subject key identifier: 94:19:73:89:93:DD:F7:B7:50:6C:B4:A0:92:1C:78:AB:F3:D7:97:22
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 25DBD0F3E4361F5D6D19B0D2EEC1F2C975109F01
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS218853.roa
Signing time: Thu 03 Sep 2026 07:55:17 +0000
ROA not before: Thu 03 Sep 2026 07:50:17 +0000
ROA not after: Thu 02 Sep 2027 07:55:17 +0000
asID: 218853
IP address blocks: 143.20.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 22:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:db:d0:f3:e4:36:1f:5d:6d:19:b0:d2:ee:c1:f2:c9:75:10:9f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 3 07:50:17 2026 GMT
Not After : Sep 2 07:55:17 2027 GMT
Subject: CN=9419738993DDF7B7506CB4A0921C78ABF3D79722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b4:a2:d2:f6:56:dd:ad:51:df:63:83:1d:f4:
be:83:73:87:d1:55:1a:39:86:af:4e:19:4f:57:95:
c8:0d:73:99:88:b9:03:2e:aa:da:cb:3f:b7:24:41:
03:13:2a:b9:d1:d1:92:34:59:cc:6c:73:fc:1c:5f:
41:16:d7:bf:df:75:3a:5c:0f:cb:fe:47:ba:23:03:
e4:d4:83:92:f2:e9:75:bc:38:80:e9:e1:bb:6f:1a:
f3:ff:23:04:41:8e:50:81:8f:f3:63:63:fd:6b:69:
19:d6:c7:8b:c2:79:78:ef:8c:e1:6a:65:21:16:6e:
09:d3:2e:56:0c:0f:30:1e:1e:ae:e0:3d:79:93:97:
6e:f8:9c:1f:52:5f:21:1a:e3:c4:70:b9:81:81:b9:
05:83:e0:d6:e4:e5:5d:6d:f1:1c:36:b5:91:e2:ee:
8c:9c:dc:af:c6:d1:8b:a0:51:c0:a3:7a:47:4e:70:
d0:4a:4d:da:34:61:35:28:0e:df:40:67:94:10:b2:
9a:13:29:52:1f:24:00:59:46:12:38:8f:d3:c0:ad:
4e:98:c7:62:19:45:bd:79:5a:d2:a6:5d:ad:ea:c5:
50:ba:26:e3:fe:d5:a1:98:1f:b5:be:9e:68:ed:14:
7d:ad:20:f0:82:4f:a8:97:43:ab:44:f9:97:0d:ed:
dc:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:19:73:89:93:DD:F7:B7:50:6C:B4:A0:92:1C:78:AB:F3:D7:97:22
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS218853.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.78.0/24
Signature Algorithm: sha256WithRSAEncryption
01:43:e9:be:fd:7a:6e:91:1c:3c:b9:df:c9:a4:10:6c:c9:33:
9f:0d:9d:f8:d9:37:9e:3a:e1:b4:47:a5:d4:4f:76:63:7e:0b:
75:a6:da:72:ff:fc:50:43:ba:00:e3:f7:90:3c:93:01:4f:d7:
55:3a:ee:89:59:17:ba:85:3b:12:a7:f3:35:33:f8:2a:95:50:
d4:bb:67:c0:14:1b:e3:40:9e:80:6d:4a:ca:53:1b:91:76:12:
98:78:43:71:e8:aa:50:d7:97:ec:dc:20:84:10:11:28:2e:8a:
a6:93:cb:99:eb:45:19:d6:a7:01:35:c6:78:11:94:16:6b:11:
fb:bb:04:03:c8:72:76:c2:c1:0e:db:c1:f6:49:ad:50:d8:79:
50:31:2f:13:c0:19:71:61:a7:fe:c6:bb:18:5d:b0:82:3d:ac:
df:98:bc:e5:b5:d9:4b:cc:8b:ac:36:57:17:5f:57:eb:4e:59:
0e:c3:89:60:68:f6:e7:9c:6b:55:92:21:3e:fd:2b:c6:9b:48:
4a:10:b4:a1:5f:21:74:ad:40:d7:9e:f2:a7:10:08:d9:9d:23:
cf:ad:52:d8:6f:97:d0:7a:fe:dd:47:22:13:3c:04:75:54:ad:
4d:e0:ef:9e:de:4a:c9:88:af:e8:27:21:9f:25:88:da:bd:fd:
5f:9b:eb:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 05:00:04 2026 by rpki-client