Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS219068.roa
File: AS219068.roa (raw, json)
Hash identifier: LkjEWeAF//1eCSlMkMKXcd2mboDU1HW5n73vC0fTfgA=
Subject key identifier: 34:C4:9D:A2:57:50:94:B8:C8:4B:71:D1:AD:3B:C0:8F:83:77:EE:88
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 36E25F6AA5ED1FB5310B43F981A841359D590E17
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS219068.roa
Signing time: Fri 21 Aug 2026 06:08:09 +0000
ROA not before: Fri 21 Aug 2026 06:03:09 +0000
ROA not after: Fri 20 Aug 2027 06:08:09 +0000
asID: 219068
IP address blocks: 143.20.179.0/24 maxlen: 24
143.20.221.0/24 maxlen: 24
143.20.222.0/24 maxlen: 24
143.20.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:e2:5f:6a:a5:ed:1f:b5:31:0b:43:f9:81:a8:41:35:9d:59:0e:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Aug 21 06:03:09 2026 GMT
Not After : Aug 20 06:08:09 2027 GMT
Subject: CN=34C49DA2575094B8C84B71D1AD3BC08F8377EE88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:eb:77:d5:3a:97:4f:72:07:71:ef:5c:9c:66:
40:49:dd:49:19:a5:20:6b:69:da:78:a9:61:ff:75:
2d:a6:36:82:b4:e4:fd:da:a6:46:b1:3d:43:c9:5f:
92:04:39:b4:8a:58:11:5d:c9:f1:b7:a4:cf:51:de:
0c:97:43:ef:c5:0c:8a:8f:01:a3:0d:f8:46:1e:e2:
47:a4:2d:80:79:ce:68:71:f1:a8:1c:67:b7:27:ad:
c1:67:22:67:87:76:54:b2:6c:94:88:d1:94:fd:4e:
30:90:39:b3:bf:0f:2f:f0:d6:33:53:cd:f9:b4:e0:
00:83:4f:23:70:80:a2:55:ee:22:5a:d3:7a:00:13:
e4:f0:71:1c:28:6d:96:d9:82:1f:18:36:ac:a1:1f:
25:93:56:95:53:d3:ca:da:23:fc:a5:89:1d:ae:7a:
26:9d:d1:8f:73:7c:ca:f4:05:a7:11:58:65:54:91:
e2:c1:7a:62:f4:23:29:ec:d4:84:50:03:ed:35:a1:
67:cb:16:8a:14:34:6c:a1:63:dc:3c:cf:ef:70:15:
ac:28:a1:a6:85:49:74:03:f3:ec:da:0a:96:9c:c8:
59:b1:86:03:71:33:39:50:3e:f4:67:86:d0:ad:d1:
27:d3:9b:57:e1:3b:c7:08:f8:4d:6e:45:c8:08:2f:
42:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C4:9D:A2:57:50:94:B8:C8:4B:71:D1:AD:3B:C0:8F:83:77:EE:88
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS219068.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.179.0/24
143.20.221.0-143.20.222.255
143.20.249.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:d6:89:c4:40:c4:46:73:c9:7e:7b:75:32:0e:b8:e7:f3:f4:
ea:62:da:da:cd:4e:40:ee:84:f8:7a:c2:a0:b8:30:bf:60:64:
97:20:86:e5:69:e5:ea:3f:5f:bc:6d:44:8a:df:2a:9d:1e:f6:
9d:f8:6a:74:8a:b7:60:d6:2d:59:8e:7e:30:46:fe:d4:66:ec:
37:65:b3:36:c3:fb:88:0a:c7:04:a5:a8:98:00:10:86:37:98:
05:01:48:12:41:0e:da:4b:8a:16:53:59:21:e6:3f:fa:e1:6a:
93:a9:b8:d5:53:a6:9c:dd:8f:d5:c0:bc:da:3f:a6:62:12:70:
78:f7:07:47:be:5b:10:8a:38:27:21:65:e4:23:fe:ff:8a:45:
22:30:5c:98:10:55:ce:63:12:3d:27:53:b3:ef:06:df:e1:5c:
6c:f2:6a:35:fe:f3:cb:ff:0e:84:34:81:f5:c4:b8:c1:f9:73:
0c:ce:e4:e2:62:af:27:08:ea:bf:58:c3:78:fd:6a:72:7e:6b:
b1:0e:b4:0f:20:db:ec:d9:2e:29:a3:dc:dd:55:cf:8b:86:b0:
91:33:92:6f:f3:27:1e:3f:c8:27:fb:4e:8f:71:25:56:fc:2a:
a2:88:c2:c7:79:76:27:f2:01:b2:24:b1:f6:86:80:d4:e7:13:
6a:79:f5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 10:35:29 2026 by rpki-client