Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS219427.roa
File: AS219427.roa (raw, json)
Hash identifier: ueULbHV4Ov11/fYVLwxwV2eaDSbFKnvriJ7SUpxEHJQ=
Subject key identifier: 84:81:D9:14:B2:05:01:68:90:BE:98:90:C1:EC:AC:D0:25:4F:14:B1
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 04E8B87621B9D79047D8A5FE480BFC2A2F743E5B
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS219427.roa
Signing time: Wed 19 Aug 2026 05:11:11 +0000
ROA not before: Wed 19 Aug 2026 05:06:11 +0000
ROA not after: Wed 18 Aug 2027 05:11:11 +0000
asID: 219427
IP address blocks: 143.20.144.0/24 maxlen: 24
143.20.162.0/24 maxlen: 24
143.20.188.0/24 maxlen: 24
143.20.189.0/24 maxlen: 24
143.20.190.0/24 maxlen: 24
143.20.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 12:57:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:e8:b8:76:21:b9:d7:90:47:d8:a5:fe:48:0b:fc:2a:2f:74:3e:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Aug 19 05:06:11 2026 GMT
Not After : Aug 18 05:11:11 2027 GMT
Subject: CN=8481D914B205016890BE9890C1ECACD0254F14B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9f:5b:af:f6:de:e1:4a:7f:0e:86:9c:f1:3f:
98:89:b7:2e:4d:70:2f:56:45:c1:84:a7:13:d5:2e:
85:0a:1e:73:44:15:51:fc:55:7c:06:21:54:c0:34:
4b:16:a9:44:e2:e6:b0:c3:bc:00:71:af:e0:04:4a:
27:25:6c:5b:90:8d:af:f4:20:76:48:dc:bf:7b:44:
b7:a9:0e:bc:48:67:7d:91:f7:8c:ec:81:7d:ce:36:
6b:c5:b0:ac:cd:0c:be:9e:2e:d7:fa:43:e4:c6:1a:
80:a0:87:71:33:ca:7c:55:ec:2d:c7:b3:06:c8:73:
3c:dd:10:03:c7:f1:90:07:be:24:0a:b4:72:89:11:
a9:7c:80:b9:1e:1c:e5:00:63:fd:aa:3f:af:a2:70:
be:f8:48:c6:64:cc:fe:15:2f:ca:d9:1b:5d:47:84:
05:b2:69:41:6d:e6:91:11:90:8f:87:e3:b1:3e:29:
c6:35:01:e4:8e:d7:2b:f3:88:fe:d7:65:8a:0a:60:
ad:66:8e:1f:dd:aa:7b:73:a4:8d:af:e2:6f:58:cc:
f3:9d:15:ba:6e:bf:83:7b:57:91:8e:ba:cb:e3:44:
ef:5c:75:86:8e:ee:30:ff:27:2f:8e:88:f5:2f:e7:
44:35:cf:0e:5d:fa:22:73:f4:7d:b8:2d:40:5d:84:
2e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:81:D9:14:B2:05:01:68:90:BE:98:90:C1:EC:AC:D0:25:4F:14:B1
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS219427.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.144.0/24
143.20.162.0/24
143.20.188.0/22
Signature Algorithm: sha256WithRSAEncryption
31:03:43:72:8d:29:e7:6c:88:1a:91:cf:f6:f7:11:24:22:2d:
01:23:4e:27:94:6f:3d:07:b7:f0:ba:b5:d6:55:df:0f:91:4e:
f7:cf:18:4a:0a:95:e4:75:2c:63:b2:87:8c:61:a9:6c:85:fa:
86:80:71:00:3a:85:c9:d3:b6:dd:ee:ad:77:34:66:15:0b:6b:
e2:17:01:62:3a:a5:f4:5b:4c:0e:92:cb:e5:c0:20:dc:65:90:
f4:71:29:c2:84:eb:78:a6:f9:29:32:3d:21:fe:40:19:8a:e8:
26:8b:3a:fd:ef:29:87:00:af:fa:3b:df:3f:45:9b:9f:47:69:
33:ea:0d:53:b0:66:e1:70:ac:0e:e2:c9:44:cd:7a:66:47:0d:
47:ee:92:b5:fb:9f:c3:a7:fa:48:10:1b:76:6d:12:d7:ed:31:
ff:da:05:59:b1:10:3f:ca:fd:5c:6d:87:d3:ed:08:b7:98:0a:
75:ee:84:5e:6a:77:34:12:67:e2:87:12:7f:db:9a:92:3d:c6:
a7:0a:07:91:56:4c:fb:a6:a5:fe:5e:85:a8:2a:59:e0:c0:d0:
58:ed:34:d4:91:56:5f:7e:69:1f:c6:da:dd:10:47:06:df:54:
ae:cc:11:5e:a6:f4:be:da:b8:68:75:cf:3f:cc:33:ac:e0:a1:
7b:83:42:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:22:55 2026 by rpki-client