Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS275019.roa
File: AS275019.roa (raw, json)
Hash identifier: KHlcT38u3VLcFNdv0sfBzZINvh8N9VAeFBwoaBeQjMY=
Subject key identifier: 30:EE:74:C8:25:88:B8:78:BB:D3:47:D4:E9:CE:DC:83:02:50:BA:8A
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 12FD1758E99C797A5636997702D8F54E4081A2F7
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS275019.roa
Signing time: Thu 20 Aug 2026 15:45:31 +0000
ROA not before: Thu 20 Aug 2026 15:40:31 +0000
ROA not after: Thu 19 Aug 2027 15:45:31 +0000
asID: 275019
IP address blocks: 143.20.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 06:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:fd:17:58:e9:9c:79:7a:56:36:99:77:02:d8:f5:4e:40:81:a2:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Aug 20 15:40:31 2026 GMT
Not After : Aug 19 15:45:31 2027 GMT
Subject: CN=30EE74C82588B878BBD347D4E9CEDC830250BA8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:af:56:c6:e5:e3:2c:6f:21:69:a5:e0:c7:7b:
06:f6:68:12:2e:91:05:97:36:d2:05:f4:20:8c:d4:
7d:f6:1e:d8:1d:65:8d:42:98:03:ea:2c:29:a2:ac:
5f:41:f1:9c:09:16:b7:79:67:6d:a2:c4:2a:1b:8a:
40:02:e1:e3:b2:bf:32:70:c6:90:96:67:49:fb:d0:
21:35:cc:69:cb:95:11:1d:71:e1:44:0f:9a:9c:72:
51:a5:30:bf:07:76:e8:58:9c:f8:0f:1f:7b:26:09:
e2:61:ef:98:08:de:69:a5:41:01:85:cf:58:1a:f8:
77:b9:86:92:4d:84:09:fb:17:ba:86:91:f7:c2:ed:
c2:da:b7:bf:d4:86:4c:4c:25:a8:c6:7c:77:b9:8b:
4d:92:41:1a:b2:2a:c5:80:ec:6f:a1:ca:92:d1:97:
3b:f0:3e:06:0e:5c:33:62:be:e1:bb:4a:37:04:71:
96:ed:1c:98:f1:77:a3:cb:49:1c:6d:f7:98:03:3d:
28:b0:b3:06:ac:b2:97:9d:ac:29:80:d6:92:45:f8:
43:49:2a:35:e2:cb:de:0e:fe:5e:e5:60:bc:fe:5d:
43:ee:f3:14:67:77:f8:3a:4e:da:5d:b1:42:56:35:
ee:a8:72:00:5d:9e:12:c8:e0:cd:c0:5c:f6:95:3f:
8f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:EE:74:C8:25:88:B8:78:BB:D3:47:D4:E9:CE:DC:83:02:50:BA:8A
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS275019.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.180.0/24
Signature Algorithm: sha256WithRSAEncryption
69:94:a0:bf:d8:f0:74:ff:c1:f1:09:b3:ad:08:ee:de:5e:39:
99:8c:ba:2b:4e:c4:bc:08:5a:d1:e6:b5:c9:ca:24:f1:75:c4:
5a:04:03:73:72:67:bf:89:ce:f7:7e:fa:39:9e:ce:aa:fe:c1:
98:41:aa:00:7f:52:c1:58:2a:ac:a8:cd:e8:4c:44:b8:6a:11:
2c:53:02:27:d6:c5:b5:db:ab:02:4d:9e:5f:fc:40:1f:33:1e:
ff:f6:e3:ed:f9:d5:3f:58:cd:ac:e6:42:06:75:b0:dd:d4:16:
ef:e8:ed:0c:ab:1e:61:d3:b3:74:4b:e7:d0:43:6d:89:64:69:
86:ea:c4:16:f5:86:82:d4:24:be:81:a3:45:9e:82:c4:e9:46:
9f:84:98:1e:8e:15:18:db:a1:9e:5e:42:e3:9d:a9:9d:5e:c1:
ce:40:d3:48:61:f6:53:52:a2:af:d1:a5:a1:aa:08:d1:08:a8:
12:22:a4:db:08:5b:59:ee:54:52:60:40:4e:55:57:62:ab:e4:
30:69:a8:f6:1e:42:86:42:d4:7a:08:8d:47:fc:4e:7f:5f:dd:
94:9e:0f:2a:7f:85:3b:2e:57:3a:6b:9e:50:63:be:16:f8:af:
08:8f:d7:01:da:7e:80:d1:c5:4b:38:4d:86:fd:ca:50:c5:27:
92:45:b9:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 10:43:38 2026 by rpki-client