Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS37963.roa
File: AS37963.roa (raw, json)
Hash identifier: 7qjsYg4YgRigtS1XdL/Hl1MTfMs68E0QpnUqdwNxTbY=
Subject key identifier: 54:9D:30:A8:74:E5:44:0F:15:BA:95:A0:8F:E7:AB:E2:5D:5A:EE:FC
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 14B656CC745AC292E5BE72E891E9584A7AF53B81
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS37963.roa
Signing time: Wed 26 Aug 2026 11:14:41 +0000
ROA not before: Wed 26 Aug 2026 11:09:41 +0000
ROA not after: Wed 25 Aug 2027 11:14:41 +0000
asID: 37963
IP address blocks: 143.20.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 22:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:b6:56:cc:74:5a:c2:92:e5:be:72:e8:91:e9:58:4a:7a:f5:3b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Aug 26 11:09:41 2026 GMT
Not After : Aug 25 11:14:41 2027 GMT
Subject: CN=549D30A874E5440F15BA95A08FE7ABE25D5AEEFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f5:20:5c:e0:79:eb:11:6b:0c:f2:14:99:ce:
f5:48:7a:71:2c:1c:ad:9a:e2:33:db:da:4d:77:e1:
b6:d9:57:4d:44:c5:0f:72:45:d4:a1:58:72:80:3c:
b7:cb:15:37:a9:50:12:15:00:3b:a1:87:d6:92:ee:
31:7f:56:31:62:db:c3:ad:a4:f6:90:d1:ad:28:cf:
a4:7a:4a:48:92:ec:dd:9c:60:96:b2:cd:24:f6:d8:
da:17:a3:3b:6f:89:33:6f:3b:68:87:96:18:b0:2b:
bb:a8:ff:b1:99:30:67:a6:c0:b5:a4:d6:11:e1:b6:
0d:b6:9c:31:d5:ad:4d:0c:81:57:6c:f8:cd:67:d3:
f8:65:8d:88:40:dc:27:95:ff:66:93:1e:c9:54:f7:
d9:cc:45:1e:e4:43:ff:9b:a6:b1:d8:86:23:94:ed:
5f:90:af:fb:66:40:05:d0:a3:0f:5b:e1:cd:2f:d2:
5a:99:37:6c:fa:3e:c6:62:a0:e0:1d:6a:29:42:e1:
d0:61:85:37:6c:9a:15:dc:e8:07:34:68:ee:44:cb:
c5:71:b6:79:d9:e9:cc:85:1e:a7:2c:1f:88:ea:c8:
e9:1c:5d:45:60:05:56:66:95:2b:b7:d5:fb:28:c9:
2d:d2:a6:50:02:e3:62:f3:53:06:35:d0:0b:d5:16:
e9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:9D:30:A8:74:E5:44:0F:15:BA:95:A0:8F:E7:AB:E2:5D:5A:EE:FC
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS37963.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.38.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:97:74:fa:c6:1b:04:eb:6e:7d:8f:5b:26:28:3e:6b:e3:a5:
40:10:47:3f:40:b4:52:33:60:73:82:83:39:6d:0d:80:69:ff:
80:27:3d:a8:6d:50:98:41:bd:61:13:38:0c:0a:a4:88:2e:39:
14:ff:a2:5d:55:64:e9:82:3e:ea:7b:e4:5a:91:f3:8d:f0:59:
9a:b5:84:2e:3b:2b:e8:9f:e1:ae:25:65:39:f9:7b:fb:a3:cf:
2c:1d:58:30:40:11:df:78:14:06:28:8c:eb:c6:79:55:05:a5:
9f:09:44:59:6d:b8:47:83:d3:38:e3:ea:ed:34:da:e9:3b:76:
09:46:90:7b:42:4e:c6:a2:23:3c:e9:3f:20:34:30:80:53:a9:
46:05:e8:f3:e7:57:13:c0:7a:8f:3e:14:c1:92:6c:c3:52:50:
af:a6:37:74:d2:84:66:4b:bf:15:a6:42:c4:65:ac:31:0c:18:
a6:54:91:98:09:95:ce:79:ee:c4:f6:ba:15:de:3a:60:c0:d5:
38:29:b7:ca:f4:3e:7f:1a:59:67:95:7e:ab:b7:34:11:de:6f:
7b:89:3b:ef:64:5f:52:21:c3:5d:ad:c8:65:33:90:4b:ac:f3:
8f:41:95:31:86:fc:48:a2:b9:2b:bb:d9:2e:17:9b:d8:a1:0c:
95:5e:1e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 07:46:34 2026 by rpki-client