Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS399359.roa
File: AS399359.roa (raw, json)
Hash identifier: /LT3GTp3/DANB1mOMev4ub43itCgbaOP3lE6wZRET5k=
Subject key identifier: 66:BA:69:1D:AD:6C:D8:40:0F:2A:04:ED:F8:BB:BB:55:D1:54:F0:90
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 2EB1EEE0303866952ACB74B988E3B483E03CBCCC
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS399359.roa
Signing time: Mon 10 Aug 2026 11:20:59 +0000
ROA not before: Mon 10 Aug 2026 11:15:59 +0000
ROA not after: Mon 09 Aug 2027 11:20:59 +0000
asID: 399359
IP address blocks: 143.20.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Aug 2026 18:27:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:b1:ee:e0:30:38:66:95:2a:cb:74:b9:88:e3:b4:83:e0:3c:bc:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Aug 10 11:15:59 2026 GMT
Not After : Aug 9 11:20:59 2027 GMT
Subject: CN=66BA691DAD6CD8400F2A04EDF8BBBB55D154F090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bc:88:69:76:d9:4f:e6:44:e2:0d:a4:42:ee:
aa:8f:47:2f:58:3b:87:14:c5:30:3b:0d:55:50:fa:
d6:9a:47:81:d7:b0:82:27:af:c3:91:e4:db:8f:67:
04:66:bc:04:11:eb:fb:a2:5b:89:d8:f9:f6:73:c8:
95:e5:68:f5:ef:b1:8e:03:3c:63:23:4d:4f:bf:3a:
a3:ac:31:bd:b0:76:92:ea:bd:07:db:28:fa:9e:30:
86:bb:d2:76:be:d0:40:2f:74:c5:f6:b0:c8:fb:ff:
ab:c5:49:df:6b:85:76:68:22:8e:02:58:4b:d4:68:
b0:60:3c:40:0b:9a:22:10:cd:87:2d:ea:30:97:fd:
c5:30:3d:18:52:b4:c6:48:27:2d:41:a2:9a:61:bb:
0d:4a:52:5a:de:cf:1f:e0:c6:9c:67:d3:7d:5c:18:
d5:2f:fe:65:56:e3:6b:a2:21:36:4f:67:0f:f4:a0:
17:8c:2e:d3:13:b2:2a:7b:2f:75:d3:dc:13:95:86:
05:00:fc:a3:13:74:e7:8c:ef:a6:cd:65:f3:c5:cb:
e0:b9:e4:4c:6c:73:c4:a3:82:21:d5:48:5f:fa:c5:
50:a5:1d:be:d7:ef:e5:f1:55:b5:dc:08:a3:90:d2:
b2:f9:22:df:24:23:e5:f3:0f:2d:98:55:f8:2e:5b:
3d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:BA:69:1D:AD:6C:D8:40:0F:2A:04:ED:F8:BB:BB:55:D1:54:F0:90
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS399359.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.151.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:f5:61:6f:ab:00:b8:77:26:58:5b:c6:89:29:40:e3:d4:c2:
13:30:96:c0:db:09:66:d2:33:3f:68:9a:ef:1e:f9:c4:54:b0:
ce:5c:f1:62:d3:16:26:e8:e3:d7:40:19:98:0a:df:fc:df:fe:
69:23:88:44:7a:54:fd:db:fa:a8:b8:3b:c4:9e:03:d1:e5:d1:
da:0a:bf:b4:9c:ea:d0:e6:51:03:23:65:bc:22:79:f6:02:e6:
ee:96:47:f9:03:6e:77:54:37:09:11:96:d8:e5:7a:e4:8f:99:
15:75:af:5e:7a:38:b0:15:7c:81:f3:9c:06:c6:73:0a:10:d9:
f4:f9:f1:b1:e7:71:71:6d:d9:65:88:a9:97:1a:db:12:ba:51:
a0:15:62:c0:c3:70:9a:c9:30:cd:3a:96:d3:11:66:b5:5b:69:
05:b2:cb:d0:13:cf:4b:75:ed:7b:3e:53:21:ac:fd:0b:87:b7:
68:51:be:8f:62:af:a3:1b:57:83:f8:b6:5e:cf:de:d8:c0:cc:
71:05:8e:66:75:fe:9a:74:20:9b:7e:6b:7d:56:85:f3:32:79:
77:29:33:d4:4d:4c:13:41:9a:38:f1:a4:f0:46:73:3f:ed:b6:
ea:36:b6:0a:6f:f0:17:8a:51:1d:a5:b0:66:6b:fa:bc:77:48:
b0:05:94:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 08:33:36 2026 by rpki-client