Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS400402.roa
File: AS400402.roa (raw, json)
Hash identifier: xQOdtwwL2DHD112tCvK2UWiLE8nuLy2Xv+ZmtXKWO6M=
Subject key identifier: 74:BC:5F:0F:EF:E4:FC:C1:B8:C8:3A:28:60:0C:1B:C7:D4:B0:B3:33
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 201FDAAF6B28492A5CE0840C47E1E9FA966F75FE
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS400402.roa
Signing time: Sat 29 Aug 2026 19:55:13 +0000
ROA not before: Sat 29 Aug 2026 19:50:13 +0000
ROA not after: Sat 28 Aug 2027 19:55:13 +0000
asID: 400402
IP address blocks: 143.20.7.0/24 maxlen: 24
143.20.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 06:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:1f:da:af:6b:28:49:2a:5c:e0:84:0c:47:e1:e9:fa:96:6f:75:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Aug 29 19:50:13 2026 GMT
Not After : Aug 28 19:55:13 2027 GMT
Subject: CN=74BC5F0FEFE4FCC1B8C83A28600C1BC7D4B0B333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a1:b6:9b:ba:8d:63:62:09:8b:26:fe:bc:5d:
f0:1c:ad:e3:87:c2:0b:32:1d:1a:df:e7:27:cd:17:
c5:68:29:4b:43:77:09:1b:1c:94:54:25:b0:f8:93:
97:3b:0c:5b:a4:c7:fd:9e:88:0c:a3:20:3f:31:c4:
c0:20:dd:fb:91:67:76:ee:69:cc:ea:b8:9f:29:9c:
a8:93:fc:62:9e:ad:2a:f0:16:61:46:61:3c:27:23:
71:d1:76:28:2d:03:b0:d7:aa:c3:09:9a:d5:b7:03:
c1:62:85:8f:5c:8f:1a:8b:18:1e:9d:bb:65:d8:7f:
7d:f7:b6:59:90:c2:40:b4:c8:06:a0:de:40:85:47:
be:a7:05:51:d8:6a:ce:12:db:7b:70:ad:2f:2d:ab:
6f:6e:90:47:29:be:b1:70:4a:90:31:1d:ab:8f:69:
fc:27:f1:3f:37:94:cd:62:05:38:17:49:1b:58:ca:
d7:c0:4d:52:6b:fa:cb:44:58:9e:35:35:2e:de:0d:
22:2a:7f:89:ce:aa:fe:dc:41:d4:8d:05:b0:93:cf:
3a:8b:95:d7:96:f2:7b:04:f0:3f:70:db:10:a1:77:
e1:85:7e:cc:f1:8e:05:b4:37:28:35:22:1a:ff:6b:
89:a1:47:d4:ff:7d:58:ad:90:09:0b:83:61:e9:cf:
d1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:BC:5F:0F:EF:E4:FC:C1:B8:C8:3A:28:60:0C:1B:C7:D4:B0:B3:33
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS400402.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.7.0/24
143.20.14.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:15:aa:22:a5:f3:67:ef:98:54:f5:e0:ab:42:ad:ea:50:26:
94:a1:d8:76:f3:b3:94:1d:a3:a7:46:ef:04:0e:2c:5b:ed:cf:
b2:7f:e2:94:2e:2e:1c:9c:ef:78:4a:06:d9:65:57:35:8e:97:
19:51:ae:38:7a:22:dc:bf:dd:a8:98:91:11:83:48:b8:59:f1:
c0:d6:78:d8:40:fd:a6:ea:22:f4:67:0d:8c:54:81:0a:e7:0e:
a5:08:30:c6:59:02:99:3a:0d:88:b5:6e:ba:22:be:ca:2f:99:
56:c1:19:9f:04:8d:5d:4d:d3:b0:81:6a:6c:f5:78:fc:eb:8b:
87:f2:4b:79:7b:4e:dc:d2:ce:71:9e:a4:3b:3e:fd:72:5c:69:
57:a1:81:44:0a:61:3f:80:d5:c7:79:70:d2:75:7f:81:6f:e1:
e2:04:e1:b8:af:28:1e:52:36:1a:a5:ae:81:a0:ad:5a:3f:bd:
a8:1b:a5:a4:d4:a6:d6:ac:60:7d:ed:e8:90:8a:f8:c9:a8:9f:
6b:24:62:22:f6:ba:64:5e:5f:d0:b6:9c:79:1f:01:68:94:b8:
65:14:30:41:0a:c8:24:9c:67:f1:4f:c2:1e:87:e6:5f:45:8a:
c0:3c:69:c9:32:75:42:b6:d1:61:e5:dd:61:35:ca:6c:3c:41:
1a:0d:37:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 10:04:43 2026 by rpki-client