Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS401075.roa
File: AS401075.roa (raw, json)
Hash identifier: XANcpx5sCXfIo8JEi7DWGRx71X1y66CoUcy420B/63o=
Subject key identifier: EF:B6:B0:99:23:7D:6D:F2:8F:FA:20:B1:33:37:C6:AC:D3:C0:8C:69
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 713DCC488DA0DE504148051A6F2BA3F0CFBE7FEA
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS401075.roa
Signing time: Fri 17 Oct 2025 10:34:07 +0000
ROA not before: Fri 17 Oct 2025 10:29:07 +0000
ROA not after: Fri 16 Oct 2026 10:34:07 +0000
asID: 401075
IP address blocks: 143.20.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:3d:cc:48:8d:a0:de:50:41:48:05:1a:6f:2b:a3:f0:cf:be:7f:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Oct 17 10:29:07 2025 GMT
Not After : Oct 16 10:34:07 2026 GMT
Subject: CN=EFB6B099237D6DF28FFA20B13337C6ACD3C08C69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f4:33:5e:c5:ae:96:7d:8f:67:b1:f5:d9:73:
9c:c5:cc:2c:9a:4f:e6:2c:a3:3d:bd:e6:06:fd:bf:
bf:4f:13:be:65:e1:b7:d2:ca:0c:1b:18:8b:e4:fa:
f7:51:32:d3:ac:ab:2b:75:c8:0a:ad:cd:53:35:61:
9c:0d:36:6e:53:42:a5:66:1c:d2:47:a5:b1:01:9d:
20:3c:d5:21:44:ab:ca:c2:fd:ed:45:66:b5:16:fd:
79:f8:bb:29:4e:2c:81:5e:02:72:3d:1c:97:a6:86:
8d:5b:46:70:59:61:db:05:c6:db:1c:5d:72:0b:da:
c1:7b:d0:70:85:f3:8d:9d:15:4b:8c:2d:76:67:b7:
36:8f:1f:fb:1d:9e:2c:16:70:99:32:7d:f6:ce:5d:
88:80:a2:c3:8a:8f:44:aa:55:09:d9:53:53:75:e6:
b6:cc:69:f4:74:85:15:e5:ad:c4:a9:fe:71:df:52:
3e:c1:69:57:09:45:f6:b5:ba:62:61:81:d2:99:38:
c0:12:ba:d9:ae:c4:45:a8:2c:1c:28:c8:a9:ef:49:
96:1b:78:06:11:bb:9f:4b:ab:c0:f0:48:1c:5f:97:
d1:ca:f9:7f:6c:2d:6e:3f:99:c5:8a:92:f8:83:08:
7e:a3:7a:d7:cb:3b:7d:70:fb:86:6b:37:dd:2e:49:
32:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B6:B0:99:23:7D:6D:F2:8F:FA:20:B1:33:37:C6:AC:D3:C0:8C:69
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS401075.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.38.0/24
Signature Algorithm: sha256WithRSAEncryption
23:c8:f6:26:e5:8d:51:f2:e6:ac:d5:48:8f:0a:be:08:dc:08:
d9:cc:bb:fd:40:e4:ea:da:f5:18:5c:8c:ed:ce:ba:f8:f8:77:
3c:d7:ae:e6:1a:f2:23:4e:5f:9c:e5:bc:ba:16:36:46:7c:cf:
cd:ad:9f:81:a2:66:f4:cd:95:73:8a:c5:06:f4:4c:04:a6:22:
81:31:de:69:d2:73:82:0a:bf:48:5b:95:4c:b8:24:44:3f:12:
55:ba:8d:bd:2d:3e:2d:cc:f4:52:9f:9d:3c:9b:d7:b8:9b:3d:
16:29:ff:6d:fb:1a:2b:72:22:8b:b1:48:dc:aa:ef:f8:46:e8:
ea:d3:8d:6c:08:8f:ea:41:b7:11:02:36:1e:9f:e5:d5:ed:f2:
a1:4e:ee:aa:ed:9b:27:1e:1b:e0:1f:7e:a6:75:1e:5a:1e:5f:
38:05:df:c1:6a:40:ae:52:9d:30:a4:ac:6b:b9:df:b8:43:7b:
40:00:4d:a8:46:7c:7a:74:67:75:9d:26:d1:d0:64:9d:64:f7:
73:86:ff:ac:58:93:24:bc:34:ab:61:12:64:ba:28:32:cf:86:
ef:57:03:05:a9:2e:56:f0:96:d1:65:7c:80:2f:d5:a3:11:9e:
19:47:8c:a4:75:82:41:12:3c:08:29:09:b6:e1:71:ed:95:3b:
29:dd:b3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:54:23 2025 by rpki-client