Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS401362.roa
File: AS401362.roa (raw, json)
Hash identifier: 84fZs+639uOkLw2O3iL9DmG9SFGXUeYVplTps5nIlB4=
Subject key identifier: 08:95:C8:07:F0:51:D4:42:D6:22:D9:79:7D:5F:06:3F:C0:28:98:9C
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 212F98B7CA19B9FEDB4F0DDBE0D81058480E6C40
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS401362.roa
Signing time: Sun 30 Aug 2026 11:38:26 +0000
ROA not before: Sun 30 Aug 2026 11:33:26 +0000
ROA not after: Sun 29 Aug 2027 11:38:26 +0000
asID: 401362
IP address blocks: 143.20.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 12:40:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:2f:98:b7:ca:19:b9:fe:db:4f:0d:db:e0:d8:10:58:48:0e:6c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Aug 30 11:33:26 2026 GMT
Not After : Aug 29 11:38:26 2027 GMT
Subject: CN=0895C807F051D442D622D9797D5F063FC028989C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:26:a7:1c:08:ae:1d:ff:03:b5:9e:2f:6e:3e:
e9:8a:f3:86:5a:05:18:ce:ac:4a:ae:f8:08:62:56:
da:38:0c:af:3e:f2:46:04:ff:bf:b4:a0:96:4a:65:
c2:db:1d:35:21:0f:d1:58:dc:97:9f:c2:12:39:81:
d9:64:5b:ed:2f:b1:e9:d8:3a:8e:aa:28:f7:77:49:
c0:34:1e:e9:d5:78:13:91:a8:c8:6d:4d:e1:e2:94:
cb:7f:eb:37:ea:9a:d2:d6:a0:e9:7a:00:50:93:c4:
25:8c:84:29:56:a2:27:d3:80:45:35:b9:d5:c9:8f:
1a:72:c6:94:56:92:b6:f2:07:40:90:e0:f6:8e:73:
6f:2e:70:a2:4e:3d:6d:bc:80:7b:7a:43:e9:8b:d6:
aa:c0:94:cb:9a:0f:b7:cf:95:71:6d:e2:74:8e:ca:
41:e3:df:f0:77:e8:35:f3:94:3d:b0:b8:fb:3f:64:
5e:b0:13:3e:01:16:96:53:33:8e:30:ee:17:af:2f:
36:0f:6c:7b:b9:d8:2f:57:46:d7:c6:38:dd:43:44:
77:23:46:b8:ee:80:a5:75:72:ec:39:bb:24:06:19:
51:bc:65:64:97:0c:70:b3:0b:87:56:b8:64:03:f5:
51:72:d0:cc:50:f6:c0:38:f0:8b:91:b7:e7:e0:0d:
9b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:95:C8:07:F0:51:D4:42:D6:22:D9:79:7D:5F:06:3F:C0:28:98:9C
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS401362.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.22.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:84:68:e6:5e:46:18:bb:3e:cf:10:ed:a8:ca:c9:4c:2f:b7:
c1:0b:08:8a:47:fc:6b:32:cc:b9:d2:76:87:f4:b4:81:77:d6:
eb:5e:d6:43:79:22:70:ed:7e:ff:fc:f8:f3:9d:b9:75:3c:0f:
1d:98:4f:a2:0c:41:82:e7:f3:36:57:5e:d2:f1:c5:15:81:50:
86:d2:08:ba:ef:0d:6c:33:dd:5e:09:67:91:c7:9f:84:92:99:
98:a5:8d:63:d5:26:1b:3f:82:8c:c0:0b:1a:58:cf:0f:0d:0c:
25:59:19:19:be:7e:d5:65:1e:b3:76:36:fe:0c:ad:15:31:d1:
26:3a:77:92:d5:a6:00:40:c5:7a:59:9a:75:12:fc:6e:ed:64:
df:63:c9:bc:cb:9e:9a:c4:21:4a:20:fc:23:cf:a7:4c:7f:de:
00:51:8d:31:8d:36:0c:1c:1f:d6:ce:de:50:f9:c5:12:1e:35:
4e:6c:12:c8:e0:fd:f6:93:f3:c5:5c:ba:e6:8a:f8:bc:b1:9a:
38:c5:f7:65:ee:b7:05:8f:37:0c:e6:19:c0:70:6e:7d:3f:fc:
eb:74:ff:19:77:71:ba:2f:55:69:f9:87:ea:6c:6c:9e:38:67:
1b:61:d9:15:d1:c6:cf:1d:be:db:84:18:1e:54:bc:fc:f8:6f:
15:70:8b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:53:14 2026 by rpki-client