Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS402215.roa
File: AS402215.roa (raw, json)
Hash identifier: 5tptxxxniDCTIrjo9OxJscp9odwJO6EnJhEZuncCAoQ=
Subject key identifier: EF:97:E7:52:5F:47:49:34:5F:88:7F:DE:EA:B1:B9:E5:D7:5D:E0:EE
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 5D8FE8C7C068A0D3830644CE7547F0614F27565B
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS402215.roa
Signing time: Sat 08 Aug 2026 11:18:02 +0000
ROA not before: Sat 08 Aug 2026 11:13:02 +0000
ROA not after: Sat 07 Aug 2027 11:18:02 +0000
asID: 402215
IP address blocks: 143.20.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:8f:e8:c7:c0:68:a0:d3:83:06:44:ce:75:47:f0:61:4f:27:56:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Aug 8 11:13:02 2026 GMT
Not After : Aug 7 11:18:02 2027 GMT
Subject: CN=EF97E7525F4749345F887FDEEAB1B9E5D75DE0EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a0:8b:3d:12:f3:29:bd:13:b2:bb:08:90:d7:
bd:b3:91:50:22:fe:33:93:f8:9f:58:b1:fa:48:3b:
70:92:ff:19:3f:00:00:16:97:78:59:bb:b4:33:62:
fa:12:4e:96:db:70:bc:6a:25:5e:a3:4c:bb:2d:20:
2a:36:8a:01:bb:01:b0:3a:ae:84:35:ec:75:e1:e0:
c0:f2:de:c7:c3:d3:c6:62:4e:18:91:b5:09:c5:51:
2d:09:43:ee:b6:40:14:1b:43:61:f0:38:4a:cc:01:
8f:4a:c7:17:df:1b:db:30:13:42:ce:56:d3:e3:c0:
a1:86:3c:da:ec:83:e6:d5:35:7b:31:24:b6:1c:a0:
39:ed:e2:ae:5d:58:92:60:95:43:6b:fd:df:7e:ce:
5a:46:94:18:4c:eb:e6:99:9b:38:1a:ff:57:4b:5c:
5c:e3:5c:a9:55:c6:e8:08:08:bc:35:3b:53:08:a5:
b5:e6:cf:d2:e7:19:5e:d0:68:3a:a8:90:f1:73:4b:
a0:92:60:c4:86:42:f7:9b:88:bb:f9:45:6d:86:71:
23:40:69:65:06:2f:ef:1f:d5:54:ae:b7:83:c7:d0:
68:74:fd:43:68:2b:70:40:6b:2c:5a:ff:44:b5:09:
f2:53:12:48:cb:db:29:a6:64:74:e6:be:98:ab:45:
57:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:97:E7:52:5F:47:49:34:5F:88:7F:DE:EA:B1:B9:E5:D7:5D:E0:EE
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS402215.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.131.0/24
Signature Algorithm: sha256WithRSAEncryption
21:4b:cc:da:f6:72:37:51:35:7a:b6:6d:bb:56:b5:df:3c:29:
97:bf:c0:4d:35:0e:5f:91:88:45:6c:16:35:89:90:db:4f:9c:
8c:4e:cc:99:9e:2c:a3:14:db:bf:7b:4e:e7:19:c1:bc:a8:32:
2c:ee:e3:fd:fa:a5:5d:6e:a7:9c:17:9a:25:32:94:a8:a9:ec:
79:2c:cb:0f:16:aa:9c:0f:b5:8b:0c:c1:8f:ed:51:5d:32:63:
56:9e:e3:e5:65:86:f1:32:ae:97:25:a0:13:fe:d0:ba:33:60:
3f:af:c4:29:00:2a:b0:a5:12:35:b7:72:67:bf:72:70:43:4a:
cd:80:7e:e4:bc:f4:49:82:76:da:6b:c1:55:41:44:45:d6:f5:
07:12:7e:63:22:7f:ad:2d:25:54:6c:6c:ba:1b:fe:b8:d9:a4:
1c:b1:d4:18:45:2d:aa:06:24:50:55:13:bd:f3:8c:3a:d3:d1:
ce:2a:c4:ef:1e:31:0a:bb:b1:d8:6a:a9:19:33:5f:da:cf:fb:
99:9c:b1:ff:5a:5e:ac:15:67:7a:e1:03:98:19:20:67:bf:ad:
ff:eb:eb:4a:13:77:c6:73:2d:28:65:69:5c:d6:c5:1b:e2:90:
2b:87:1c:08:61:c4:90:74:63:bf:79:db:b8:2b:64:3a:a5:51:
fe:be:a9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:35:21 2026 by rpki-client