Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS402265.roa
File: AS402265.roa (raw, json)
Hash identifier: Q1pLCL7+di3R9mXVYw4kjo8WkERRFrWb+6CRtR/aGJ8=
Subject key identifier: 73:31:A4:E7:F8:DD:CD:34:10:37:3F:F7:BE:F8:27:34:FC:F6:F4:91
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 0E1C9D79745B3E03CB90645E82DE60650311CB0A
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS402265.roa
Signing time: Thu 03 Sep 2026 12:26:41 +0000
ROA not before: Thu 03 Sep 2026 12:21:41 +0000
ROA not after: Thu 02 Sep 2027 12:26:41 +0000
asID: 402265
IP address blocks: 143.20.36.0/24 maxlen: 24
143.20.48.0/24 maxlen: 24
143.20.63.0/24 maxlen: 24
143.20.103.0/24 maxlen: 24
143.20.128.0/24 maxlen: 24
143.20.152.0/24 maxlen: 24
143.20.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:1c:9d:79:74:5b:3e:03:cb:90:64:5e:82:de:60:65:03:11:cb:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 3 12:21:41 2026 GMT
Not After : Sep 2 12:26:41 2027 GMT
Subject: CN=7331A4E7F8DDCD3410373FF7BEF82734FCF6F491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:05:c0:eb:eb:a3:88:96:8a:b7:24:d1:0d:3a:
78:ef:96:c0:6e:f1:65:84:f6:25:0e:c5:7c:f1:ca:
06:ea:83:f1:40:60:fe:e5:c2:54:4b:84:fb:62:78:
a0:45:de:2d:8d:e6:84:78:2b:22:a2:a8:9d:f3:03:
3a:0c:aa:a8:4f:44:90:48:9e:21:cb:25:72:16:bd:
77:b5:0c:3d:4f:cc:49:99:26:77:98:db:1a:4e:dc:
ae:fd:fe:3b:fc:fc:d8:8e:10:5a:b8:85:68:d0:b4:
e3:1c:11:98:27:4b:37:ea:3d:d5:42:9a:6b:88:72:
28:a1:58:8a:6c:15:c6:08:83:d1:6d:40:cb:45:51:
2c:46:98:c3:26:b4:60:bb:94:51:31:6b:c6:f8:2d:
1d:94:4e:1d:12:03:68:ad:a2:73:fb:15:19:26:1b:
af:42:cd:fc:89:c7:63:90:dc:8f:81:04:4e:99:9b:
9f:8b:8f:7d:ea:50:8d:a9:5f:a1:4b:ea:82:2d:27:
c5:79:13:0a:41:c1:3d:8c:c2:64:59:66:45:38:53:
47:ab:17:ef:26:ce:4e:6a:f9:79:cb:f5:a8:0f:23:
42:39:66:d5:b0:80:ec:38:ed:a7:cc:36:4d:2a:16:
47:6c:af:32:6d:10:d3:9e:91:68:64:77:5c:1b:46:
fd:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:31:A4:E7:F8:DD:CD:34:10:37:3F:F7:BE:F8:27:34:FC:F6:F4:91
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS402265.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.36.0/24
143.20.48.0/24
143.20.63.0/24
143.20.103.0/24
143.20.128.0/24
143.20.152.0/24
143.20.250.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:21:8a:27:5f:67:5a:de:e5:30:41:a3:ae:21:dd:73:7a:35:
0c:76:48:bc:62:d4:48:e8:f5:07:ed:ab:9a:b2:d6:e0:93:8a:
57:71:6b:32:bd:83:f5:3d:c1:9c:b2:8b:c9:52:4d:78:e2:e0:
ec:17:cb:24:d2:9b:77:d2:7d:94:a6:fb:db:c8:fc:7a:ad:a0:
13:c5:d0:7a:e1:83:b0:de:5d:67:41:a4:47:2b:3f:4e:98:b2:
5e:d1:5e:37:55:b2:47:a8:79:e2:06:48:cc:9e:ee:a7:3c:e1:
78:dd:60:77:19:df:56:f8:15:43:f1:10:b0:62:05:07:eb:28:
e6:67:d3:d3:7d:a0:b3:8e:c8:d2:59:9d:0a:d4:6e:43:e3:0a:
da:c2:36:d2:e0:7f:c8:d0:cb:03:b9:01:c4:3d:03:15:c1:dd:
a7:f4:b5:85:0c:e3:f6:4b:b9:ba:fc:be:e4:47:24:6f:6c:77:
5b:50:75:6f:46:2c:57:c7:08:a7:74:a4:40:5d:71:93:66:69:
22:42:dc:ec:1e:36:35:6c:87:97:70:76:1f:6b:4f:3a:9b:a1:
a0:83:c0:0a:0c:69:94:45:df:0d:14:db:70:26:03:49:48:f4:
45:59:68:94:63:a1:a5:44:7f:50:f2:6b:9d:3a:73:3b:e4:8e:
fb:8a:1d:56
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIUDhydeXRbPgPLkGRegt5gZQMRywowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk
ZWI5M2Q5ZDAeFw0yNjA5MDMxMjIxNDFaFw0yNzA5MDIxMjI2NDFaMDMxMTAvBgNV
BAMTKDczMzFBNEU3RjhERENEMzQxMDM3M0ZGN0JFRjgyNzM0RkNGNkY0OTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/BcDr66OIloq3JNENOnjvlsBu
8WWE9iUOxXzxygbqg/FAYP7lwlRLhPtieKBF3i2N5oR4KyKiqJ3zAzoMqqhPRJBI
niHLJXIWvXe1DD1PzEmZJneY2xpO3K79/jv8/NiOEFq4hWjQtOMcEZgnSzfqPdVC
mmuIciihWIpsFcYIg9FtQMtFUSxGmMMmtGC7lFExa8b4LR2UTh0SA2itonP7FRkm
G69CzfyJx2OQ3I+BBE6Zm5+Lj33qUI2pX6FL6oItJ8V5EwpBwT2MwmRZZkU4U0er
F+8mzk5q+XnL9agPI0I5ZtWwgOw47afMNk0qFkdsrzJtENOekWhkd1wbRv0bAgMB
AAGjggIuMIICKjAdBgNVHQ4EFgQUczGk5/jdzTQQNz/3vvgnNPz29JEwHwYDVR0j
BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2
MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2
NVBaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt
NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTNDAyMjY1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAjxQk
AwQAjxQwAwQAjxQ/AwQAjxRnAwQAjxSAAwQAjxSYAwQAjxT6MA0GCSqGSIb3DQEB
CwUAA4IBAQBuIYonX2da3uUwQaOuId1zejUMdki8YtRI6PUH7auastbgk4pXcWsy
vYP1PcGcsovJUk144uDsF8sk0pt30n2UpvvbyPx6raATxdB64YOw3l1nQaRHKz9O
mLJe0V43VbJHqHniBkjMnu6nPOF43WB3Gd9W+BVD8RCwYgUH6yjmZ9PTfaCzjsjS
WZ0K1G5D4wrawjbS4H/I0MsDuQHEPQMVwd2n9LWFDOP2S7m6/L7kRyRvbHdbUHVv
RixXxwindKRAXXGTZmkiQtzsHjY1bIeXcHYfa086m6Ggg8AKDGmURd8NFNtwJgNJ
SPRFWWiUY6GlRH9Q8mudOnM75I77ih1W
-----END CERTIFICATE-----
Generated at Thu Sep 3 22:26:15 2026 by rpki-client