Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS402456.roa
File: AS402456.roa (raw, json)
Hash identifier: fpq1oU2PZinTAFaSX99vBOv2Ees3ocOdnTKZiEEUj1E=
Subject key identifier: 5A:6B:34:3B:03:77:4D:5F:C8:E3:67:9C:06:DB:35:68:D0:D0:73:35
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 1AC4536A53FB01766E73360E3283B718EFC1FC65
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS402456.roa
Signing time: Thu 16 Jul 2026 09:15:17 +0000
ROA not before: Thu 16 Jul 2026 09:10:17 +0000
ROA not after: Thu 15 Jul 2027 09:15:17 +0000
asID: 402456
IP address blocks: 143.20.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:c4:53:6a:53:fb:01:76:6e:73:36:0e:32:83:b7:18:ef:c1:fc:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Jul 16 09:10:17 2026 GMT
Not After : Jul 15 09:15:17 2027 GMT
Subject: CN=5A6B343B03774D5FC8E3679C06DB3568D0D07335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f1:90:8b:c8:03:c4:31:ab:a5:b9:5a:a7:c2:
7a:56:15:90:56:23:ea:6f:0e:0a:cc:92:50:f3:29:
14:ff:2a:56:b2:04:56:3a:78:09:24:83:8b:b8:23:
2b:8e:ca:54:ff:08:17:b5:99:49:32:bd:87:5b:6b:
49:49:b2:83:87:0b:b0:11:f3:b3:6a:e1:2a:8b:c6:
84:52:d3:c1:e1:36:8b:c3:64:57:35:f5:d4:ee:18:
2a:b1:c4:b2:f2:99:1a:f3:ed:d0:23:41:5f:58:a8:
97:52:4c:0d:e9:b3:29:46:71:cc:ed:17:e1:9b:f3:
44:1d:59:64:f7:70:c7:81:e9:58:3f:82:fb:ec:4c:
f8:0a:8d:46:78:5a:09:31:ec:35:36:9d:a7:77:e3:
fd:bb:19:d6:00:73:cb:e7:e3:94:c4:21:dc:55:fe:
c9:09:88:57:07:c8:63:bb:06:49:ea:88:99:32:c2:
12:e1:16:47:05:4d:28:e0:d5:51:cb:ce:5c:ab:4f:
f4:9c:0f:b4:04:4a:93:a3:85:17:6f:83:0e:f4:08:
09:7f:dc:8d:77:b8:20:6e:3a:45:f1:15:37:71:52:
0a:ec:d4:87:d6:7b:37:37:69:b4:09:9a:6e:fc:7d:
c6:63:91:bd:23:4e:7e:08:b6:e2:56:66:7c:bc:2f:
1c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:6B:34:3B:03:77:4D:5F:C8:E3:67:9C:06:DB:35:68:D0:D0:73:35
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS402456.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.24.0/22
Signature Algorithm: sha256WithRSAEncryption
23:c4:a9:4b:1e:38:08:1f:15:0b:76:30:80:12:31:41:e7:83:
a6:0f:82:da:dd:e4:93:d0:ec:c2:70:dc:77:23:5d:37:ea:f5:
c4:f6:ab:cd:07:72:a1:4d:02:42:45:e2:b1:13:34:ba:c7:91:
54:f5:6b:61:22:f1:70:4e:2f:fd:fa:5f:ec:b8:a6:52:dd:7c:
7b:27:50:bf:bd:75:9f:ef:22:a6:ee:8e:a8:86:27:54:9b:fd:
d4:44:fd:ae:89:c8:a1:0d:9f:76:0b:b7:0d:7f:0a:2d:98:cc:
a3:f0:ae:3a:4a:04:93:ca:c4:79:97:1c:ca:cc:fe:38:95:ab:
c8:6a:d8:0b:4c:2b:7d:d4:90:4d:ad:2d:53:7c:21:ed:52:5d:
1b:f2:88:58:4c:12:f4:dc:fa:40:3d:fa:35:19:48:9c:5f:41:
e1:61:2c:31:12:c0:16:64:91:3e:5b:e7:18:8c:99:b5:0a:a1:
e3:89:35:72:f2:2f:c0:05:b2:ff:0e:7f:5d:5c:3e:ac:9d:9d:
99:10:4e:b9:da:b6:25:a6:e4:ba:94:47:68:c5:10:01:bf:10:
ab:43:b8:47:c7:08:e6:40:38:01:c6:b4:ca:12:9d:40:cf:4c:
ff:a9:7c:69:c9:7a:89:d7:9c:66:e7:c6:68:08:e0:79:e2:8e:
69:f8:86:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 10:58:12 2026 by rpki-client