Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS402755.roa
File: AS402755.roa (raw, json)
Hash identifier: q/dv0vgb1bDIjGfiX9rw0YF2fFaff5o9TnSW4YsH9t0=
Subject key identifier: 25:90:C1:30:6C:A0:DF:EE:84:DB:96:81:6C:BB:E1:0A:14:83:07:B5
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 4574A4DE54E9D35C2DAF5439B270A8E02F0089FF
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS402755.roa
Signing time: Wed 15 Jul 2026 14:25:59 +0000
ROA not before: Wed 15 Jul 2026 14:20:59 +0000
ROA not after: Wed 14 Jul 2027 14:25:59 +0000
asID: 402755
IP address blocks: 143.20.224.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:74:a4:de:54:e9:d3:5c:2d:af:54:39:b2:70:a8:e0:2f:00:89:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Jul 15 14:20:59 2026 GMT
Not After : Jul 14 14:25:59 2027 GMT
Subject: CN=2590C1306CA0DFEE84DB96816CBBE10A148307B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:56:95:30:c4:1b:e5:a9:af:6f:c0:d1:3d:20:
b9:b8:23:18:d8:21:ba:47:8f:6c:82:15:e2:a3:28:
11:63:c9:6f:61:59:1e:2a:33:bb:f9:10:de:27:91:
50:37:ca:c0:4e:0e:7c:aa:bb:d1:9d:eb:7a:18:eb:
83:31:90:db:5f:f3:c8:77:74:f1:dc:7e:5c:2c:78:
df:43:94:4f:3e:69:aa:84:27:99:6d:56:8f:c0:8d:
6a:a7:1d:86:87:fe:1d:2a:92:01:e4:7d:d8:00:2f:
8d:8c:a3:2a:6c:63:f8:2d:79:a1:89:fe:5c:f5:1c:
18:6c:f0:42:9f:d7:5e:19:d0:e5:3b:e8:11:3a:cd:
5e:7e:4a:46:86:51:3f:43:f8:b3:9c:98:1e:95:a8:
1e:34:3c:6a:3b:98:b8:69:9a:b7:7c:6b:93:db:bc:
81:e6:a4:93:ee:f6:46:b0:ba:8c:21:cf:8b:b0:72:
e8:cc:ce:9d:f9:41:0c:b9:5d:89:50:c4:1e:25:26:
e9:9e:e2:f1:fa:d1:ff:5d:e7:dd:99:32:30:df:e2:
b0:67:7f:57:21:04:83:c9:86:7e:7a:22:68:67:61:
ef:43:9d:d8:74:b7:0d:0d:76:64:85:6f:18:7c:b5:
d9:a6:d9:d4:52:01:c1:1e:26:1e:59:a2:05:9a:a5:
db:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:90:C1:30:6C:A0:DF:EE:84:DB:96:81:6C:BB:E1:0A:14:83:07:B5
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS402755.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.224.0/23
Signature Algorithm: sha256WithRSAEncryption
67:f0:7d:28:22:22:bb:fc:f3:a0:3b:4a:92:3f:12:94:9e:8d:
fd:80:83:8d:b4:91:95:5e:82:09:e1:64:42:23:da:9c:d1:fb:
a5:eb:0e:25:b5:a5:ef:c9:fe:52:52:b6:3c:3e:a3:44:8a:a5:
f7:bb:5e:81:2b:b9:95:78:f3:c3:1b:ee:15:31:3b:e4:30:4c:
8f:c8:1b:ed:01:3f:a6:8e:21:8f:ef:d1:30:fa:04:d9:70:66:
9f:86:1d:66:21:be:e6:2d:c2:a1:b7:96:e2:e7:c4:43:f7:00:
53:08:cb:88:b5:c1:f2:50:c1:23:a6:9e:c4:96:8e:f8:59:73:
6d:5f:85:98:5b:11:eb:9b:60:52:b3:22:c6:5e:84:84:51:33:
e6:ec:df:6c:8b:6b:f5:e7:dd:2a:50:92:eb:5e:98:d0:b2:37:
16:74:75:bd:39:de:29:94:97:18:b6:93:3b:de:82:57:ae:5c:
fb:22:70:bb:dd:c7:22:1e:06:51:e0:85:e7:00:46:2f:aa:4b:
68:99:c7:fe:53:1f:06:dd:25:63:36:35:f6:97:00:ca:75:60:
c5:c1:9c:23:1e:f6:19:5a:38:3f:8f:e2:2b:42:3e:24:1c:3b:
4f:35:25:bd:de:9f:aa:de:5b:3b:98:35:84:7d:88:9f:ad:88:
7d:83:04:8b
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIURXSk3lTp01wtr1Q5snCo4C8Aif8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk
ZWI5M2Q5ZDAeFw0yNjA3MTUxNDIwNTlaFw0yNzA3MTQxNDI1NTlaMDMxMTAvBgNV
BAMTKDI1OTBDMTMwNkNBMERGRUU4NERCOTY4MTZDQkJFMTBBMTQ4MzA3QjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrVpUwxBvlqa9vwNE9ILm4IxjY
IbpHj2yCFeKjKBFjyW9hWR4qM7v5EN4nkVA3ysBODnyqu9Gd63oY64MxkNtf88h3
dPHcflwseN9DlE8+aaqEJ5ltVo/AjWqnHYaH/h0qkgHkfdgAL42MoypsY/gteaGJ
/lz1HBhs8EKf114Z0OU76BE6zV5+SkaGUT9D+LOcmB6VqB40PGo7mLhpmrd8a5Pb
vIHmpJPu9kawuowhz4uwcujMzp35QQy5XYlQxB4lJume4vH60f9d592ZMjDf4rBn
f1chBIPJhn56ImhnYe9Dndh0tw0NdmSFbxh8tdmm2dRSAcEeJh5ZogWapdu3AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUJZDBMGyg3+6E25aBbLvhChSDB7UwHwYDVR0j
BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2
MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2
NVBaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt
NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTNDAyNzU1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjxTg
MA0GCSqGSIb3DQEBCwUAA4IBAQBn8H0oIiK7/POgO0qSPxKUno39gIONtJGVXoIJ
4WRCI9qc0ful6w4ltaXvyf5SUrY8PqNEiqX3u16BK7mVePPDG+4VMTvkMEyPyBvt
AT+mjiGP79Ew+gTZcGafhh1mIb7mLcKht5bi58RD9wBTCMuItcHyUMEjpp7Elo74
WXNtX4WYWxHrm2BSsyLGXoSEUTPm7N9si2v1590qUJLrXpjQsjcWdHW9Od4plJcY
tpM73oJXrlz7InC73cciHgZR4IXnAEYvqktomcf+Ux8G3SVjNjX2lwDKdWDFwZwj
HvYZWjg/j+IrQj4kHDtPNSW93p+q3ls7mDWEfYifrYh9gwSL
-----END CERTIFICATE-----
Generated at Tue Jul 21 10:58:12 2026 by rpki-client