Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS402778.roa
File: AS402778.roa (raw, json)
Hash identifier: lKDyDKIFA6zSFmq1HTCTlciX/RafDiw4P0P2FVFFvnQ=
Subject key identifier: 48:85:FB:86:B5:A7:71:C5:04:19:0E:91:EF:B4:9A:35:84:99:C3:27
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 538ED75D915A978754C236C55F8E991F76C7E0CB
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS402778.roa
Signing time: Tue 11 Aug 2026 16:53:01 +0000
ROA not before: Tue 11 Aug 2026 16:48:01 +0000
ROA not after: Tue 10 Aug 2027 16:53:01 +0000
asID: 402778
IP address blocks: 143.20.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:8e:d7:5d:91:5a:97:87:54:c2:36:c5:5f:8e:99:1f:76:c7:e0:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Aug 11 16:48:01 2026 GMT
Not After : Aug 10 16:53:01 2027 GMT
Subject: CN=4885FB86B5A771C504190E91EFB49A358499C327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:74:fc:3b:07:67:ca:be:21:6c:83:06:51:f7:
16:6b:d7:e0:88:42:42:ce:f6:48:8a:95:6d:7f:d9:
26:62:0d:f1:e6:47:93:65:e5:dd:2e:c9:f1:fc:85:
50:5d:37:cf:32:1c:cd:b3:32:c2:74:30:19:ed:24:
93:d3:12:eb:b0:2a:1d:f2:4b:f7:12:1a:d7:b7:aa:
bf:97:f5:58:34:96:8e:1a:53:84:9d:a8:de:3b:1f:
6f:d0:3c:20:63:e6:4c:91:a6:5d:f4:45:3c:d5:df:
83:1d:d3:59:89:4a:48:bb:9e:82:4c:d1:19:b0:f3:
33:b7:ed:84:91:f3:76:61:e5:5f:33:c4:fc:b5:15:
18:d4:6e:a5:37:6f:b6:b1:ad:e3:88:3d:58:73:1b:
f8:8f:13:37:5d:71:59:fd:2e:03:e9:a7:30:67:3c:
5b:4e:3b:8f:8b:ae:a1:3b:86:52:d8:f2:33:5f:e7:
b6:98:de:72:26:0d:28:fe:83:4c:bc:93:53:66:e7:
f0:66:63:02:ae:bd:c0:93:fa:38:a6:ad:20:94:14:
3c:7a:f1:01:a6:28:5e:7a:cd:03:10:e7:8e:5e:cd:
37:de:54:b9:11:f1:45:5d:0f:52:0e:dd:6d:86:4d:
75:c7:48:fb:a5:74:cb:66:ec:d6:90:08:f4:81:cb:
96:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:85:FB:86:B5:A7:71:C5:04:19:0E:91:EF:B4:9A:35:84:99:C3:27
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS402778.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.248.0/24
Signature Algorithm: sha256WithRSAEncryption
87:2a:5a:54:21:d8:fd:71:57:50:e0:cf:af:5d:bf:e5:33:72:
2f:69:5a:53:bf:09:20:89:6c:d6:a9:72:aa:6e:79:27:51:0f:
57:ab:f0:80:29:a1:a6:1e:d5:1d:6f:5e:0d:76:28:ca:4e:8b:
f5:71:c5:d9:e4:21:58:01:cd:23:d9:17:ae:b4:dd:42:47:fd:
a4:ae:ae:ff:29:cd:83:77:43:48:7e:79:b6:fb:18:42:4a:c9:
16:78:a0:38:4c:d6:3d:8d:a0:87:34:aa:2c:79:d7:e4:61:18:
ef:af:ff:08:59:11:a1:01:32:ac:e3:33:87:67:70:f5:92:47:
28:e7:30:78:cc:05:68:cd:ad:c2:e9:36:10:a9:cf:f7:3f:b3:
31:24:dc:f7:8e:0c:4d:17:98:8e:a8:50:c9:31:d9:36:36:70:
54:9d:8e:dc:68:6a:bd:86:ae:2a:59:f0:20:3c:07:82:21:18:
d0:b6:14:08:34:0c:de:84:a9:21:ef:58:7e:5f:3d:8c:d6:52:
43:90:bd:1e:ca:e4:05:49:f7:c0:66:b3:7f:c9:09:96:b4:71:
95:38:63:0c:f1:df:7c:05:a9:78:ff:7d:a6:e1:ec:78:9e:fa:
6e:aa:f2:4c:33:31:77:b8:7f:23:c4:48:1c:e2:41:df:37:76:
6d:31:46:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:45:40 2026 by rpki-client