Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS402782.roa
File: AS402782.roa (raw, json)
Hash identifier: B5vZC1q73V3zbcB79y/u8j1XuKKq8+dZa1U4/JZvWG8=
Subject key identifier: 8D:BC:1B:ED:1D:8A:89:88:BC:B8:A9:D0:BF:C7:57:C6:23:09:B8:46
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 24032C5F25F93685309D69191E661C9191FB31DF
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS402782.roa
Signing time: Thu 27 Aug 2026 05:40:49 +0000
ROA not before: Thu 27 Aug 2026 05:35:49 +0000
ROA not after: Thu 26 Aug 2027 05:40:49 +0000
asID: 402782
IP address blocks: 143.20.8.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 06:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:03:2c:5f:25:f9:36:85:30:9d:69:19:1e:66:1c:91:91:fb:31:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Aug 27 05:35:49 2026 GMT
Not After : Aug 26 05:40:49 2027 GMT
Subject: CN=8DBC1BED1D8A8988BCB8A9D0BFC757C62309B846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4e:34:c0:89:03:ff:e1:d2:0e:8a:9c:df:89:
df:31:8f:c0:52:40:67:1f:e8:02:08:33:b0:16:dc:
9e:cf:0c:ae:e0:ae:45:9a:9f:5b:cc:cc:81:42:49:
19:08:b9:f6:fe:71:f0:56:1a:8a:79:9e:e8:40:3b:
38:53:92:b2:42:2b:9b:ed:a3:d6:dd:b3:e5:93:48:
e2:8e:06:3d:2a:3d:b9:30:3d:61:8d:09:40:24:9d:
3b:22:cc:e1:04:13:91:83:e7:0e:25:c0:2c:34:9d:
0b:46:48:98:a9:27:2d:04:ec:e7:4e:b2:f8:04:bb:
f4:ef:25:9f:22:1a:5c:e4:29:6d:84:6c:e1:7d:9e:
8e:e4:de:7b:a5:98:b0:65:7b:e2:28:1a:9f:6d:db:
cd:56:cc:eb:4a:de:cb:3f:8b:97:bc:4e:2a:6b:b2:
b6:05:63:96:f9:67:08:4e:e0:f5:de:16:43:77:0e:
7a:81:b8:84:ef:89:2f:26:98:c5:47:ef:06:c9:fd:
36:62:6e:b3:49:c5:5e:93:16:4b:43:64:ed:03:d5:
29:1a:f7:14:24:43:9d:3d:9d:82:b4:aa:12:08:18:
d7:ae:8e:94:50:8b:c6:9b:3d:a6:6e:5f:31:f4:27:
ff:a2:18:99:1f:56:14:dc:69:50:c0:25:bf:fe:11:
5f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:BC:1B:ED:1D:8A:89:88:BC:B8:A9:D0:BF:C7:57:C6:23:09:B8:46
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS402782.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.8.0/23
Signature Algorithm: sha256WithRSAEncryption
48:76:ac:29:45:b9:d5:0c:f5:46:6b:7e:01:1a:87:96:4c:27:
45:5f:1b:df:43:ae:1f:ec:bb:21:53:aa:46:bb:c8:9f:91:95:
46:34:27:7f:95:12:85:6e:35:55:dd:0b:64:cd:a9:4e:2c:f5:
8e:7b:82:6b:b2:f0:9f:a5:51:07:75:1b:37:62:41:55:3a:33:
a9:e2:11:8d:e8:8d:3a:a1:c5:81:b8:46:cd:54:d9:23:e3:18:
07:ee:0b:85:5a:cc:ff:f7:9a:5b:3f:e5:20:db:f7:76:97:c5:
13:67:92:bd:cd:47:9b:9e:cd:ee:e1:21:64:a3:5e:7d:09:ea:
c6:f7:c3:72:c6:1b:38:ae:f6:fb:87:df:0f:7f:eb:93:8c:f4:
ad:cf:6d:ab:79:23:6a:28:2a:0a:cc:3f:9a:1f:11:04:49:b9:
0d:ca:38:00:d9:cf:31:94:f5:d7:39:f1:88:78:84:2b:31:03:
f4:a6:05:29:14:81:6b:b9:50:d0:83:30:fc:05:47:1e:6b:97:
38:ef:30:5c:e2:f0:bd:5e:06:30:35:51:0f:d6:f5:32:4f:97:
c0:49:8a:a0:24:6d:c6:2c:16:87:35:ee:52:62:05:12:89:b6:
bb:cb:74:b9:be:9a:82:74:6b:26:8a:04:bc:22:3d:dc:b9:ef:
ed:c5:e6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 10:43:35 2026 by rpki-client