Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS44947.roa
File: AS44947.roa (raw, json)
Hash identifier: qL+CPRLAMvdVzOVhAr5zeTRw54oaF6zyYA7uJ97VOKo=
Subject key identifier: 8E:E1:1F:6E:1D:FA:E8:21:56:1D:E7:8D:91:65:03:B7:7D:40:D4:BB
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 78682CD1C53D060D40540E94F859AC6CD6A1BD6A
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS44947.roa
Signing time: Wed 01 Oct 2025 11:24:40 +0000
ROA not before: Wed 01 Oct 2025 11:19:40 +0000
ROA not after: Wed 30 Sep 2026 11:24:40 +0000
asID: 44947
IP address blocks: 143.20.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 19:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:68:2c:d1:c5:3d:06:0d:40:54:0e:94:f8:59:ac:6c:d6:a1:bd:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Oct 1 11:19:40 2025 GMT
Not After : Sep 30 11:24:40 2026 GMT
Subject: CN=8EE11F6E1DFAE821561DE78D916503B77D40D4BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d1:89:48:e4:49:b8:73:64:55:df:a1:93:dc:
9a:9b:9d:fb:02:27:61:41:9d:98:76:1f:fa:2f:ce:
c6:ed:b6:47:b8:14:31:72:f9:74:9e:98:32:f6:34:
7f:42:c7:f7:e6:6c:79:b9:ee:fb:b7:76:02:b2:fd:
56:e8:56:1f:df:89:af:67:de:d9:0c:99:59:83:d9:
59:01:98:2a:f1:66:33:a3:53:78:1d:cc:08:5f:76:
69:61:88:7e:9f:7b:bc:30:83:9d:35:9e:de:4d:c9:
73:a8:1a:87:10:3a:cb:c5:aa:f9:b6:b5:0a:75:e9:
81:c2:4e:c9:83:18:a2:e7:77:04:b5:a3:39:86:8a:
cb:36:5a:57:ea:42:76:5c:61:40:af:36:29:b6:4b:
9b:08:fd:b3:51:1c:cc:08:66:7a:6f:37:66:24:07:
82:de:26:10:95:ac:94:04:bb:3d:99:e8:15:4d:86:
93:a0:dd:58:c3:9a:56:a3:ae:a3:70:38:69:27:ce:
03:0e:5b:c6:b2:52:05:23:1b:0b:9e:9b:c8:e3:4e:
1f:45:70:92:14:f1:85:e8:c5:13:af:2a:00:75:01:
18:cd:72:66:b6:ad:f9:31:7f:16:14:b5:35:68:1b:
30:c0:58:5b:9a:df:d9:3f:25:63:c4:7a:4a:2e:ba:
13:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E1:1F:6E:1D:FA:E8:21:56:1D:E7:8D:91:65:03:B7:7D:40:D4:BB
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS44947.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.100.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:8b:c1:fb:aa:e0:13:59:b5:07:4f:69:f2:3a:a0:b0:81:d2:
68:f2:bd:42:6e:9e:2d:bd:53:4b:50:11:a2:2f:90:ee:82:b6:
68:04:bc:ad:63:a4:b6:26:1e:5f:0e:86:e0:e0:e2:2b:f5:62:
23:eb:ea:08:29:a3:ec:0e:a8:0a:22:45:7c:28:cd:79:1b:d2:
9b:f1:8c:18:28:a6:1a:69:b8:5b:e8:bc:b9:57:02:fb:bf:58:
e3:26:2d:65:91:80:bc:63:92:fd:4f:7d:0b:11:47:b3:c4:5c:
ca:3c:13:72:cc:10:87:f2:b8:36:28:65:8d:05:8a:46:2a:4e:
cd:ca:ba:db:3c:b0:4d:ca:0a:f7:b5:5d:e4:2a:5e:c7:cb:8d:
38:a3:6e:4d:48:d3:a5:bd:05:1e:48:b4:aa:44:ac:d6:6b:5a:
88:ce:32:df:eb:1f:74:72:c0:cb:98:fa:5e:c9:24:5a:81:c6:
66:28:0c:8c:cb:88:a4:7a:0e:9f:1c:d4:45:cd:8c:11:2e:28:
de:86:4c:67:f6:72:4b:da:93:cb:c9:aa:42:2d:fd:f4:ee:b8:
5e:35:ea:a9:90:5c:70:74:fe:17:80:94:df:4d:ca:d8:67:66:
02:24:17:61:82:2a:ac:9d:9e:db:84:44:ad:b1:4c:97:fe:4f:
80:40:5d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 03:04:41 2025 by rpki-client