Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS45090.roa
File: AS45090.roa (raw, json)
Hash identifier: 2IS6DC+aBNg1D2PhMmAEhZLm3C7pJj14kExx1eudWwk=
Subject key identifier: AE:7F:55:05:F0:9C:E3:3E:9B:5E:80:20:0A:FC:BC:50:C0:D2:DF:E5
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 54EE378EEC38057A79294E1A98B3B4989C525933
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS45090.roa
Signing time: Wed 26 Aug 2026 11:10:37 +0000
ROA not before: Wed 26 Aug 2026 11:05:37 +0000
ROA not after: Wed 25 Aug 2027 11:10:37 +0000
asID: 45090
IP address blocks: 143.20.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:ee:37:8e:ec:38:05:7a:79:29:4e:1a:98:b3:b4:98:9c:52:59:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Aug 26 11:05:37 2026 GMT
Not After : Aug 25 11:10:37 2027 GMT
Subject: CN=AE7F5505F09CE33E9B5E80200AFCBC50C0D2DFE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ce:96:59:23:e9:e8:ff:8e:f5:b4:8d:d3:12:
ff:77:6a:27:81:aa:c3:89:99:2b:cd:7e:3c:8e:e1:
b3:86:41:20:61:7e:61:dc:b2:4d:96:85:0b:40:c1:
9e:b6:17:9c:0c:20:4a:03:45:5c:88:84:cd:1e:7d:
0c:58:5c:6a:4a:8d:36:27:e3:e9:0f:ee:90:df:42:
c7:53:28:69:42:c3:55:eb:8e:d0:c9:7f:00:66:b1:
e7:81:2c:41:e6:f7:50:0d:79:b1:b5:47:87:49:9b:
37:49:e8:a9:33:78:84:9e:1c:f9:18:e8:9a:3a:85:
a0:6e:21:64:d2:14:72:54:29:c2:95:b5:7c:36:90:
9b:c2:7f:9c:4b:89:ef:ce:e8:2c:a4:96:e2:5b:48:
b5:24:59:2e:a7:5e:4b:fe:a1:94:04:bd:e9:1a:71:
0d:65:15:3f:ff:9d:a7:77:73:f2:52:ce:c8:17:bf:
55:2a:a3:bb:91:ee:11:b2:12:f6:b1:6b:40:57:2f:
13:6b:e5:3c:8c:05:98:b3:c0:14:1f:4b:2c:e3:f3:
d4:ef:30:f5:23:8a:51:6d:1c:ec:ae:fc:d2:ce:9d:
3b:ca:2a:dc:af:8d:4f:ae:f6:41:8e:bc:10:34:8d:
eb:06:5b:11:1b:e7:19:27:0d:45:41:b9:57:a9:bf:
3d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:7F:55:05:F0:9C:E3:3E:9B:5E:80:20:0A:FC:BC:50:C0:D2:DF:E5
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS45090.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.38.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:bf:c5:60:03:50:d9:77:26:93:47:5e:db:0c:be:e5:bb:a7:
a2:dd:08:d1:ac:70:4d:48:52:3e:b8:33:16:aa:2b:39:da:21:
fc:07:19:1a:2d:d3:d5:3d:9d:dc:e2:74:fd:7c:ca:0c:51:cb:
18:d8:39:3a:f4:ef:23:06:8c:d0:83:73:1b:55:a1:92:28:52:
7d:b8:ba:14:04:16:b9:dd:b9:95:51:62:e6:cb:97:3e:64:3c:
55:70:eb:54:41:16:a4:03:18:88:63:6b:6c:58:39:a4:ac:eb:
80:62:db:57:a8:90:3e:52:ef:13:c2:17:19:7e:bc:07:20:6a:
c4:40:8c:bc:c2:4c:da:86:78:f9:2d:fd:92:d2:75:e2:df:d7:
4c:77:6b:16:5f:d3:21:31:f5:94:46:f0:b5:f9:f1:d8:6c:e3:
15:b8:fe:a3:f1:d0:79:b4:28:0d:d3:d4:c9:6f:f2:ab:f2:06:
80:a7:62:10:26:cd:5b:da:e4:20:5a:bb:27:01:03:6e:69:85:
3b:1a:8a:b8:5d:6a:e3:5b:9e:52:29:c3:b3:ea:64:ce:cb:6d:
b5:9a:50:1a:fa:3b:2a:03:7c:f3:aa:21:61:7d:51:52:06:cf:
18:1d:20:28:65:29:45:a0:1e:57:a4:ff:6b:e7:a5:0d:6e:f1:
7c:a3:13:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:26:14 2026 by rpki-client