Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS7459.roa
File: AS7459.roa (raw, json)
Hash identifier: tpQ3AjxhtSg8XaUyAp0Agm/lOB2Hjg3SwvUNYYaZN7U=
Subject key identifier: ED:B2:D0:26:BF:4B:45:9E:B4:0A:7F:1A:5D:25:C0:32:E0:43:0F:24
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 0116E4EFB629514B5FF3C8FAA88318B9F900CFEC
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS7459.roa
Signing time: Wed 19 Aug 2026 17:20:09 +0000
ROA not before: Wed 19 Aug 2026 17:15:09 +0000
ROA not after: Wed 18 Aug 2027 17:20:09 +0000
asID: 7459
IP address blocks: 143.20.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:16:e4:ef:b6:29:51:4b:5f:f3:c8:fa:a8:83:18:b9:f9:00:cf:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Aug 19 17:15:09 2026 GMT
Not After : Aug 18 17:20:09 2027 GMT
Subject: CN=EDB2D026BF4B459EB40A7F1A5D25C032E0430F24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:85:03:37:d1:0f:0e:8f:31:cb:d6:0f:90:a9:
68:6c:c5:d2:9c:7f:50:b5:74:2b:89:c8:4f:d3:82:
0e:5d:b8:69:10:27:dd:e0:22:a4:5b:1a:ae:96:40:
be:79:6b:f4:4c:dc:4e:4c:70:73:08:e2:b1:01:20:
03:25:e0:f2:bb:82:e4:9e:40:a3:da:83:9d:57:8e:
15:ff:e0:62:d2:f6:00:bf:9c:4f:e6:6d:d2:d2:bf:
1f:13:e0:c1:cb:d8:a7:67:5b:82:d4:b9:1a:9d:33:
ed:72:e1:93:d1:61:94:63:99:cd:38:cc:58:a4:4b:
96:62:22:fd:cf:b2:03:93:09:3a:7a:96:23:d0:aa:
65:8b:6a:55:3f:44:90:c1:89:db:e8:78:aa:5f:c2:
30:17:72:b0:9f:27:7b:e5:85:c7:ba:66:53:57:18:
93:9a:4d:2f:69:45:3c:59:2c:63:45:dc:23:1b:70:
ce:b7:77:67:8b:5a:c0:37:55:77:c0:cf:82:56:ae:
31:6d:65:9f:87:7f:87:ca:91:ce:b2:5e:44:96:ed:
65:5a:d6:48:38:28:66:43:88:0f:ea:db:a9:af:68:
2a:dc:09:55:62:7e:d5:6e:e5:2c:16:83:2a:95:94:
51:a1:c3:5c:81:9a:8d:4b:68:23:c3:53:f5:98:93:
e7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B2:D0:26:BF:4B:45:9E:B4:0A:7F:1A:5D:25:C0:32:E0:43:0F:24
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS7459.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.227.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:ee:2f:72:67:ce:44:88:6b:b4:ca:3d:46:91:27:5c:fc:41:
64:7f:99:75:bf:e9:5d:f8:60:6d:fb:cd:cf:75:e5:d9:03:7c:
c5:09:ae:cf:a3:92:f8:70:17:57:c0:e4:89:65:c9:c2:61:2a:
dd:5a:16:3b:cb:95:51:99:9f:a0:ff:ed:07:d4:3c:e2:21:e2:
9e:fc:0d:ab:f5:75:a9:1c:ad:49:92:83:9b:ff:dc:f2:ea:0c:
16:94:82:ee:19:f7:c9:8b:a4:9a:04:7e:ef:b0:72:2a:9a:0a:
02:bd:39:91:b8:ee:a3:71:30:fa:fb:5a:5b:02:1b:76:4f:2f:
49:58:dc:61:0e:0f:3f:8e:84:0b:c2:6b:e7:d8:b8:5c:59:7d:
cf:99:1f:38:b7:2e:4d:a0:56:5f:b6:ad:7c:e2:a0:a7:d9:f1:
d9:a9:ec:34:4f:6c:7c:56:e2:a3:de:4d:bc:7c:d9:be:b5:ab:
20:98:96:b0:c8:05:74:af:df:ee:9a:da:ef:66:79:22:97:bf:
26:dd:ac:0e:26:df:e5:2a:58:f1:5d:f3:cb:94:bd:41:63:92:
97:10:70:83:dd:2e:2a:e2:3d:2a:88:2d:fc:c9:69:e8:0b:e5:
0f:48:39:0c:86:1c:03:41:6c:4f:d3:91:36:8c:2a:90:88:b7:
28:51:d7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 23:30:36 2026 by rpki-client