Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS20115.roa
File: AS20115.roa (raw, json)
Hash identifier: HNkvKAOw2zE/6ccnaNUxQNFzklFzqpEzXpbf9fcsbks=
Subject key identifier: 2C:8A:E0:22:96:DC:BF:C6:BA:E2:F0:42:10:3D:99:12:70:D7:DC:58
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 58AA553E84F677C5079F753AED9096795D504726
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS20115.roa
Signing time: Tue 08 Sep 2026 00:07:34 +0000
ROA not before: Tue 08 Sep 2026 00:02:34 +0000
ROA not after: Tue 07 Sep 2027 00:07:34 +0000
asID: 20115
IP address blocks: 143.14.232.0/21 maxlen: 24
162.141.2.0/23 maxlen: 24
162.141.6.0/23 maxlen: 24
162.141.22.0/23 maxlen: 24
162.141.24.0/22 maxlen: 24
162.141.28.0/22 maxlen: 24
162.141.32.0/22 maxlen: 24
162.141.40.0/22 maxlen: 24
162.141.56.0/22 maxlen: 24
162.141.60.0/22 maxlen: 24
162.141.72.0/22 maxlen: 24
162.141.76.0/23 maxlen: 24
162.141.134.0/23 maxlen: 24
162.141.144.0/21 maxlen: 24
162.141.156.0/23 maxlen: 24
162.141.168.0/21 maxlen: 24
162.141.192.0/21 maxlen: 24
162.141.200.0/21 maxlen: 24
162.141.216.0/21 maxlen: 24
162.141.224.0/21 maxlen: 24
162.141.232.0/21 maxlen: 24
162.141.240.0/21 maxlen: 24
162.141.248.0/21 maxlen: 24
167.148.16.0/21 maxlen: 24
167.148.44.0/23 maxlen: 24
167.148.48.0/21 maxlen: 24
167.148.56.0/22 maxlen: 24
167.148.60.0/22 maxlen: 24
167.148.64.0/22 maxlen: 24
167.148.76.0/22 maxlen: 24
167.148.108.0/22 maxlen: 24
167.148.145.0/24 maxlen: 24
167.148.224.0/21 maxlen: 24
167.148.232.0/21 maxlen: 24
167.148.240.0/21 maxlen: 24
167.148.248.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:aa:55:3e:84:f6:77:c5:07:9f:75:3a:ed:90:96:79:5d:50:47:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 8 00:02:34 2026 GMT
Not After : Sep 7 00:07:34 2027 GMT
Subject: CN=2C8AE02296DCBFC6BAE2F042103D991270D7DC58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:14:a9:d7:cc:ce:22:5b:7a:e5:6c:06:83:42:
8e:81:af:b8:6d:2c:6c:43:fe:df:35:5b:da:f7:e1:
a5:df:8e:5a:5c:a8:dc:fe:32:9f:ed:d6:51:34:c8:
2a:9e:58:d7:bb:25:78:a6:1e:e2:cb:b3:7d:3b:f6:
90:18:a4:ac:8a:69:0c:80:60:43:12:89:4c:ad:4e:
4c:60:81:3e:7b:14:12:a2:f0:47:59:48:74:f4:fc:
9a:1c:cb:2a:61:e8:cc:6f:6c:65:21:8e:3c:8b:f2:
5f:c9:f3:b7:95:1a:c8:99:80:06:ba:f5:cc:7b:8d:
00:50:fd:c3:9a:df:1d:79:49:22:48:f2:6a:1b:93:
ad:ed:74:aa:29:0f:d8:8a:6c:b0:99:8b:17:10:ca:
76:13:ac:c9:f9:9b:11:51:d4:ca:d1:19:c3:8a:b4:
c2:9e:d4:c2:57:9e:3b:c8:36:8c:4a:99:2b:ab:b6:
42:d3:81:e1:4a:65:c5:b7:13:f9:5e:0d:e5:e6:4d:
27:6d:c1:74:65:c6:85:f1:93:61:9a:9a:12:52:45:
13:4d:cc:be:98:ae:8b:bd:04:42:0d:1a:78:c0:11:
16:7f:d8:89:bb:6d:a0:f6:ec:47:34:84:ab:dd:fa:
af:e6:30:81:d4:40:e7:43:a9:08:85:7d:a7:4c:fd:
86:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:8A:E0:22:96:DC:BF:C6:BA:E2:F0:42:10:3D:99:12:70:D7:DC:58
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS20115.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.232.0/21
162.141.2.0/23
162.141.6.0/23
162.141.22.0-162.141.35.255
162.141.40.0/22
162.141.56.0/21
162.141.72.0-162.141.77.255
162.141.134.0/23
162.141.144.0/21
162.141.156.0/23
162.141.168.0/21
162.141.192.0/20
162.141.216.0-162.141.255.255
167.148.16.0/21
167.148.44.0/23
167.148.48.0-167.148.67.255
167.148.76.0/22
167.148.108.0/22
167.148.145.0/24
167.148.224.0/19
Signature Algorithm: sha256WithRSAEncryption
a1:90:07:f0:c8:6f:e8:eb:f0:d0:20:b4:3b:25:bf:83:ad:7f:
fb:aa:e0:e7:60:72:a3:a7:4b:43:d8:6e:b4:61:b5:bd:70:ef:
d1:5e:ac:26:69:9a:b3:67:68:6a:19:dc:5f:58:c6:8f:cc:ca:
76:c5:00:f4:96:c1:2b:bb:86:a9:65:28:88:41:de:ef:ee:e0:
30:14:a6:b7:e1:b4:49:9e:0d:89:82:24:b9:66:6a:a4:8b:07:
f6:a8:a6:b8:ee:17:0c:73:14:15:c0:b5:ee:38:55:c6:a1:3b:
5a:be:5c:c6:61:fb:cc:93:52:ef:ae:e2:59:e5:c9:77:c0:7b:
04:4a:33:f6:56:97:19:81:89:1a:4e:71:52:53:b6:8f:c8:8d:
a4:26:80:04:d9:9f:4b:c6:18:7b:ac:42:15:63:82:28:ad:ad:
97:6e:d6:56:2d:25:9d:25:83:75:54:de:fa:aa:98:6a:93:bc:
24:98:0b:83:90:f5:9d:01:5f:66:53:92:82:c5:81:66:fe:8e:
18:37:5c:a3:aa:27:70:44:45:f2:88:05:34:9e:32:c4:4d:b1:
11:6f:bf:21:9b:35:ed:98:c4:ce:e1:a5:24:68:ff:b5:ee:af:
72:21:92:69:c2:1c:4b:05:8d:a7:b7:fb:2b:57:72:df:c7:e9:
dd:4d:01:e2
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIUWKpVPoT2d8UHn3U67ZCWeV1QRyYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA5MDgwMDAyMzRaFw0yNzA5MDcwMDA3MzRaMDMxMTAvBgNV
BAMTKDJDOEFFMDIyOTZEQ0JGQzZCQUUyRjA0MjEwM0Q5OTEyNzBEN0RDNTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/FKnXzM4iW3rlbAaDQo6Br7ht
LGxD/t81W9r34aXfjlpcqNz+Mp/t1lE0yCqeWNe7JXimHuLLs3079pAYpKyKaQyA
YEMSiUytTkxggT57FBKi8EdZSHT0/Jocyyph6MxvbGUhjjyL8l/J87eVGsiZgAa6
9cx7jQBQ/cOa3x15SSJI8mobk63tdKopD9iKbLCZixcQynYTrMn5mxFR1MrRGcOK
tMKe1MJXnjvINoxKmSurtkLTgeFKZcW3E/leDeXmTSdtwXRlxoXxk2GamhJSRRNN
zL6Yrou9BEINGnjAERZ/2Im7baD27Ec0hKvd+q/mMIHUQOdDqQiFfadM/Yb/AgMB
AAGjggKfMIICmzAdBgNVHQ4EFgQULIrgIpbcv8a64vBCED2ZEnDX3FgwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjAxMTUucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwgbQGCCsGAQUFBwEHAQH/BIGkMIGhMIGeBAIAATCBlwME
A48O6AMEAaKNAgMEAaKNBjAMAwQBoo0WAwQCoo0gAwQCoo0oAwQDoo04MAwDBAOi
jUgDBAGijUwDBAGijYYDBAOijZADBAGijZwDBAOijagDBASijcAwCwMEA6KN2AMD
AaKMAwQDp5QQAwQBp5QsMAwDBASnlDADBAKnlEADBAKnlEwDBAKnlGwDBACnlJED
BAWnlOAwDQYJKoZIhvcNAQELBQADggEBAKGQB/DIb+jr8NAgtDslv4Otf/uq4Odg
cqOnS0PYbrRhtb1w79FerCZpmrNnaGoZ3F9Yxo/MynbFAPSWwSu7hqllKIhB3u/u
4DAUprfhtEmeDYmCJLlmaqSLB/aoprjuFwxzFBXAte44VcahO1q+XMZh+8yTUu+u
4lnlyXfAewRKM/ZWlxmBiRpOcVJTto/IjaQmgATZn0vGGHusQhVjgiitrZdu1lYt
JZ0lg3VU3vqqmGqTvCSYC4OQ9Z0BX2ZTkoLFgWb+jhg3XKOqJ3BERfKIBTSeMsRN
sRFvvyGbNe2YxM7hpSRo/7Xur3IhkmnCHEsFjae3+ytXct/H6d1NAeI=
-----END CERTIFICATE-----
Generated at Sun Sep 20 23:44:08 2026 by rpki-client