Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS137897.roa
File: AS137897.roa (raw, json)
Hash identifier: Rkn7MKTOVpet335HxdI1MA3Jcjp09LwsBeZ8AlFhGjg=
Subject key identifier: 55:4E:84:87:D8:25:FA:D3:F5:57:21:D4:C4:A1:58:F1:B5:17:2F:2E
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 5378BE0189FD35C50A5CC3CB930CE1DB7C0EBC04
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS137897.roa
Signing time: Fri 11 Sep 2026 16:50:34 +0000
ROA not before: Fri 11 Sep 2026 16:45:34 +0000
ROA not after: Fri 10 Sep 2027 16:50:34 +0000
asID: 137897
IP address blocks: 143.20.70.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 19:08:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:78:be:01:89:fd:35:c5:0a:5c:c3:cb:93:0c:e1:db:7c:0e:bc:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 11 16:45:34 2026 GMT
Not After : Sep 10 16:50:34 2027 GMT
Subject: CN=554E8487D825FAD3F55721D4C4A158F1B5172F2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b8:c2:e4:ed:0f:22:81:75:04:d1:71:ed:4f:
8b:6d:c1:a0:e2:b4:da:9d:3c:aa:9b:33:4f:70:30:
57:3e:d6:94:03:fd:3d:2f:21:cc:4c:5b:06:81:01:
9e:4d:fa:54:05:f0:30:27:1f:b9:c9:3d:3f:9b:7b:
f4:f3:c9:39:79:30:3a:84:c8:e4:a2:a0:62:04:f1:
b6:5a:f3:18:7a:b9:48:fb:c7:0e:f9:9e:cf:4a:db:
75:22:68:e2:21:1a:0b:9e:65:01:fc:4d:2a:81:2b:
5f:b5:a7:e4:cf:6f:40:e4:01:37:61:80:08:43:f5:
7a:36:b4:f8:b9:0e:98:53:d2:59:9a:ac:35:b7:7a:
ec:c9:f7:13:a0:e3:e1:94:f2:08:74:67:b2:8e:8a:
96:46:ea:e7:8b:13:dd:ce:ab:ba:6f:b6:99:6b:e4:
14:df:e7:9c:15:19:1d:e7:30:12:68:13:45:ab:3f:
f8:bf:b5:0a:12:f1:e9:0f:39:21:66:ad:9a:6f:08:
7e:9e:ec:91:f2:59:06:01:f2:0d:ca:63:bf:26:f8:
a9:76:76:d6:31:22:e3:83:b5:b9:c3:5f:df:c1:27:
66:4d:76:82:b0:67:08:53:79:58:57:00:ee:0f:2c:
89:c8:fe:2e:c3:4c:79:ea:7f:a0:ea:40:c7:c8:84:
58:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:4E:84:87:D8:25:FA:D3:F5:57:21:D4:C4:A1:58:F1:B5:17:2F:2E
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS137897.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.70.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:31:a1:de:78:af:cd:df:3c:cc:45:ac:fd:e5:e8:cc:8a:11:
53:54:34:94:4d:d7:7e:fe:4e:9f:45:af:fb:50:70:f9:72:e8:
84:24:70:3f:ad:ea:99:b6:12:68:a2:c9:46:7a:d3:50:a5:24:
5d:15:96:8e:90:7d:83:e4:a6:cd:80:7b:2f:16:6f:b9:66:f3:
44:e9:6d:33:a4:50:81:b4:31:2c:bd:5a:1f:b1:2a:6a:63:54:
8e:c0:b6:3b:db:e6:d5:5c:1c:09:63:f3:e8:98:e2:f3:3e:5b:
fd:74:d9:39:60:01:8d:e6:4f:b0:33:81:93:16:13:ff:45:64:
36:eb:53:bd:3d:ac:98:c1:61:bf:17:63:92:78:e6:b9:b6:22:
47:f8:ee:55:2e:13:c6:bd:06:14:3f:bc:14:e9:fd:e7:41:0b:
82:a7:43:e0:1a:1d:85:9b:4a:5a:c8:46:b5:b3:eb:e1:de:80:
83:bc:93:0c:ed:08:94:57:d0:a8:77:eb:d9:7d:32:b2:11:a6:
c6:ac:01:1f:16:76:e3:4f:b5:54:07:70:ab:ca:88:72:b2:a0:
2b:50:d9:7b:6a:95:36:02:93:84:b5:c1:a0:09:c6:c8:bb:53:
5c:32:f0:e0:52:2c:27:32:83:c3:cc:df:37:dd:6d:c8:d0:7b:
1d:c7:57:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:58:34 2026 by rpki-client