Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS141676.roa
File: AS141676.roa (raw, json)
Hash identifier: 7v2Gb5kXcexaexrQwLFUwiJn58VKJaayl2hC+3BZLj4=
Subject key identifier: 61:12:FA:57:91:55:74:FD:44:2C:95:01:EA:15:6B:97:D6:52:EB:5F
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 729324E0E20359B69E9574831D812325D8DC6061
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS141676.roa
Signing time: Mon 17 Aug 2026 07:49:30 +0000
ROA not before: Mon 17 Aug 2026 07:44:30 +0000
ROA not after: Mon 16 Aug 2027 07:49:30 +0000
asID: 141676
IP address blocks: 143.20.186.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:37:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:93:24:e0:e2:03:59:b6:9e:95:74:83:1d:81:23:25:d8:dc:60:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Aug 17 07:44:30 2026 GMT
Not After : Aug 16 07:49:30 2027 GMT
Subject: CN=6112FA57915574FD442C9501EA156B97D652EB5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1e:d3:d4:9b:9c:4a:52:78:a3:5e:fc:9f:80:
d8:76:a2:8f:b0:13:64:28:91:d1:0f:f8:ed:75:5c:
f8:ce:0a:6f:d9:50:07:ed:0f:06:34:e2:66:9f:82:
c0:7b:7d:29:28:6b:84:fd:b2:fc:c3:e4:fc:9c:9d:
e4:27:be:83:8d:5e:6b:2e:08:47:ee:93:2a:5a:a7:
e8:ec:4e:9a:36:7c:62:5f:e8:ea:f4:c7:1a:a7:81:
33:9a:a0:57:7c:9b:1a:9d:16:c9:38:85:3b:f7:54:
b9:e1:50:3f:be:80:07:c3:a6:f7:08:76:20:6f:99:
37:05:13:24:1d:b8:ff:d7:31:ad:a8:ee:b6:07:8f:
7c:70:ed:b7:b0:a4:5e:4d:fc:38:11:74:3c:f8:c7:
5c:16:a3:bc:9b:e6:aa:90:05:89:cc:63:f2:24:7d:
9c:51:72:df:6e:d5:1e:14:b8:3f:da:08:38:9f:23:
36:43:33:40:3e:e2:22:18:1d:94:5b:50:38:10:5f:
6a:63:3c:9f:dd:de:34:65:91:b2:93:9f:fd:27:5f:
e8:13:03:1e:b6:53:7c:d3:2f:d8:75:75:d8:5a:ff:
ce:f2:1e:ea:4f:c0:ac:56:7b:a6:4f:63:ea:bc:fc:
58:6e:67:b8:c2:8e:8c:83:27:f7:9d:b2:8b:ff:07:
83:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:12:FA:57:91:55:74:FD:44:2C:95:01:EA:15:6B:97:D6:52:EB:5F
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS141676.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.186.0/23
Signature Algorithm: sha256WithRSAEncryption
78:cc:fd:3d:13:62:b9:ee:53:df:84:33:a2:7c:3f:b2:c3:e7:
f9:e6:87:7b:a7:1c:26:21:e1:8f:8b:af:7c:16:92:ad:7f:1f:
d4:1f:48:56:ff:09:ba:50:1e:78:f2:20:52:43:50:97:56:90:
72:4b:22:38:de:cc:dc:b4:49:6c:c2:8c:3a:54:e4:60:bb:1c:
10:e3:50:76:c3:dd:e4:ad:84:e4:10:e2:c6:64:80:9f:83:0b:
29:7e:95:68:0c:79:84:17:a1:70:a5:69:85:dd:4e:0b:07:4e:
8e:76:70:e9:37:74:a9:da:fb:52:93:87:b9:e3:55:7b:f4:10:
bd:29:cb:0e:6d:e7:b7:0a:78:56:3b:18:5d:42:6b:e6:62:63:
cb:a4:07:79:8b:61:64:27:e4:30:be:c1:77:ce:60:86:c5:ac:
4a:80:27:e3:5a:bc:72:7f:dd:65:31:02:da:51:8c:68:f2:4c:
35:b8:fe:ec:47:1f:f3:3b:59:f1:e6:c6:d9:ea:14:7a:14:ba:
b4:16:46:00:44:b0:5d:2d:1e:94:d8:fe:95:65:d4:13:09:f3:
57:23:a5:33:c7:f4:f0:dd:45:aa:c8:a5:f0:3a:8f:1d:99:bf:
c0:d7:66:69:09:57:9b:18:4f:ca:6d:a7:27:4d:8c:6c:ac:cf:
8b:8d:f0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:37:50 2026 by rpki-client