Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS152868.roa
File: AS152868.roa (raw, json)
Hash identifier: Y83cPtbbY+UcGI2zBfMmEIiP3kwIbnPueumDNRmrFfY=
Subject key identifier: 9E:57:2F:E7:C4:D2:C7:03:9D:8F:D5:13:B4:7F:8F:AA:F1:BE:54:64
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 5AFC27BF6AE5AFE02D24F1C6A6B8F17E4CABB7FA
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS152868.roa
Signing time: Fri 04 Sep 2026 04:48:22 +0000
ROA not before: Fri 04 Sep 2026 04:43:22 +0000
ROA not after: Fri 03 Sep 2027 04:48:22 +0000
asID: 152868
IP address blocks: 143.20.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:fc:27:bf:6a:e5:af:e0:2d:24:f1:c6:a6:b8:f1:7e:4c:ab:b7:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 4 04:43:22 2026 GMT
Not After : Sep 3 04:48:22 2027 GMT
Subject: CN=9E572FE7C4D2C7039D8FD513B47F8FAAF1BE5464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3f:a0:ef:0b:ff:d5:be:6a:c3:34:9c:3e:f9:
03:bf:bc:45:ed:9b:63:27:f2:8c:c3:5e:3a:af:8a:
a1:38:26:24:4f:5a:bd:ad:dd:13:49:ff:cb:cb:af:
a6:3e:94:82:c1:18:c9:6f:d5:a2:92:35:78:76:6a:
88:4c:ea:6f:56:ad:36:1c:79:f7:a9:68:d1:ef:c1:
39:26:9e:9e:05:d6:15:5d:4e:b2:71:f4:6d:2c:6c:
61:3f:e0:5b:30:9a:4b:cb:c3:f3:c8:69:4f:78:1f:
74:58:13:9e:c2:00:04:ea:93:e6:76:c0:09:1e:da:
d4:2a:16:b3:6b:55:19:7e:ff:fd:05:01:a5:bd:b6:
90:f1:fc:e6:17:4b:06:3b:da:0f:60:ba:3b:a0:80:
ea:34:b4:ef:99:89:32:0f:51:ec:8b:d6:12:f9:57:
f8:7b:9d:5e:84:da:c0:32:30:c0:2d:68:bc:ac:bb:
b0:21:e1:17:4e:ea:cf:d7:1e:f1:d9:35:4a:16:bb:
71:90:47:4e:b2:53:ab:6a:a7:0b:3a:2a:60:9c:00:
7d:83:99:89:50:69:74:c6:53:68:76:4d:9a:f4:9f:
5e:aa:0e:6c:1a:26:a0:e1:15:e6:5b:ab:da:0a:94:
aa:f1:fe:69:f3:06:54:b1:39:ec:33:ee:43:1b:f8:
6b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:57:2F:E7:C4:D2:C7:03:9D:8F:D5:13:B4:7F:8F:AA:F1:BE:54:64
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS152868.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.41.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:04:43:85:85:b5:df:17:bf:f9:8e:84:b8:d8:d1:8b:44:45:
25:3e:4f:2d:59:f6:8a:c2:3c:29:e9:45:7f:d1:e1:dc:3a:01:
00:47:40:b7:b8:1c:e9:1e:e6:29:d4:72:0a:af:88:08:e2:2f:
23:34:e8:9b:b4:8d:84:bd:e2:b7:e5:fb:7a:98:1a:5f:06:89:
50:e2:a3:76:86:14:49:60:8d:e0:d6:ea:19:19:67:62:2c:84:
de:84:83:c7:63:22:bd:aa:7e:ae:67:ce:7a:0e:2d:fa:df:fe:
95:60:2b:d1:87:0a:9d:85:98:04:7e:ad:51:88:5b:18:e2:f8:
60:b1:f3:16:cb:97:e2:3b:c4:f1:01:86:30:8f:06:06:b2:02:
1b:49:80:1e:dc:2e:32:2e:28:7e:6f:28:2d:a7:2b:3b:28:9b:
29:e7:02:c9:ee:c1:78:35:d8:f9:09:2c:4b:ea:1e:c4:2d:e8:
03:42:8c:86:83:a2:14:69:ac:36:53:3f:31:d3:22:bc:54:41:
85:a2:cd:79:9e:6e:f4:42:de:2f:7a:72:d4:d3:18:7c:21:86:
98:23:92:55:6f:1d:cc:ad:14:eb:61:a7:e4:b1:78:df:d5:53:
31:a6:02:65:50:50:17:f1:b7:c0:32:4e:45:45:64:aa:56:43:
2f:70:61:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 00:02:59 2026 by rpki-client