Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS198087.roa
File: AS198087.roa (raw, json)
Hash identifier: QGG3c69eKI9d1pxpn+o4ktxx31H3Nne63Q60Hged1DQ=
Subject key identifier: 8F:8B:C7:F8:60:51:9C:F9:43:4F:63:C6:DF:B1:98:9F:E2:15:A4:9E
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 3DEF35558FE1A8521D2709465E0F2E57BE373F3C
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS198087.roa
Signing time: Thu 09 Apr 2026 09:17:28 +0000
ROA not before: Thu 09 Apr 2026 09:12:28 +0000
ROA not after: Thu 08 Apr 2027 09:17:28 +0000
asID: 198087
IP address blocks: 143.20.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:ef:35:55:8f:e1:a8:52:1d:27:09:46:5e:0f:2e:57:be:37:3f:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Apr 9 09:12:28 2026 GMT
Not After : Apr 8 09:17:28 2027 GMT
Subject: CN=8F8BC7F860519CF9434F63C6DFB1989FE215A49E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fd:c4:c7:6c:b3:cd:85:f2:2b:7e:63:eb:c0:
da:84:b5:e2:a2:78:ae:b0:ee:af:7d:87:29:26:74:
c9:13:4c:53:b0:2f:7b:f1:4b:05:54:d0:f4:3a:3d:
6a:98:de:c6:53:39:6e:af:cf:2f:d4:f5:99:0c:de:
2b:dc:3c:bd:a0:c8:f6:d2:c6:43:9d:7b:55:8b:51:
9b:c0:21:49:05:c8:b9:64:c8:bd:c4:2d:93:14:07:
d3:2d:4c:13:dc:2e:01:89:b1:f4:d0:75:fc:bd:67:
ae:e3:43:03:52:84:3b:b0:9a:93:97:50:4e:45:c5:
22:d1:4a:6d:7e:82:00:d0:94:04:24:2f:15:27:23:
18:b1:1c:33:8a:9a:25:c0:a3:49:33:a3:4a:f0:e1:
f5:54:92:44:94:03:60:98:ec:a1:d9:b1:a5:bc:7d:
3b:18:65:2d:0b:aa:0e:de:45:7a:68:4f:61:a8:0d:
31:aa:3d:7e:0c:95:f1:7f:e9:40:a2:a9:18:79:0b:
6f:27:a3:3b:b2:19:0b:89:9d:77:95:a4:46:03:c8:
48:7a:9c:c1:24:1d:6a:41:ef:14:b6:1d:7d:c0:93:
6b:77:25:01:fd:1a:04:1c:9f:5b:35:75:bd:e0:07:
2d:82:73:ab:6f:bc:df:7c:0a:2b:0c:16:8c:06:af:
68:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:8B:C7:F8:60:51:9C:F9:43:4F:63:C6:DF:B1:98:9F:E2:15:A4:9E
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS198087.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.8.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:64:12:3c:7f:8f:59:39:c9:62:4f:66:d4:df:e9:ff:15:95:
d4:8e:ca:dc:36:c9:7c:13:4a:c0:1b:e1:a2:73:a5:43:be:90:
b3:a3:91:a9:90:8a:e8:4d:ee:0c:a8:7a:55:74:44:a5:fa:f6:
d2:6c:59:04:da:2c:26:00:8b:87:56:58:14:65:1a:3e:b8:93:
2a:7e:0f:25:b1:66:43:f5:c7:f5:20:73:57:5a:7b:0d:ed:dd:
d7:cc:b1:79:48:eb:e3:f1:87:67:30:46:fd:bb:2c:05:3b:fe:
8c:7f:19:44:01:6e:d4:18:0e:9d:f5:43:55:36:c8:11:f4:76:
6f:19:7d:27:42:d8:1b:01:cb:51:1b:de:7e:db:a8:20:38:29:
a1:94:e6:ab:25:07:87:70:05:79:56:6d:a7:35:54:11:cc:3b:
41:d3:ed:09:8d:22:f9:59:30:5c:c3:fc:87:da:94:90:e8:88:
f7:a8:51:b7:1c:d2:ae:4b:f7:82:e5:bd:1a:f8:28:b1:4c:e2:
68:d2:48:c0:82:e3:9c:01:27:8f:c2:2f:c6:43:cd:ce:b5:5b:
ba:7a:b0:7e:aa:90:8f:d9:98:6d:51:35:2f:19:2d:d4:3c:6e:
d1:3d:ae:43:66:53:2e:37:57:19:53:4b:c3:76:95:1c:c8:8f:
b6:38:6a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:02:38 2026 by rpki-client