Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS201667.roa
File: AS201667.roa (raw, json)
Hash identifier: CZkBwl8mWk7zy03s9/jFFu4d7HRocVqqn+ypWIp4+OI=
Subject key identifier: B9:00:D4:B7:E4:CC:80:39:90:4D:EC:97:95:D2:32:2B:F7:E0:B6:46
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 43517854749A5A10CC3E77096A91E6D4081DF625
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS201667.roa
Signing time: Fri 05 Jun 2026 07:19:31 +0000
ROA not before: Fri 05 Jun 2026 07:14:31 +0000
ROA not after: Fri 04 Jun 2027 07:19:31 +0000
asID: 201667
IP address blocks: 143.20.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:39:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:51:78:54:74:9a:5a:10:cc:3e:77:09:6a:91:e6:d4:08:1d:f6:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Jun 5 07:14:31 2026 GMT
Not After : Jun 4 07:19:31 2027 GMT
Subject: CN=B900D4B7E4CC8039904DEC9795D2322BF7E0B646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:09:3f:1f:8f:5a:6c:4f:4c:f3:ed:2e:a3:90:
8e:85:e0:cd:89:4b:56:07:26:87:26:1e:7f:dc:40:
4c:23:e9:ae:3d:c1:51:13:43:0f:a8:42:b0:ff:15:
b1:44:21:9d:e7:99:61:cd:b5:98:ca:85:99:1f:c0:
c1:9c:42:87:d6:55:1f:33:47:2f:61:fd:40:65:40:
26:5d:f0:fc:ec:3f:dc:da:c1:c4:1f:91:90:2a:d0:
0b:33:ac:4d:49:ac:12:b7:e7:4c:73:0f:e5:a4:6d:
71:05:74:27:53:0a:d7:8a:53:e3:c3:26:9d:c6:06:
c4:48:54:4a:b3:f2:9d:65:67:d2:ed:d2:80:31:23:
e1:3d:05:b5:74:ee:17:85:4b:37:3b:95:8a:6b:1f:
7c:9d:34:7f:76:16:bc:62:47:47:b2:df:d8:3b:b1:
21:28:26:cf:53:e2:87:2f:f0:17:6a:de:56:f2:e2:
9e:18:9f:85:42:21:68:2c:8d:59:66:f2:13:d8:e5:
4d:69:cf:b6:05:9c:1f:3d:df:11:ed:b5:91:27:4f:
bb:b2:f7:1b:4f:9a:ce:8f:09:2b:3f:83:99:f4:62:
44:76:d7:3d:23:36:1b:39:df:af:3d:cb:e0:76:01:
81:f9:5f:a8:34:f2:8c:63:44:7d:00:45:4c:c4:ce:
2b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:00:D4:B7:E4:CC:80:39:90:4D:EC:97:95:D2:32:2B:F7:E0:B6:46
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS201667.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.196.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:ef:ae:f3:23:60:0f:01:3d:3d:23:41:c2:80:e1:dd:19:43:
c8:5f:9c:88:c5:00:d2:5b:23:4a:dd:78:6f:00:cf:bc:f3:fb:
63:af:2c:52:84:5a:4e:11:96:69:fe:9d:d9:bd:30:6a:d4:3e:
e1:2f:fd:93:ec:d3:ca:19:9b:0f:97:fb:a9:24:a4:f7:15:4f:
23:84:13:77:02:a0:14:5b:f2:4f:3d:61:47:34:6a:17:dd:8b:
c5:99:7d:8a:1e:26:67:cd:8c:3d:69:6d:91:8c:4b:2e:ab:2c:
97:9d:34:06:7e:4b:0f:d4:ac:a6:95:90:cc:90:02:97:c7:46:
cd:83:ac:ff:41:76:6d:e5:33:fe:9d:7c:57:0e:fb:27:35:b3:
92:58:3f:b3:1d:5d:f2:04:c8:9f:c8:d9:ee:e8:e0:9e:29:2a:
93:71:d3:b9:0d:ce:50:9f:3c:81:ec:3c:1a:d7:9f:53:f9:89:
08:f8:f1:46:42:01:9f:56:1e:ea:63:db:d9:59:09:95:9b:18:
93:d0:52:b0:88:7c:e1:11:0b:63:91:b9:a2:05:b7:09:7f:44:
2f:b9:ef:66:9f:55:06:ee:44:a2:66:ff:e0:d5:2e:d3:99:34:
ec:45:28:5d:e6:ed:1f:24:13:c4:69:56:bd:66:59:eb:49:2f:
ff:8a:5b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:38:03 2026 by rpki-client