Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS203054.roa
File: AS203054.roa (raw, json)
Hash identifier: +aZn0hK5pVSE53buV/yw0Vu6aWW1320FPNmzqN+BEJg=
Subject key identifier: 22:5C:92:F7:45:74:18:D8:89:28:57:38:AD:0B:67:90:31:7E:32:00
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 68F146DE2C1009353B6BDF86D63B4121897D8CBD
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS203054.roa
Signing time: Sat 04 Apr 2026 13:25:51 +0000
ROA not before: Sat 04 Apr 2026 13:20:51 +0000
ROA not after: Sat 03 Apr 2027 13:25:51 +0000
asID: 203054
IP address blocks: 143.20.28.0/24 maxlen: 24
143.20.35.0/24 maxlen: 24
143.20.42.0/24 maxlen: 24
143.20.57.0/24 maxlen: 24
143.20.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:f1:46:de:2c:10:09:35:3b:6b:df:86:d6:3b:41:21:89:7d:8c:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Apr 4 13:20:51 2026 GMT
Not After : Apr 3 13:25:51 2027 GMT
Subject: CN=225C92F7457418D889285738AD0B6790317E3200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:26:d4:16:33:12:62:38:aa:88:d5:e2:b8:55:
b8:2c:17:df:a1:57:40:78:bd:e8:45:d4:42:3a:8a:
36:7f:62:27:06:6b:b3:d3:4a:6a:97:6f:9c:87:4e:
27:26:96:17:75:1f:d0:22:6b:94:1f:9e:9a:7a:f7:
a3:67:80:d7:b2:9b:e9:93:77:62:9d:b1:43:67:34:
29:f5:5d:a4:1a:aa:b0:33:ca:d1:83:4d:f4:79:15:
ee:24:9f:5c:df:c2:c9:67:a2:f6:d2:2b:3c:b6:59:
81:56:32:6f:41:d5:b3:5f:0e:d2:0f:09:b6:df:88:
f0:6f:8e:fc:bb:9c:cc:5e:0e:ef:83:92:a0:af:ad:
65:9a:15:4d:b3:ad:80:41:65:ca:3a:e6:60:c3:5e:
49:36:d0:d9:b0:08:3e:d3:2e:89:4d:cd:1a:92:89:
f3:0e:0e:12:37:7b:0b:ff:24:84:60:c6:72:4c:4a:
07:79:b5:4c:55:81:55:c3:1e:0c:b7:53:a9:75:a1:
3b:71:f6:45:9d:58:18:fc:11:73:66:31:f1:93:79:
16:90:3f:69:67:e1:7b:0b:b9:89:15:98:f1:4f:36:
b7:8c:c3:bd:7e:77:0e:e7:2f:e1:62:2f:fa:e7:0c:
75:57:a1:0a:74:4e:e5:27:47:b0:67:3c:2a:54:a0:
73:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:5C:92:F7:45:74:18:D8:89:28:57:38:AD:0B:67:90:31:7E:32:00
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS203054.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.28.0/24
143.20.35.0/24
143.20.42.0/24
143.20.57.0/24
143.20.59.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:33:db:4e:9f:91:0d:83:cb:0e:5d:e2:2c:4a:01:65:30:71:
cf:e5:31:6a:f7:7f:fe:0d:c1:76:f9:8c:c2:4d:38:40:66:d7:
22:97:6a:81:22:78:2e:98:f9:a0:cd:77:85:98:5b:4f:55:6f:
08:0b:c1:32:a6:ce:47:a1:18:6b:38:ee:37:9c:21:08:57:b2:
f0:ce:80:75:b5:0d:13:86:f7:5d:e2:62:54:d4:a9:d2:77:eb:
d3:72:0c:85:1e:51:0a:d9:53:2a:11:6f:b8:10:4d:e0:18:28:
7b:fa:5e:f9:a3:af:38:bd:14:9c:01:09:29:fa:a8:b5:72:60:
2f:65:8f:8b:55:9e:8f:cc:26:09:a4:f1:55:8f:c3:f7:43:21:
3b:65:5e:5e:ae:62:36:bb:e0:d2:46:dd:8d:c8:dd:ae:dc:66:
cf:43:25:a3:3a:5d:8c:45:5f:91:f1:ea:7c:d5:76:d4:73:73:
04:a5:5b:55:41:8c:b7:18:f3:79:00:c8:02:ac:f8:c5:6c:b4:
ad:1b:7e:9f:c6:b6:93:51:c7:48:48:ea:e3:77:bb:3a:75:25:
67:38:24:f5:84:79:7e:5d:61:43:a8:6c:4a:aa:1d:64:52:ac:
65:27:74:bc:97:ab:5f:1b:9f:8b:2f:b4:57:b2:be:d9:30:3e:
9f:88:74:c4
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgIUaPFG3iwQCTU7a9+G1jtBIYl9jL0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk
ZWI5M2Q5ZDAeFw0yNjA0MDQxMzIwNTFaFw0yNzA0MDMxMzI1NTFaMDMxMTAvBgNV
BAMTKDIyNUM5MkY3NDU3NDE4RDg4OTI4NTczOEFEMEI2NzkwMzE3RTMyMDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzJtQWMxJiOKqI1eK4VbgsF9+h
V0B4vehF1EI6ijZ/YicGa7PTSmqXb5yHTicmlhd1H9Aia5Qfnpp696NngNeym+mT
d2KdsUNnNCn1XaQaqrAzytGDTfR5Fe4kn1zfwslnovbSKzy2WYFWMm9B1bNfDtIP
CbbfiPBvjvy7nMxeDu+DkqCvrWWaFU2zrYBBZco65mDDXkk20NmwCD7TLolNzRqS
ifMODhI3ewv/JIRgxnJMSgd5tUxVgVXDHgy3U6l1oTtx9kWdWBj8EXNmMfGTeRaQ
P2ln4XsLuYkVmPFPNreMw71+dw7nL+FiL/rnDHVXoQp0TuUnR7BnPCpUoHPFAgMB
AAGjggIiMIICHjAdBgNVHQ4EFgQUIlyS90V0GNiJKFc4rQtnkDF+MgAwHwYDVR0j
BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2
MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2
NVBaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt
NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTMjAzMDU0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAjxQc
AwQAjxQjAwQAjxQqAwQAjxQ5AwQAjxQ7MA0GCSqGSIb3DQEBCwUAA4IBAQDIM9tO
n5ENg8sOXeIsSgFlMHHP5TFq93/+DcF2+YzCTThAZtcil2qBIngumPmgzXeFmFtP
VW8IC8Eyps5HoRhrOO43nCEIV7LwzoB1tQ0Thvdd4mJU1KnSd+vTcgyFHlEK2VMq
EW+4EE3gGCh7+l75o684vRScAQkp+qi1cmAvZY+LVZ6PzCYJpPFVj8P3QyE7ZV5e
rmI2u+DSRt2NyN2u3GbPQyWjOl2MRV+R8ep81XbUc3MEpVtVQYy3GPN5AMgCrPjF
bLStG36fxraTUcdISOrjd7s6dSVnOCT1hHl+XWFDqGxKqh1kUqxlJ3S8l6tfG5+L
L7RXsr7ZMD6fiHTE
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:02:40 2026 by rpki-client