Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS205410.roa
File: AS205410.roa (raw, json)
Hash identifier: eCdZHX6aw4GhciJtpJtGYPQweVn2nKPogtdPnbVaDqY=
Subject key identifier: C6:1A:E6:95:19:F7:4F:63:A7:77:9F:FD:AC:94:AC:CA:AB:79:BD:8E
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 34191A5030B8996982417AF047CF39F27570531F
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS205410.roa
Signing time: Mon 07 Sep 2026 11:22:39 +0000
ROA not before: Mon 07 Sep 2026 11:17:39 +0000
ROA not after: Mon 06 Sep 2027 11:22:39 +0000
asID: 205410
IP address blocks: 143.20.43.0/24 maxlen: 24
143.20.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:37:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:19:1a:50:30:b8:99:69:82:41:7a:f0:47:cf:39:f2:75:70:53:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 7 11:17:39 2026 GMT
Not After : Sep 6 11:22:39 2027 GMT
Subject: CN=C61AE69519F74F63A7779FFDAC94ACCAAB79BD8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:eb:b4:a7:f1:03:12:78:52:25:28:5d:77:cd:
c3:13:e7:55:df:00:fe:38:71:f2:50:8c:76:d3:26:
aa:37:41:eb:7f:59:2f:f7:86:1d:73:4d:4e:a7:fe:
5f:9d:05:9c:26:a6:22:77:98:6f:fa:9f:e4:0a:7b:
23:74:a5:dd:04:e9:54:f6:85:24:09:96:27:51:d0:
b2:e3:ed:8b:32:94:92:84:08:8b:81:bd:66:71:26:
7d:73:16:e6:ab:e7:29:77:c4:9a:b8:20:c0:9d:87:
a8:ce:e0:bd:76:32:77:87:85:05:21:14:c1:6e:e0:
cc:2a:b5:85:88:6c:a2:ea:be:12:e7:1d:e5:5a:e5:
db:f4:a8:ff:06:fa:fc:50:9e:9e:52:57:fc:b6:4d:
61:e0:17:31:36:60:7b:74:98:04:87:42:2c:81:e5:
c5:25:78:4d:27:25:8f:aa:df:5a:a4:5e:6c:2f:84:
b7:98:74:a8:9b:39:f7:6e:b9:ce:3f:3e:7f:3f:df:
38:d1:1e:d2:0e:04:e1:fd:79:f5:f8:b2:6c:aa:c9:
2d:ec:1a:76:6d:9b:31:83:45:d6:99:e0:99:48:24:
e2:48:ae:a1:8b:4c:26:ab:91:b4:9e:cb:75:1e:c6:
2e:fa:2e:8d:2e:ed:7b:fc:00:32:84:90:c9:91:16:
c4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:1A:E6:95:19:F7:4F:63:A7:77:9F:FD:AC:94:AC:CA:AB:79:BD:8E
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS205410.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.43.0/24
143.20.45.0/24
Signature Algorithm: sha256WithRSAEncryption
37:09:12:5a:78:29:d5:aa:37:c9:50:dd:db:b6:48:4e:45:92:
c4:e3:8d:5e:56:bd:83:c9:0a:4e:73:ac:cb:83:3d:92:95:eb:
57:9d:7e:45:1f:ee:11:b9:f0:c7:7e:b7:d8:c5:59:a5:eb:6e:
6e:99:ed:8f:2c:96:4d:8f:e6:81:ea:22:56:13:c3:58:b5:63:
69:4c:56:9b:d9:19:88:9f:7d:0e:69:99:60:9d:77:82:ce:2e:
12:b0:2b:97:4d:b8:9e:ce:e8:f8:49:75:7d:45:bd:c6:04:57:
ad:38:e8:59:09:ba:18:60:fd:a6:db:cc:a8:31:b8:2d:3f:7a:
f6:cb:d3:8d:56:f3:5b:ba:86:3b:06:8e:82:5d:c9:c4:fc:be:
31:d3:00:07:d4:6c:90:57:c9:5c:69:51:0e:34:74:19:14:19:
f8:8b:1e:16:85:ad:62:29:cd:53:5f:e3:5c:8c:08:80:67:88:
9d:ba:c0:43:53:b2:e4:a4:11:cd:8c:7f:78:af:ea:a8:fa:33:
82:10:63:32:09:4d:9b:de:4f:f7:be:d8:0d:11:03:1e:36:07:
96:01:61:20:cb:59:e5:fd:8d:5b:42:2b:b4:64:11:4b:7e:48:
e4:c8:4d:92:aa:2b:9c:84:17:c6:ac:88:8d:f8:f7:2a:42:47:
ab:0b:e3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:11:06 2026 by rpki-client