Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS205548.roa
File: AS205548.roa (raw, json)
Hash identifier: rSb5bpgkG6T/miDverNkFBdWhF7hk5lZloMp3NLIbIk=
Subject key identifier: F0:59:F6:46:26:D4:08:D6:6E:94:50:BD:99:2C:A4:95:0C:C6:03:F7
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 0A70D6ACA221B5AFBF0FE7E7E880D4D119FD59F1
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS205548.roa
Signing time: Wed 16 Sep 2026 11:49:35 +0000
ROA not before: Wed 16 Sep 2026 11:44:35 +0000
ROA not after: Wed 15 Sep 2027 11:49:35 +0000
asID: 205548
IP address blocks: 143.20.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 19:08:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:70:d6:ac:a2:21:b5:af:bf:0f:e7:e7:e8:80:d4:d1:19:fd:59:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 16 11:44:35 2026 GMT
Not After : Sep 15 11:49:35 2027 GMT
Subject: CN=F059F64626D408D66E9450BD992CA4950CC603F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4c:18:bc:46:8c:11:c0:70:4c:66:9f:35:4f:
e3:42:b1:87:d7:03:46:0c:bf:e8:d4:5f:9a:e3:c8:
33:d4:2b:78:92:58:86:5a:92:65:61:5b:8d:26:af:
21:56:a7:a8:67:5c:c7:de:28:9f:0e:ee:0b:04:6c:
fb:cb:91:2b:ae:72:b1:8e:c5:f2:76:b3:c6:1e:b6:
66:ac:16:d3:4e:0e:47:b9:29:d6:8b:50:77:eb:80:
1b:14:e3:2f:18:93:63:c6:0d:5f:30:31:46:4b:d3:
7a:1e:c7:7a:f0:0e:d4:6b:7f:e5:b8:3f:46:81:14:
8a:f1:bf:f2:53:4c:48:64:53:e6:ff:8b:17:34:3f:
de:3e:fb:3d:81:39:70:63:93:c9:57:a5:36:51:21:
43:cc:90:0b:84:42:c1:43:ca:54:15:bc:43:8a:ff:
e4:58:98:a5:53:41:6c:26:9b:cb:18:44:4e:ec:28:
54:69:e8:f3:db:c0:bf:42:f3:d7:10:92:36:3d:45:
1f:82:3b:20:94:2a:d1:ee:73:26:9d:59:82:0f:eb:
38:ee:d8:1f:a6:d6:81:54:a8:9f:51:c2:83:ee:6c:
4b:2a:7f:ed:b5:ce:e7:f9:7c:8e:9b:b5:f6:7c:c6:
95:cb:34:22:c9:58:2a:5a:ef:98:c0:ed:cb:b4:63:
66:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:59:F6:46:26:D4:08:D6:6E:94:50:BD:99:2C:A4:95:0C:C6:03:F7
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS205548.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.156.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:4a:bd:ef:35:14:ec:d7:40:45:ad:97:72:4f:a2:a7:b8:a3:
ce:6b:f1:8c:d6:3e:50:34:f3:f8:33:24:89:4a:9a:14:f8:b4:
02:c3:18:fa:84:d7:cb:f0:75:84:b3:2b:21:0f:91:a3:0e:e4:
40:48:33:97:36:59:4e:1e:45:ac:0f:ef:0f:39:29:9a:42:b0:
15:db:5e:18:29:58:51:37:e1:3d:e7:75:3a:d3:78:5f:15:6c:
d3:4f:88:cd:4a:d0:ff:38:5a:04:c6:fd:7e:a8:76:b4:03:77:
11:90:ae:18:f7:02:c3:0c:0f:ef:ea:f7:d3:d1:5c:33:90:bb:
31:39:cd:a5:2c:9f:5c:43:e0:9f:66:40:39:61:3d:4f:08:7a:
d3:52:9b:57:34:be:39:fb:6b:9e:58:49:e2:1d:53:c7:0e:3e:
76:5b:76:ad:b1:3e:3f:fc:1e:f8:d1:e7:41:ef:1e:6c:2d:47:
ed:10:22:9e:bd:74:5a:67:52:8d:17:77:5e:fa:ca:de:d6:55:
9f:b0:e8:92:14:cb:60:86:68:60:0f:b3:1d:e0:c7:26:fd:cc:
b7:f0:6f:0f:cb:9d:66:8a:ac:e4:05:76:80:1a:af:15:9d:47:
e5:2d:de:ab:b2:57:3e:50:61:31:e4:02:b4:58:4c:c8:b0:05:
52:18:07:a7
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUCnDWrKIhta+/D+fn6IDU0Rn9WfEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk
ZWI5M2Q5ZDAeFw0yNjA5MTYxMTQ0MzVaFw0yNzA5MTUxMTQ5MzVaMDMxMTAvBgNV
BAMTKEYwNTlGNjQ2MjZENDA4RDY2RTk0NTBCRDk5MkNBNDk1MENDNjAzRjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0TBi8RowRwHBMZp81T+NCsYfX
A0YMv+jUX5rjyDPUK3iSWIZakmVhW40mryFWp6hnXMfeKJ8O7gsEbPvLkSuucrGO
xfJ2s8YetmasFtNODke5KdaLUHfrgBsU4y8Yk2PGDV8wMUZL03oex3rwDtRrf+W4
P0aBFIrxv/JTTEhkU+b/ixc0P94++z2BOXBjk8lXpTZRIUPMkAuEQsFDylQVvEOK
/+RYmKVTQWwmm8sYRE7sKFRp6PPbwL9C89cQkjY9RR+COyCUKtHucyadWYIP6zju
2B+m1oFUqJ9RwoPubEsqf+21zuf5fI6btfZ8xpXLNCLJWCpa75jA7cu0Y2bJAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQU8Fn2RibUCNZulFC9mSyklQzGA/cwHwYDVR0j
BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2
MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2
NVBaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt
NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTMjA1NTQ4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjxSc
MA0GCSqGSIb3DQEBCwUAA4IBAQBdSr3vNRTs10BFrZdyT6KnuKPOa/GM1j5QNPP4
MySJSpoU+LQCwxj6hNfL8HWEsyshD5GjDuRASDOXNllOHkWsD+8POSmaQrAV214Y
KVhRN+E953U603hfFWzTT4jNStD/OFoExv1+qHa0A3cRkK4Y9wLDDA/v6vfT0Vwz
kLsxOc2lLJ9cQ+CfZkA5YT1PCHrTUptXNL45+2ueWEniHVPHDj52W3atsT4//B74
0edB7x5sLUftECKevXRaZ1KNF3de+sre1lWfsOiSFMtghmhgD7Md4Mcm/cy38G8P
y51miqzkBXaAGq8VnUflLd6rslc+UGEx5AK0WEzIsAVSGAen
-----END CERTIFICATE-----
Generated at Mon Sep 21 09:47:16 2026 by rpki-client