Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS205886.roa
File: AS205886.roa (raw, json)
Hash identifier: 0jVle3SOJ+3VjanIqoBYhADnrihdFbHv7L4/Z7x+Le8=
Subject key identifier: 75:CB:22:AA:24:3C:E7:CB:3D:4A:EF:AE:A8:6E:C4:47:D0:73:9A:07
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 54ABD0395AC0D855312E3F5E91EAA39A39EECFAB
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS205886.roa
Signing time: Wed 29 Oct 2025 14:50:55 +0000
ROA not before: Wed 29 Oct 2025 14:45:55 +0000
ROA not after: Wed 28 Oct 2026 14:50:55 +0000
asID: 205886
IP address blocks: 143.20.8.0/24 maxlen: 24
143.20.74.0/24 maxlen: 24
143.20.179.0/24 maxlen: 24
143.20.206.0/24 maxlen: 24
143.20.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:48:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:ab:d0:39:5a:c0:d8:55:31:2e:3f:5e:91:ea:a3:9a:39:ee:cf:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Oct 29 14:45:55 2025 GMT
Not After : Oct 28 14:50:55 2026 GMT
Subject: CN=75CB22AA243CE7CB3D4AEFAEA86EC447D0739A07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:db:e2:f8:fe:a2:26:07:04:b7:22:34:e5:3a:
59:0a:4f:56:92:7f:25:e7:e7:ca:9f:96:f4:10:19:
c2:47:c8:31:fc:bc:0a:c8:c3:2d:f6:8d:da:34:9b:
6b:a0:6c:c9:2d:25:40:65:c2:2d:97:56:8b:36:fb:
6d:ba:67:57:b8:4a:6b:56:b7:f3:42:72:df:a7:5d:
4c:7d:2c:dd:a8:8b:91:b2:0d:3d:56:ab:2a:e5:78:
99:98:22:a6:93:28:7c:6c:19:19:22:89:87:06:98:
75:62:83:a8:ff:47:ed:8e:47:6a:92:74:36:88:d9:
d2:9d:6c:89:12:93:d6:16:86:91:c1:fb:bf:01:8e:
14:d7:a4:62:20:ca:21:24:f7:63:64:f3:fe:39:27:
2a:b7:fe:40:94:dd:4b:be:d9:94:f4:fc:5b:69:5a:
d7:dc:fa:3d:df:d3:c5:cd:1c:16:a0:c1:75:84:35:
54:12:8f:3a:89:1e:f2:32:f8:3b:64:b8:25:ae:53:
e7:e7:34:b7:c2:99:22:3e:4f:da:05:d1:d1:e2:f8:
b9:ea:f7:87:0c:3d:1f:af:f3:0f:a5:ff:2b:a1:2f:
d6:9c:2e:b7:72:2d:70:80:07:d4:ff:b9:20:ea:a4:
0f:52:42:c7:ae:5a:97:2a:98:15:3e:c2:d5:4d:14:
cd:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:CB:22:AA:24:3C:E7:CB:3D:4A:EF:AE:A8:6E:C4:47:D0:73:9A:07
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS205886.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.8.0/24
143.20.74.0/24
143.20.179.0/24
143.20.206.0/24
143.20.221.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:d0:09:7f:74:a8:f1:14:a9:ea:d7:dc:f1:45:39:c4:2d:5a:
fc:93:3d:0a:4b:5f:cd:5d:da:ca:f0:e7:2d:39:f2:9e:7d:b0:
92:eb:21:d6:08:32:92:8b:94:d0:dd:a8:d3:53:f5:8b:df:11:
b0:c5:e8:63:67:8b:00:39:fb:82:de:7f:f0:e3:d9:28:e3:8a:
ef:70:b6:55:51:1d:92:01:31:82:3f:e3:6b:47:26:01:de:22:
9a:9c:4f:b1:e2:e4:31:0e:7c:8b:2b:c2:94:30:59:d8:45:67:
9a:e5:13:0a:ac:78:bf:c3:e7:55:46:0b:b0:f0:5f:ed:0d:bd:
51:3b:f3:60:7b:5b:df:d9:21:c9:f3:60:ae:87:c7:2f:29:db:
af:2d:fe:33:a1:83:21:fc:a6:b2:f8:23:d2:24:d8:1b:89:43:
d0:e6:b1:fc:0f:5d:a7:1d:86:dd:18:63:5a:7d:9a:f7:5d:96:
6e:38:2f:aa:34:7a:35:d9:0f:b8:77:e5:7a:7f:00:ec:52:dc:
aa:9b:bd:44:a1:05:01:ec:3f:ea:9c:32:eb:22:ad:f4:b2:e1:
87:f2:32:53:e0:5f:92:b7:59:d6:f0:e9:cc:4a:e4:cf:12:2c:
19:d4:6a:88:62:c1:af:9a:89:f5:48:a5:33:ff:4f:d2:b5:14:
79:1e:c1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:43:19 2025 by rpki-client