Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS205886.roa
File: AS205886.roa (raw, json)
Hash identifier: yIoOE6xVj4MnavFYJeVCr8c3ghYFE6I0Bs6Lqd2Z9tM=
Subject key identifier: AA:2A:03:2F:A2:81:9C:DB:DF:43:F5:24:BE:D1:64:AB:D0:F3:4E:4C
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 3350CFB706FA79A47DBE8D718587FE42B66805E1
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS205886.roa
Signing time: Sat 14 Feb 2026 00:00:14 +0000
ROA not before: Fri 13 Feb 2026 23:55:14 +0000
ROA not after: Sat 13 Feb 2027 00:00:14 +0000
asID: 205886
IP address blocks: 143.20.8.0/24 maxlen: 24
143.20.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:50:cf:b7:06:fa:79:a4:7d:be:8d:71:85:87:fe:42:b6:68:05:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Feb 13 23:55:14 2026 GMT
Not After : Feb 13 00:00:14 2027 GMT
Subject: CN=AA2A032FA2819CDBDF43F524BED164ABD0F34E4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:bf:cb:17:bf:95:dc:3f:5f:54:56:ae:06:8d:
61:f9:a5:8b:a4:69:fc:96:f8:2e:75:f4:f3:9c:81:
9c:03:eb:3a:34:3e:fa:48:2f:fa:3b:71:72:f4:ff:
11:75:35:c9:d2:e3:7d:c0:6c:fb:f2:04:73:63:32:
2a:9f:e8:e9:e2:d3:06:f3:cd:bc:ef:8f:bf:87:e3:
8c:ba:84:6e:77:32:21:bf:16:2c:1a:54:5c:9e:d1:
5b:63:65:5d:f5:9d:27:49:f8:4d:89:86:c3:cd:14:
1b:4a:eb:34:c3:b7:46:f4:79:eb:60:2e:00:44:03:
1b:8b:6b:be:80:f5:5b:44:10:df:9d:d5:c7:a8:65:
1b:a4:ba:2a:3b:00:81:32:91:b6:d6:79:cd:df:13:
d6:13:a4:b1:36:71:f8:c2:92:9e:8a:7a:5e:78:ef:
bb:52:7f:d2:41:7e:6c:74:e3:a6:35:66:72:0c:a9:
c0:92:f5:32:a2:36:4d:1e:fc:63:44:91:f4:15:e0:
14:64:f0:68:50:1e:1f:60:99:b4:9e:0f:b0:86:3c:
cb:f4:d0:1e:6c:64:90:f0:47:3c:0b:37:ce:32:3b:
c8:4c:b6:3f:a3:21:52:49:11:e0:d6:0e:f6:ee:73:
55:8d:2d:9f:22:6b:0a:7c:31:62:c8:ea:bc:2a:e5:
dc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:2A:03:2F:A2:81:9C:DB:DF:43:F5:24:BE:D1:64:AB:D0:F3:4E:4C
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS205886.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.8.0/24
143.20.74.0/24
Signature Algorithm: sha256WithRSAEncryption
31:1f:19:7f:5a:7e:1c:41:bb:51:9c:fd:b8:5e:05:44:22:fa:
2b:64:e3:d4:7e:4f:ea:f7:ab:a1:6b:24:0b:a3:72:e3:e2:18:
73:20:8d:af:d1:27:7a:5f:bc:21:f5:1a:b7:d4:b8:a0:1c:5d:
06:17:f5:70:c2:3b:66:39:e9:d4:b6:7a:01:e5:09:ed:7d:b5:
0b:8e:82:e1:35:8b:47:40:36:d9:8b:9d:5c:49:55:51:5e:da:
a0:e3:11:34:42:44:38:7a:6d:b9:ee:e7:9e:d4:f1:d4:db:1d:
42:00:18:b8:50:06:a9:b1:81:f4:1b:85:ee:b4:6d:78:0d:1a:
a1:71:3a:d3:a3:50:44:66:20:5a:01:b4:20:d1:9f:d0:f1:a8:
af:0e:24:fd:4e:27:56:de:1f:e7:91:7d:1d:83:5e:f3:e9:63:
5e:53:9f:18:6a:0a:8e:07:88:31:e2:fd:07:a1:24:71:07:ff:
05:4b:42:92:47:f4:4d:80:bf:ed:94:61:60:7b:0e:ad:5f:cb:
54:6d:4b:ab:e0:c6:b5:f6:fc:98:d6:f6:a0:bf:67:94:f3:ad:
12:d3:21:1e:6f:f5:ca:ea:aa:1e:0a:14:d4:ca:a1:27:83:b4:
25:77:1a:6d:70:32:5b:01:21:77:95:29:e4:67:2d:5d:80:b3:
6c:a2:38:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:11:09 2026 by rpki-client