Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS206286.roa
File: AS206286.roa (raw, json)
Hash identifier: inWkVg28DwYqtqzYra+p6z+DxNw/byvewX+DNmu2Xxc=
Subject key identifier: 65:6F:E3:D1:58:C0:53:74:55:E3:B7:91:3F:89:7C:47:0B:70:54:BF
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 1F58F950C4090984958318F820537A979876D9A9
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS206286.roa
Signing time: Fri 25 Jul 2025 22:14:39 +0000
ROA not before: Fri 25 Jul 2025 22:09:39 +0000
ROA not after: Fri 24 Jul 2026 22:14:39 +0000
asID: 206286
IP address blocks: 143.20.58.0/24 maxlen: 24
143.20.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 Aug 2025 19:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:58:f9:50:c4:09:09:84:95:83:18:f8:20:53:7a:97:98:76:d9:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Jul 25 22:09:39 2025 GMT
Not After : Jul 24 22:14:39 2026 GMT
Subject: CN=656FE3D158C0537455E3B7913F897C470B7054BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:53:8c:68:77:53:c2:59:43:6f:2f:45:b2:4d:
f6:81:66:28:dc:77:35:f7:66:33:a7:95:55:de:87:
7c:61:17:86:70:9f:d6:54:83:ad:06:15:3c:9e:6b:
74:e7:7c:04:cd:3d:19:8e:bd:d8:ec:11:ba:3b:99:
31:04:4c:b3:82:e1:ca:e2:1e:49:13:1b:b0:03:4b:
81:fc:40:2c:77:c9:72:c2:96:ce:df:b2:c9:8c:23:
a9:07:5f:99:33:60:a4:5c:2e:85:6c:30:e3:2b:3f:
ae:e8:05:5f:f3:57:b4:ef:71:5a:ad:52:a4:19:19:
07:fd:5a:36:14:98:73:ae:2f:18:f5:a7:af:54:25:
cc:99:c4:41:29:3f:e3:43:fb:b5:3c:1d:b4:6b:17:
dd:9b:f8:e4:22:d4:91:cd:bf:4a:13:4d:c4:e4:26:
01:c8:dc:28:ad:2a:77:ef:95:89:2a:b2:5c:d6:3a:
d1:90:79:13:03:c5:fb:6c:79:79:fd:dd:26:c3:5b:
44:4e:27:d9:bf:24:cb:43:1c:40:ef:e6:33:b1:5d:
6e:f6:59:35:07:a7:14:a1:32:28:a3:8a:18:c2:89:
ea:64:a0:7a:18:4d:9d:5f:89:8b:d3:bb:75:72:b9:
0e:f1:81:12:fd:da:da:e6:9f:df:ba:1e:eb:8f:de:
77:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:6F:E3:D1:58:C0:53:74:55:E3:B7:91:3F:89:7C:47:0B:70:54:BF
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS206286.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.58.0/24
143.20.184.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:9a:6f:15:f2:fa:fe:44:a4:3c:c4:21:e3:f3:f0:7a:47:97:
3d:93:87:ad:ed:3d:1c:3c:6e:3b:91:b8:2b:61:8a:7d:a9:60:
6c:8f:d4:2e:1f:12:16:bd:1c:c7:1e:ff:02:88:58:2f:cf:1b:
b8:db:27:8c:5a:51:91:b2:65:2d:fc:0e:c4:64:1b:50:b4:90:
c5:47:e3:00:0e:2a:41:aa:d4:5e:0c:71:f6:23:24:96:c4:28:
21:3a:10:e0:97:3c:60:f5:fb:99:85:e6:71:4a:6f:33:61:71:
9b:dc:3d:49:61:f7:9f:77:dc:9a:7d:46:8b:63:76:41:70:e8:
93:4c:72:31:ba:b8:07:8f:5a:b5:01:9d:79:77:fc:8c:5e:0e:
9f:8b:23:66:a1:51:55:b8:90:45:28:ac:9b:59:1e:8d:fd:bf:
c8:46:9e:eb:e9:3c:d8:d1:a5:88:0d:57:d9:6f:a9:b1:87:f3:
f5:5b:f4:3e:b4:13:9c:49:f2:20:2b:12:02:ec:cc:db:e5:2d:
b5:5f:a1:6f:64:04:93:0c:6c:00:7b:b6:95:1b:3e:3a:36:85:
79:d4:51:1a:e2:72:d8:bb:de:35:30:47:fc:55:2e:e7:13:3f:
75:29:25:9a:45:84:9a:39:e8:d6:6d:ed:36:6c:f6:38:2f:d2:
2b:23:68:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:38:31 2025 by rpki-client