Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS20648.roa
File: AS20648.roa (raw, json)
Hash identifier: t+NomBgs0ZgzyFZs/4iqTDSQxy2FbtVSqjjlDUlO2Vs=
Subject key identifier: 40:A3:DC:06:60:5D:F6:87:62:F8:09:25:C6:29:9E:F5:73:DE:A2:15
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 7A650905D559E3769E495825986A51F4061E12F2
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS20648.roa
Signing time: Mon 31 Aug 2026 07:49:30 +0000
ROA not before: Mon 31 Aug 2026 07:44:30 +0000
ROA not after: Mon 30 Aug 2027 07:49:30 +0000
asID: 20648
IP address blocks: 143.20.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:65:09:05:d5:59:e3:76:9e:49:58:25:98:6a:51:f4:06:1e:12:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Aug 31 07:44:30 2026 GMT
Not After : Aug 30 07:49:30 2027 GMT
Subject: CN=40A3DC06605DF68762F80925C6299EF573DEA215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:aa:51:b9:71:9b:c3:6e:6b:b9:51:ef:40:b8:
a0:3c:50:27:ed:06:94:a3:7f:ab:6d:b4:b7:10:52:
23:bd:2e:96:b7:f8:d7:3b:38:1f:93:c7:e9:6c:d7:
90:e2:05:73:37:96:13:70:94:64:b1:b5:18:f5:ea:
a1:6a:3e:03:84:41:9d:49:d9:e0:f4:78:c1:24:72:
4a:06:d5:bd:35:05:3b:16:c8:76:76:20:00:5f:a8:
2d:5c:74:ea:98:86:6c:a1:86:5c:9a:cf:96:ab:9f:
e0:0a:31:54:27:8c:f3:64:5c:76:08:85:b2:38:0d:
c6:73:2d:af:15:b4:99:30:f6:72:b9:a9:27:f6:d9:
40:10:5c:1b:6f:ec:96:89:ea:08:af:c5:08:b4:80:
c7:52:1e:e4:23:cb:70:03:fa:f1:95:73:64:f5:b6:
61:c0:a8:95:94:f1:91:af:1d:a5:96:d3:ec:f2:35:
96:66:99:2e:6b:08:c8:a9:ff:f4:69:75:25:39:05:
c4:74:0b:db:2c:1d:47:eb:5c:70:94:8c:bc:e2:ad:
ff:82:9f:ae:6d:e0:47:a5:19:26:e8:18:9f:9c:3c:
29:9a:85:c7:31:ba:cc:53:e0:02:3d:df:63:a7:b8:
47:45:cf:80:ad:dc:bb:33:09:70:c6:e1:ff:5d:e7:
4a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A3:DC:06:60:5D:F6:87:62:F8:09:25:C6:29:9E:F5:73:DE:A2:15
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS20648.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.138.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:58:0c:03:61:db:8b:a2:3d:a4:e8:ed:0e:3e:57:5b:ee:dc:
18:8e:b3:2c:9d:5d:62:ce:27:80:e5:8d:ea:c7:5d:ce:1d:dd:
75:71:27:32:4d:4e:0e:bf:ef:64:1f:ba:73:01:37:f9:08:f3:
64:e0:7a:70:a2:de:15:f1:eb:60:cb:4f:ff:45:db:62:7f:84:
43:33:e0:b6:45:d4:32:a0:7c:ad:10:19:c0:8c:b0:63:0a:58:
e2:86:7b:8a:5f:f2:8d:5e:42:4f:d6:36:40:0a:ca:c3:4f:5a:
65:f6:cb:9c:49:90:8d:93:5f:b2:20:7d:b1:88:03:6c:44:2d:
d3:c4:56:28:8a:13:9d:a2:cd:5c:30:38:6e:2d:e7:38:9a:f1:
8e:91:6b:98:e4:6f:f1:80:d1:db:92:e3:7b:94:b2:fe:22:f7:
60:34:20:9a:04:88:d0:d7:68:6a:7a:e6:d7:66:6c:da:87:27:
70:ce:c5:77:e3:b7:42:de:1e:18:61:e7:9c:63:65:30:ea:a6:
33:ca:81:af:e6:d5:c0:c0:0a:07:6b:92:61:82:9f:a2:db:ec:
82:46:d8:4e:ea:22:f0:51:c8:9f:78:e6:dd:d0:5f:5b:99:00:
34:8a:33:0a:24:02:7f:75:84:1d:e5:28:dc:d2:6e:3d:98:99:
c3:e9:1d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:00:42 2026 by rpki-client