Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS207590.roa
File: AS207590.roa (raw, json)
Hash identifier: I/GFSkiBCf0Lrr4mXcqyGzSG1x6Gl+GRRRBwtd0YWKk=
Subject key identifier: A2:16:AF:53:E9:61:6E:0A:B7:BF:D6:4A:93:6A:C9:FA:4A:0F:B5:DF
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 17EA257CEAFC43C5C89C413D567B46715BB4C570
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS207590.roa
Signing time: Fri 24 Jul 2026 13:49:14 +0000
ROA not before: Fri 24 Jul 2026 13:44:14 +0000
ROA not after: Fri 23 Jul 2027 13:49:14 +0000
asID: 207590
IP address blocks: 143.20.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:ea:25:7c:ea:fc:43:c5:c8:9c:41:3d:56:7b:46:71:5b:b4:c5:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Jul 24 13:44:14 2026 GMT
Not After : Jul 23 13:49:14 2027 GMT
Subject: CN=A216AF53E9616E0AB7BFD64A936AC9FA4A0FB5DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c8:6b:49:46:67:18:b2:9d:e6:ba:62:2a:48:
27:73:0b:e7:0d:26:a0:b2:24:41:ac:51:0d:57:37:
b6:47:a6:40:1b:04:10:76:43:40:72:d1:7a:74:dc:
28:c7:f7:a7:2a:5b:a1:88:d1:4d:90:3f:14:a2:27:
d9:a8:d3:27:f3:63:1e:64:eb:a4:94:a3:3d:41:96:
d1:8c:1a:94:de:91:62:ab:38:61:01:43:38:b2:0a:
47:e8:fd:e0:b2:e8:16:c0:66:81:80:33:33:32:bd:
79:8e:0c:fb:f7:cf:4d:ba:20:97:00:7f:77:e5:80:
57:a0:2e:40:77:91:31:e9:91:db:34:0f:ba:5d:da:
e2:7b:19:9c:55:63:57:21:79:7f:de:89:ae:7b:2a:
95:fc:0b:26:bf:7f:3b:0d:ea:65:d8:2a:5b:93:57:
af:27:65:26:a7:22:bc:61:67:8f:39:48:c6:dc:ce:
38:00:04:ed:9a:f9:05:09:a6:c7:44:f5:6b:dd:21:
4c:2e:59:5e:aa:87:88:76:29:b6:42:5e:42:ca:ac:
9e:cf:e8:31:b7:72:1b:ba:08:ef:f5:a7:17:3c:45:
4b:fd:8f:b4:15:b7:c4:99:bf:85:0b:32:25:44:eb:
1b:24:8d:83:c0:9e:a1:27:a5:96:ac:9e:15:89:a3:
c9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:16:AF:53:E9:61:6E:0A:B7:BF:D6:4A:93:6A:C9:FA:4A:0F:B5:DF
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS207590.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.112.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:18:3f:21:43:ea:20:94:96:58:75:4c:3d:c2:60:0e:00:a2:
e5:69:f1:99:21:04:65:00:9d:88:60:e7:94:1d:ac:6b:70:d1:
e5:37:a6:b0:1f:34:45:30:f4:e2:3f:a8:20:40:00:7a:a9:f4:
e6:b7:49:eb:d8:02:ca:be:d7:7c:46:70:64:f4:d1:53:76:8d:
f6:9c:55:6c:10:a2:8b:8b:c0:d0:ae:26:fa:3d:3f:d1:98:b4:
40:89:19:be:69:76:9b:f0:44:bd:20:c7:36:02:85:8f:e7:20:
7d:a3:e7:ca:25:e8:47:0d:d7:3f:f1:36:8b:f5:c8:90:6d:5f:
03:71:53:e1:d5:d5:03:cb:8d:b8:27:1a:1c:e0:40:1a:0e:0b:
ab:d1:d3:71:7c:d8:ad:a0:59:7d:bb:fe:56:18:18:8c:c0:dc:
eb:68:b7:2b:41:3a:1e:db:1a:b3:55:19:ae:05:6d:61:df:10:
f4:25:38:08:e4:43:89:f9:13:4b:8c:b4:e3:60:af:52:d5:72:
a1:28:a6:9b:67:aa:12:ae:9c:b8:9c:4f:6c:66:19:12:b7:df:
a2:f8:30:a3:b3:13:56:44:62:91:02:ab:79:fd:b1:2d:4e:f7:
c2:d2:cd:7f:ce:43:74:1c:20:4e:2d:8d:5a:07:33:48:d7:47:
14:71:d0:7e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUF+olfOr8Q8XInEE9VntGcVu0xXAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk
ZWI5M2Q5ZDAeFw0yNjA3MjQxMzQ0MTRaFw0yNzA3MjMxMzQ5MTRaMDMxMTAvBgNV
BAMTKEEyMTZBRjUzRTk2MTZFMEFCN0JGRDY0QTkzNkFDOUZBNEEwRkI1REYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRyGtJRmcYsp3mumIqSCdzC+cN
JqCyJEGsUQ1XN7ZHpkAbBBB2Q0By0Xp03CjH96cqW6GI0U2QPxSiJ9mo0yfzYx5k
66SUoz1BltGMGpTekWKrOGEBQziyCkfo/eCy6BbAZoGAMzMyvXmODPv3z026IJcA
f3flgFegLkB3kTHpkds0D7pd2uJ7GZxVY1cheX/eia57KpX8Cya/fzsN6mXYKluT
V68nZSanIrxhZ485SMbczjgABO2a+QUJpsdE9WvdIUwuWV6qh4h2KbZCXkLKrJ7P
6DG3chu6CO/1pxc8RUv9j7QVt8SZv4ULMiVE6xskjYPAnqEnpZasnhWJo8nfAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUohavU+lhbgq3v9ZKk2rJ+koPtd8wHwYDVR0j
BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2
MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2
NVBaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt
NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTMjA3NTkwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjxRw
MA0GCSqGSIb3DQEBCwUAA4IBAQC/GD8hQ+oglJZYdUw9wmAOAKLlafGZIQRlAJ2I
YOeUHaxrcNHlN6awHzRFMPTiP6ggQAB6qfTmt0nr2ALKvtd8RnBk9NFTdo32nFVs
EKKLi8DQrib6PT/RmLRAiRm+aXab8ES9IMc2AoWP5yB9o+fKJehHDdc/8TaL9ciQ
bV8DcVPh1dUDy424Jxoc4EAaDgur0dNxfNitoFl9u/5WGBiMwNzraLcrQToe2xqz
VRmuBW1h3xD0JTgI5EOJ+RNLjLTjYK9S1XKhKKabZ6oSrpy4nE9sZhkSt9+i+DCj
sxNWRGKRAqt5/bEtTvfC0s1/zkN0HCBOLY1aBzNI10cUcdB+
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:36:42 2026 by rpki-client