Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS209104.roa
File: AS209104.roa (raw, json)
Hash identifier: T2/at9SBIxc7UCedc3wK6MKTYM26y2d544uUZQhGuM8=
Subject key identifier: 6A:DF:29:05:82:22:30:D9:61:18:F6:A8:F3:B2:14:9A:A0:04:16:E6
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 1BCB5686A0AB3EFF20D79E840EF796055799A107
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS209104.roa
Signing time: Wed 15 Apr 2026 14:31:10 +0000
ROA not before: Wed 15 Apr 2026 14:26:10 +0000
ROA not after: Wed 14 Apr 2027 14:31:10 +0000
asID: 209104
IP address blocks: 143.20.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:cb:56:86:a0:ab:3e:ff:20:d7:9e:84:0e:f7:96:05:57:99:a1:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Apr 15 14:26:10 2026 GMT
Not After : Apr 14 14:31:10 2027 GMT
Subject: CN=6ADF2905822230D96118F6A8F3B2149AA00416E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7d:ed:e8:1d:e4:a1:8d:ae:ab:0c:17:f2:e1:
a9:26:29:f8:3f:be:ab:e8:d9:c9:0b:b3:60:61:3a:
31:a5:4c:a8:02:1e:9d:96:25:a9:61:93:58:72:11:
7b:4b:2d:e3:f1:0a:66:3f:c2:3f:ee:43:c3:d8:21:
05:2f:a0:11:2f:3b:3f:4e:e1:d5:57:47:9c:74:a8:
4d:5b:74:99:5d:ed:43:4d:07:ef:d5:bc:b1:49:fa:
11:e0:93:42:ff:aa:f2:35:08:1e:e7:56:67:a2:c6:
1a:03:58:9d:aa:5b:74:43:01:a6:c0:24:ef:7d:c7:
dc:a7:3a:7c:bc:33:06:f2:f2:b9:eb:5e:e5:2d:be:
24:f8:f2:19:48:41:64:e9:da:b1:e7:7f:2b:37:0e:
3e:b2:5b:61:41:06:68:5f:77:54:79:8c:39:fb:d0:
fd:e2:23:ff:db:0b:e1:69:c8:d6:b0:ab:c4:09:b6:
bd:e4:ec:e1:33:fc:94:ea:c0:e7:65:21:51:75:58:
4f:6a:9a:e4:de:35:8b:76:65:c7:91:34:9a:59:15:
65:12:d6:e1:68:c0:72:e6:2c:76:d9:6b:b7:55:aa:
8d:64:60:29:5a:70:ae:8f:34:ff:b5:a1:be:d5:6d:
c8:34:0c:2a:77:25:58:e8:5d:99:0e:e8:b4:e4:f0:
fb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:DF:29:05:82:22:30:D9:61:18:F6:A8:F3:B2:14:9A:A0:04:16:E6
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS209104.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.103.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:9a:5f:b4:eb:88:44:7e:c2:55:db:e5:54:4f:9c:0f:1b:ca:
ed:4b:bd:69:e1:8f:0a:80:de:28:ba:d4:95:a0:73:e7:b4:d5:
33:bd:25:85:01:e6:5c:a4:57:ac:35:a0:4c:62:59:2d:46:c4:
f9:27:e5:ce:fe:dc:ac:9d:94:af:e3:5f:db:42:7b:59:cf:cf:
7d:48:99:02:01:98:89:71:bf:ca:68:0e:8e:a2:0b:fb:26:d6:
a9:0b:88:c5:12:72:8e:68:8c:c0:ff:61:be:00:5c:53:6c:d5:
fa:90:39:e1:4d:c1:69:0d:08:91:6c:03:9c:fd:03:74:00:bf:
83:7f:ce:38:40:58:17:57:37:ee:9d:fe:fd:20:b4:f2:93:6d:
37:d1:b6:92:ed:61:01:67:4d:74:fb:2d:3f:d4:52:c2:ef:b3:
bd:1a:7b:c2:79:90:a9:bd:61:50:18:76:fe:15:4f:c1:c6:34:
d3:db:0d:55:87:f4:0d:76:31:3d:b5:b4:6d:9d:5e:6b:09:fa:
c8:50:c4:0e:fc:92:5d:97:02:d3:20:e2:8d:0e:1a:33:8c:ce:
e7:20:31:31:7a:5f:93:b9:a9:2a:61:74:b9:c5:f6:94:db:c6:
3f:ff:bb:c8:c8:92:dd:a9:b1:3c:84:df:32:3a:37:80:35:59:
57:e7:5c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:02:44 2026 by rpki-client