Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS209829.roa
File: AS209829.roa (raw, json)
Hash identifier: TBeaWUqAdyZxx1b3VjHKQU9ozq/7E9wAwZ7KEprnk/A=
Subject key identifier: 3D:51:25:9A:35:06:6A:1F:4A:09:F8:46:65:2C:41:46:ED:C4:A4:AB
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 295A263961FC3113A756367FA8A719913D628411
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS209829.roa
Signing time: Thu 10 Sep 2026 15:14:44 +0000
ROA not before: Thu 10 Sep 2026 15:09:44 +0000
ROA not after: Thu 09 Sep 2027 15:14:44 +0000
asID: 209829
IP address blocks: 143.20.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 01:19:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:5a:26:39:61:fc:31:13:a7:56:36:7f:a8:a7:19:91:3d:62:84:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 10 15:09:44 2026 GMT
Not After : Sep 9 15:14:44 2027 GMT
Subject: CN=3D51259A35066A1F4A09F846652C4146EDC4A4AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d0:90:b0:9b:23:5e:5a:6d:54:39:ad:d6:c9:
c4:ad:c8:dd:23:a6:9a:1f:6f:d1:b4:d0:3e:28:ba:
20:5e:ca:bb:e3:e3:eb:46:6c:6e:0c:75:65:16:80:
0d:e3:29:b5:40:8e:fc:a3:37:2c:f2:c2:69:b9:c7:
e9:dc:31:96:c6:0e:26:8e:b7:a9:b2:e6:50:6c:6d:
e9:6c:9f:cb:09:75:9a:55:cc:75:7e:e2:cc:9e:4f:
4a:bf:e1:84:af:39:04:c4:67:87:fa:de:ba:75:cb:
88:42:40:48:61:27:6f:60:a1:a7:2d:df:34:34:4a:
94:de:7e:80:90:1b:36:18:a4:7d:a5:1b:b3:cf:9e:
52:69:80:19:9e:95:bc:ed:3e:29:52:ab:81:52:ae:
5a:70:62:e4:95:8b:08:61:44:bc:90:28:17:97:e3:
c2:e4:65:cf:43:c1:f5:fb:b5:20:16:cf:00:1f:86:
c2:79:2c:b2:91:85:d5:b8:89:e6:f8:03:4a:c6:ba:
54:0a:08:53:9f:98:a3:04:9b:ae:c5:cf:c2:d7:1b:
64:75:5e:2a:4e:87:7e:96:b9:e7:7b:e5:4a:09:76:
f5:42:91:fd:78:46:94:2b:27:84:ff:07:87:43:a7:
f0:e0:e1:95:c3:77:4e:97:4f:93:fb:50:4d:72:b2:
f8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:51:25:9A:35:06:6A:1F:4A:09:F8:46:65:2C:41:46:ED:C4:A4:AB
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS209829.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.173.0/24
Signature Algorithm: sha256WithRSAEncryption
21:1f:6d:8b:1e:b8:c7:3c:76:7e:34:07:d6:8d:81:da:af:84:
e1:62:f0:18:60:5d:f2:ce:c1:2a:4d:2b:e2:55:61:2d:20:af:
63:85:83:4c:60:b8:3e:f6:56:3c:20:e0:d2:b2:f2:94:d0:0b:
f4:4d:9d:82:7a:02:27:cf:60:2b:94:dd:1b:8a:19:9c:50:14:
31:7c:6b:f1:19:90:a1:c6:f0:6c:17:b2:6f:01:0a:57:e0:58:
2e:63:c1:80:3b:70:e6:ea:1f:35:7c:dd:ef:97:4e:72:34:f5:
fd:47:ad:00:9b:71:21:f2:84:b5:a5:d9:48:ea:00:60:3f:0b:
3c:0b:e3:43:f7:7a:9c:61:27:ec:d7:c4:c5:9d:f0:16:ea:78:
8e:a3:d1:d7:bd:48:b0:e7:5b:6d:79:4c:90:78:3f:50:0d:8a:
8a:4e:7b:b5:34:38:8a:d4:08:e6:24:ee:75:de:c4:81:9a:f3:
a4:6a:92:b7:ab:b1:67:9b:e8:d4:65:d8:5d:66:21:92:6f:4f:
b7:8a:c6:40:19:91:43:1c:32:69:92:ec:d6:21:95:62:ea:f7:
34:e5:92:72:4b:a4:ab:7b:5a:2e:59:4b:41:da:ec:a2:53:63:
7e:b3:81:ee:af:7c:f0:d4:4f:e7:4a:89:6b:50:45:bb:af:dd:
bd:03:58:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:34:22 2026 by rpki-client