Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS210083.roa
File: AS210083.roa (raw, json)
Hash identifier: AZ1QVN0ahNASrD7/dV9h7oXcRewUX97sw/l2orLmk54=
Subject key identifier: EA:82:92:73:6F:25:72:04:BA:6A:0D:5A:58:CB:40:B4:7D:8B:F9:B4
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 049CD60B2829BF08462AEE4454D3EE897EC96E97
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS210083.roa
Signing time: Wed 09 Sep 2026 15:58:24 +0000
ROA not before: Wed 09 Sep 2026 15:53:24 +0000
ROA not after: Wed 08 Sep 2027 15:58:24 +0000
asID: 210083
IP address blocks: 143.20.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:9c:d6:0b:28:29:bf:08:46:2a:ee:44:54:d3:ee:89:7e:c9:6e:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 9 15:53:24 2026 GMT
Not After : Sep 8 15:58:24 2027 GMT
Subject: CN=EA8292736F257204BA6A0D5A58CB40B47D8BF9B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6a:46:e9:3d:6d:3a:53:a2:04:58:36:75:52:
e5:12:de:90:15:17:11:c6:41:ba:c8:18:5b:7c:5c:
a4:cf:73:56:ef:84:fc:5c:51:fb:25:16:fe:3b:c5:
b1:a5:2d:e0:23:18:34:6c:e5:af:47:6e:2b:94:29:
d5:0f:27:f6:9d:19:91:cb:02:dc:a4:9c:28:fb:67:
55:a6:65:60:12:dd:15:2d:3f:63:e2:6a:9a:dd:97:
d7:32:42:9b:c2:35:5e:4b:84:43:f2:13:aa:1c:10:
10:2f:bc:fc:3c:8f:a5:56:fd:e7:90:bd:68:bd:01:
1f:cc:b1:75:e7:1f:8d:96:71:9b:ff:35:fe:36:2c:
40:02:e5:b5:a7:ce:ce:d8:5d:1b:4a:84:56:b9:22:
7f:2a:3f:28:2f:24:90:dd:3e:32:c7:cb:bb:82:fe:
02:47:57:7d:9c:57:d5:71:b5:b3:49:e4:1e:18:e1:
35:3b:bf:bc:54:e6:f6:86:b4:38:13:cf:cb:c4:77:
4c:1c:2d:74:ff:d1:ed:72:99:02:a9:fe:68:88:8b:
14:d1:78:da:96:18:4e:cc:f4:c0:95:20:b9:03:f3:
d2:bd:ff:88:7e:78:ed:22:13:da:8d:98:fd:c7:a2:
17:24:f7:df:d2:5f:e9:5e:66:b1:da:a6:b8:1e:26:
97:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:82:92:73:6F:25:72:04:BA:6A:0D:5A:58:CB:40:B4:7D:8B:F9:B4
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS210083.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.216.0/24
Signature Algorithm: sha256WithRSAEncryption
80:8d:4c:a5:03:08:cc:1b:66:42:7d:7c:ab:fa:88:33:66:1a:
ef:da:e8:5f:25:10:03:78:6f:fa:34:96:b2:6c:9a:d8:ac:da:
b9:0c:4b:9d:af:63:b4:ab:bf:1b:4c:ad:29:01:01:1f:a9:57:
18:3e:9d:65:d9:0d:2e:45:ec:f9:82:c5:5a:33:95:7b:ff:2b:
38:57:0b:47:1d:79:6a:be:d2:ce:c6:7a:69:7e:88:f5:96:cc:
d2:04:2e:6c:2f:7b:2e:2c:7b:2d:22:4c:78:10:cf:1e:1d:55:
2a:53:9c:3d:9b:3a:15:59:e6:f2:78:e9:f2:fa:6c:c2:6e:c5:
62:59:76:c5:15:02:36:c0:4f:64:ac:ec:26:56:e4:61:22:dc:
72:ec:57:ea:74:3c:d9:45:ef:51:b7:46:80:2d:84:a9:e0:72:
58:ae:54:6e:01:cd:59:c9:f1:d1:8d:e3:fd:5e:01:5b:cd:23:
b2:7c:19:8e:d8:29:9c:c4:fc:e6:67:cf:3f:ab:a7:28:e6:d5:
10:55:e5:0d:9b:35:fa:0e:60:39:4a:ca:57:f0:88:b5:15:3a:
18:e5:a9:c6:94:f2:4b:50:34:70:94:6e:13:16:00:88:bf:21:
b7:57:f2:52:5b:80:c8:3b:e8:c6:88:bf:e1:07:c7:fc:d3:d6:
62:14:38:92
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUBJzWCygpvwhGKu5EVNPuiX7JbpcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk
ZWI5M2Q5ZDAeFw0yNjA5MDkxNTUzMjRaFw0yNzA5MDgxNTU4MjRaMDMxMTAvBgNV
BAMTKEVBODI5MjczNkYyNTcyMDRCQTZBMEQ1QTU4Q0I0MEI0N0Q4QkY5QjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1akbpPW06U6IEWDZ1UuUS3pAV
FxHGQbrIGFt8XKTPc1bvhPxcUfslFv47xbGlLeAjGDRs5a9HbiuUKdUPJ/adGZHL
AtyknCj7Z1WmZWAS3RUtP2Piaprdl9cyQpvCNV5LhEPyE6ocEBAvvPw8j6VW/eeQ
vWi9AR/MsXXnH42WcZv/Nf42LEAC5bWnzs7YXRtKhFa5In8qPygvJJDdPjLHy7uC
/gJHV32cV9VxtbNJ5B4Y4TU7v7xU5vaGtDgTz8vEd0wcLXT/0e1ymQKp/miIixTR
eNqWGE7M9MCVILkD89K9/4h+eO0iE9qNmP3Hohck99/SX+leZrHaprgeJpczAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQU6oKSc28lcgS6ag1aWMtAtH2L+bQwHwYDVR0j
BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2
MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2
NVBaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt
NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTMjEwMDgzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjxTY
MA0GCSqGSIb3DQEBCwUAA4IBAQCAjUylAwjMG2ZCfXyr+ogzZhrv2uhfJRADeG/6
NJaybJrYrNq5DEudr2O0q78bTK0pAQEfqVcYPp1l2Q0uRez5gsVaM5V7/ys4VwtH
HXlqvtLOxnppfoj1lszSBC5sL3suLHstIkx4EM8eHVUqU5w9mzoVWebyeOny+mzC
bsViWXbFFQI2wE9krOwmVuRhItxy7FfqdDzZRe9Rt0aALYSp4HJYrlRuAc1ZyfHR
jeP9XgFbzSOyfBmO2CmcxPzmZ88/q6co5tUQVeUNmzX6DmA5SspX8Ii1FToY5anG
lPJLUDRwlG4TFgCIvyG3V/JSW4DIO+jGiL/hB8f809ZiFDiS
-----END CERTIFICATE-----
Generated at Sun Sep 20 23:21:49 2026 by rpki-client