Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS214647.roa
File: AS214647.roa (raw, json)
Hash identifier: Nw+yoRJRRmwIPv4LbLX/GzGqQIWonTG3FeG0TmiwSHk=
Subject key identifier: F8:F8:84:3D:89:D4:DD:3F:ED:8B:56:2C:AC:A0:D7:54:ED:39:85:FB
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 44A60704B0D7FB76F95DA9E4781D53A2D9FA9630
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS214647.roa
Signing time: Wed 09 Sep 2026 17:07:04 +0000
ROA not before: Wed 09 Sep 2026 17:02:04 +0000
ROA not after: Wed 08 Sep 2027 17:07:04 +0000
asID: 214647
IP address blocks: 143.20.214.0/24 maxlen: 24
143.20.217.0/24 maxlen: 24
143.20.226.0/24 maxlen: 24
143.20.229.0/24 maxlen: 24
143.20.237.0/24 maxlen: 24
143.20.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 01:19:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:a6:07:04:b0:d7:fb:76:f9:5d:a9:e4:78:1d:53:a2:d9:fa:96:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 9 17:02:04 2026 GMT
Not After : Sep 8 17:07:04 2027 GMT
Subject: CN=F8F8843D89D4DD3FED8B562CACA0D754ED3985FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4a:74:7d:d4:fd:be:66:76:e6:d4:07:26:55:
f9:97:66:02:b8:08:1c:94:91:44:c2:b6:3a:59:01:
06:d7:7c:f9:71:65:77:ec:1f:44:e3:e5:52:87:53:
bd:a2:e4:90:3e:90:5e:6d:75:2f:b6:4d:37:7f:07:
81:b6:83:89:bd:db:20:0c:67:63:d7:29:a3:94:46:
87:6a:51:07:34:d8:71:ff:13:ee:2c:ca:68:ca:4e:
ad:03:5b:05:6a:9a:70:a4:9f:c8:d0:60:26:dd:c0:
fa:3b:e3:20:76:ba:97:40:98:be:e6:48:ee:98:77:
8b:d2:dd:c5:04:6d:47:d7:2d:03:89:49:d5:2c:5b:
4d:55:69:03:77:7e:f4:a3:01:86:fc:36:45:f0:29:
61:82:98:21:0b:aa:9b:4e:74:a9:d6:84:cd:22:cf:
7b:f1:88:d6:53:02:01:68:a0:ce:a6:f2:b4:69:47:
86:4e:ef:9f:01:7c:ce:a8:9e:d3:b7:d6:e4:8f:fd:
1d:4e:64:27:b5:51:99:44:80:d1:60:2c:21:c8:e0:
66:ba:8d:32:ca:89:58:bb:b4:7c:7f:c3:62:53:87:
77:65:fc:d1:9f:c2:8a:3d:cd:bf:1c:53:6a:3b:78:
3f:1a:bc:d6:21:d6:3e:d6:38:00:ce:e6:c1:a0:f1:
c9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F8:84:3D:89:D4:DD:3F:ED:8B:56:2C:AC:A0:D7:54:ED:39:85:FB
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS214647.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.214.0/24
143.20.217.0/24
143.20.226.0/24
143.20.229.0/24
143.20.237.0/24
143.20.254.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:8e:39:08:bc:1d:5c:32:5a:52:3f:48:38:4f:8a:57:93:61:
b9:b0:b1:2a:a0:b7:a9:f8:58:9e:a7:e7:4d:97:83:72:5d:1c:
de:85:9a:96:b3:16:90:64:5a:93:b6:b1:0a:db:f2:a4:ff:28:
93:88:c1:96:1c:28:19:cf:9b:37:5f:7d:5e:4c:fb:34:fc:97:
62:b1:85:0e:fe:52:7e:0e:ec:cb:7f:63:0f:0c:17:90:a3:08:
60:78:54:82:29:b3:35:b7:a2:45:30:2b:fd:f2:bc:9e:31:9e:
c6:76:b0:07:d4:52:dd:14:4e:f3:5f:30:6d:55:e6:c9:cf:b3:
3c:87:88:3e:11:26:53:ee:5e:62:fa:63:cb:ad:13:d0:68:90:
e5:1a:4d:60:5c:43:54:7b:79:f9:c4:9a:2e:cc:ac:dd:03:66:
f0:91:c0:6d:c4:68:bf:ee:25:76:5f:f7:96:8b:b8:4a:c2:d2:
14:da:a2:23:dd:b5:c9:ac:35:d9:a5:1a:46:e0:da:ad:28:63:
17:15:aa:53:eb:c6:4c:ba:2e:8e:69:df:a4:53:ef:e6:dd:cc:
b9:90:fb:e2:00:b6:9b:aa:65:8f:29:02:70:8b:ec:4e:62:3a:
b4:df:b4:2d:1a:ae:3e:16:5a:82:14:49:ed:03:da:f2:fa:3f:
c7:47:cf:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:34:28 2026 by rpki-client