Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS214669.roa
File: AS214669.roa (raw, json)
Hash identifier: HM0xs/b988ZOVxkCCgXnSIHHdLOZ0RalXM4wGAsi2VQ=
Subject key identifier: 82:B4:EF:6E:9B:F8:1B:4F:D2:F7:72:B9:56:1C:A8:B5:F5:2E:D7:04
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 4312BA1B5D2A0894843B8D426EBDE886ACB72D39
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS214669.roa
Signing time: Wed 02 Sep 2026 09:49:32 +0000
ROA not before: Wed 02 Sep 2026 09:44:32 +0000
ROA not after: Wed 01 Sep 2027 09:49:32 +0000
asID: 214669
IP address blocks: 143.20.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:12:ba:1b:5d:2a:08:94:84:3b:8d:42:6e:bd:e8:86:ac:b7:2d:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 2 09:44:32 2026 GMT
Not After : Sep 1 09:49:32 2027 GMT
Subject: CN=82B4EF6E9BF81B4FD2F772B9561CA8B5F52ED704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:78:30:49:6e:4a:bc:22:27:22:f2:78:cc:20:
1b:2b:ba:7f:99:45:a3:37:20:3c:9d:7b:dd:4e:b8:
a3:67:60:d0:73:b9:e8:3f:b3:37:3e:7b:f1:d6:e6:
9d:e6:23:18:63:0f:db:eb:ec:a5:b5:98:35:f9:09:
c2:7c:35:8d:81:a8:b1:e8:6b:f6:28:b4:50:b5:a6:
ba:4d:7a:3a:17:91:80:e5:85:dc:ec:ca:d8:fb:e3:
3f:72:a1:54:e5:a7:9b:4f:53:d2:4e:fb:be:89:de:
d7:e7:00:a7:e7:d6:91:e6:b1:90:0a:73:c3:6f:67:
89:0a:9d:33:f3:ea:d8:33:01:70:53:33:92:dd:37:
ef:b5:b0:e6:27:fa:20:26:71:c5:31:13:f4:a1:31:
2f:90:e1:ac:0b:2c:24:94:79:ce:4d:d2:12:d5:34:
c3:06:ba:35:21:1a:b0:6b:22:89:f4:83:d2:19:47:
06:f1:4e:dd:5f:44:71:c7:bf:3b:15:0f:e9:d1:45:
93:74:88:f9:ce:46:5e:0e:a7:82:a7:93:2f:ac:e8:
6b:2e:0b:6a:6c:3f:35:0e:3a:9c:11:36:c0:c8:52:
02:5a:25:74:53:62:21:06:5c:7e:f3:8b:a9:01:d7:
3c:e4:3a:70:c2:5a:d8:9f:7f:0b:db:58:3a:55:52:
14:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B4:EF:6E:9B:F8:1B:4F:D2:F7:72:B9:56:1C:A8:B5:F5:2E:D7:04
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS214669.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.81.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:5a:21:06:39:51:c1:c1:cb:57:87:bc:42:cb:24:9e:38:df:
75:5b:9d:d7:8e:31:61:bf:c5:fe:9a:b4:5a:7f:bb:43:0e:b4:
62:cb:dc:a1:bb:37:90:17:1f:e3:d6:5c:5d:2f:3e:fe:7d:6d:
fb:7b:57:a5:8b:81:d5:50:f2:d1:e8:fd:c0:8b:44:a1:98:d3:
e3:49:d5:4d:1b:d6:da:df:83:52:1a:8d:a4:46:cb:3c:23:b6:
b3:db:bb:ad:f6:f6:cb:40:6d:14:29:76:12:f2:3b:e3:ad:44:
b1:3a:ee:c9:7f:22:5b:10:a5:75:11:ee:2a:81:50:cb:52:a8:
74:f5:0a:e8:62:5d:35:c4:fb:1f:29:00:31:87:f0:96:d2:c5:
b6:7b:71:68:e6:03:75:ca:81:79:57:f5:40:37:43:ef:c5:ad:
9d:7f:3a:20:ae:d2:25:8f:26:8d:5f:4a:d0:ce:91:ad:71:1f:
e8:d2:91:47:ff:b2:88:3b:ee:30:fd:64:79:03:ab:79:fb:42:
f6:8f:e0:1e:6b:09:53:5d:af:8b:86:38:4f:48:22:a3:09:66:
a5:c7:d6:b1:3a:2b:cd:83:9f:3c:35:a2:71:6e:86:f2:5b:a9:
02:47:0d:a3:42:61:fa:b1:70:33:23:c5:80:df:23:ca:2e:be:
c0:29:1d:7a
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUQxK6G10qCJSEO41Cbr3ohqy3LTkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk
ZWI5M2Q5ZDAeFw0yNjA5MDIwOTQ0MzJaFw0yNzA5MDEwOTQ5MzJaMDMxMTAvBgNV
BAMTKDgyQjRFRjZFOUJGODFCNEZEMkY3NzJCOTU2MUNBOEI1RjUyRUQ3MDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCeDBJbkq8Iici8njMIBsrun+Z
RaM3IDyde91OuKNnYNBzueg/szc+e/HW5p3mIxhjD9vr7KW1mDX5CcJ8NY2BqLHo
a/YotFC1prpNejoXkYDlhdzsytj74z9yoVTlp5tPU9JO+76J3tfnAKfn1pHmsZAK
c8NvZ4kKnTPz6tgzAXBTM5LdN++1sOYn+iAmccUxE/ShMS+Q4awLLCSUec5N0hLV
NMMGujUhGrBrIon0g9IZRwbxTt1fRHHHvzsVD+nRRZN0iPnORl4Op4Knky+s6Gsu
C2psPzUOOpwRNsDIUgJaJXRTYiEGXH7zi6kB1zzkOnDCWtiffwvbWDpVUhQ7AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUgrTvbpv4G0/S93K5VhyotfUu1wQwHwYDVR0j
BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2
MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2
NVBaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt
NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTMjE0NjY5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjxRR
MA0GCSqGSIb3DQEBCwUAA4IBAQBbWiEGOVHBwctXh7xCyySeON91W53XjjFhv8X+
mrRaf7tDDrRiy9yhuzeQFx/j1lxdLz7+fW37e1eli4HVUPLR6P3Ai0ShmNPjSdVN
G9ba34NSGo2kRss8I7az27ut9vbLQG0UKXYS8jvjrUSxOu7JfyJbEKV1Ee4qgVDL
Uqh09QroYl01xPsfKQAxh/CW0sW2e3Fo5gN1yoF5V/VAN0Pvxa2dfzogrtIljyaN
X0rQzpGtcR/o0pFH/7KIO+4w/WR5A6t5+0L2j+AeawlTXa+LhjhPSCKjCWalx9ax
OivNg588NaJxbobyW6kCRw2jQmH6sXAzI8WA3yPKLr7AKR16
-----END CERTIFICATE-----
Generated at Mon Sep 21 13:44:52 2026 by rpki-client