Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS214677.roa
File: AS214677.roa (raw, json)
Hash identifier: EFcuZOQWJ1RdGgBERD7OVl0Mz8Ha06ZmD6hqo5RzItU=
Subject key identifier: F8:0F:0F:CE:7B:1E:AD:C1:1F:6E:85:E1:2B:27:C4:AA:C0:0F:5E:61
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 2757153BDFF3626503499C7ACFAB2AF14CD3F630
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS214677.roa
Signing time: Sun 20 Sep 2026 15:32:52 +0000
ROA not before: Sun 20 Sep 2026 15:27:52 +0000
ROA not after: Sun 19 Sep 2027 15:32:52 +0000
asID: 214677
IP address blocks: 143.20.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 19:08:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:57:15:3b:df:f3:62:65:03:49:9c:7a:cf:ab:2a:f1:4c:d3:f6:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 20 15:27:52 2026 GMT
Not After : Sep 19 15:32:52 2027 GMT
Subject: CN=F80F0FCE7B1EADC11F6E85E12B27C4AAC00F5E61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5b:89:de:8e:3e:9f:4f:fc:9b:22:c7:a1:14:
d7:2e:2c:52:36:8c:0b:80:2d:39:76:85:fb:f3:db:
32:c4:19:4d:00:a3:12:f1:53:a2:e3:1a:33:55:e8:
ff:8a:bb:cc:ed:30:f3:a5:18:0e:3a:2c:91:30:7a:
ec:28:dd:27:2e:bb:2f:58:3a:06:d6:5a:3b:f6:60:
57:10:7e:28:bd:fc:1c:8f:84:f6:8e:dd:2a:a7:d6:
45:66:c1:a3:9c:79:ce:24:84:46:35:b2:06:2a:93:
4d:44:62:a0:21:0c:8d:82:f2:4e:76:21:2e:aa:65:
bc:da:e9:a3:6b:7d:7e:40:07:09:41:6e:48:88:0c:
e3:5c:4d:22:9f:d9:ea:f7:68:aa:f3:82:bd:19:4b:
18:fb:ed:f4:e0:f7:8c:55:5c:dc:20:03:86:ec:ad:
4f:5b:38:ba:a3:36:e8:bc:37:70:24:27:98:c1:50:
cf:08:64:6c:07:b9:50:ab:e7:b0:75:ef:1f:98:1a:
ee:1d:39:e3:b8:29:c4:dc:ec:e3:84:37:75:89:fc:
4b:1f:83:68:9a:7c:3d:f3:ab:fe:ea:67:06:b2:ec:
d0:db:37:c3:fc:d4:3f:28:10:e5:e9:f8:75:79:d5:
5d:07:72:34:82:61:4d:cd:50:5b:e5:c9:61:20:6f:
85:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:0F:0F:CE:7B:1E:AD:C1:1F:6E:85:E1:2B:27:C4:AA:C0:0F:5E:61
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS214677.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.154.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:6d:a6:53:f9:10:d7:5f:15:d7:0c:e9:58:6b:7d:b3:32:e9:
88:87:7e:e6:20:34:ce:9f:a1:3f:29:c2:7c:ab:c9:71:16:73:
97:2e:62:0c:99:bc:ff:73:97:44:36:8c:fc:b8:66:d4:d2:b2:
cd:45:8e:10:e7:fb:fd:37:62:bd:2f:af:a1:ce:94:c4:78:23:
6e:18:ed:cd:c0:b6:c7:eb:b4:d6:d1:ff:20:a6:0d:8f:c1:03:
bb:bf:9a:51:71:96:07:7e:d1:6b:21:36:f5:b4:b0:b9:d0:11:
5d:d6:5c:26:a7:b0:53:1f:ce:b6:15:d7:02:81:97:df:d2:bf:
c2:86:2d:3a:3d:9b:f3:96:43:e3:7e:ce:ff:62:b4:01:13:f3:
dc:5f:2f:f0:41:09:f4:04:54:3c:c3:5c:ad:1e:b0:42:49:be:
ee:7b:c5:b8:a6:43:00:78:77:44:bb:60:cf:fe:82:9d:44:18:
52:d7:f4:cf:7f:25:4f:60:7f:5b:eb:c7:50:c6:d3:1c:f3:86:
a8:17:2c:85:27:88:1b:cc:db:2f:1e:db:23:39:1d:e3:7b:ce:
ca:e2:25:62:05:2a:40:f9:f9:bf:04:ea:0f:86:b7:ae:f8:e1:
f1:bd:e4:c7:4b:6b:e9:06:1a:45:dd:38:a4:11:5f:b1:72:4f:
9f:37:0f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:56:21 2026 by rpki-client