Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS215728.roa
File: AS215728.roa (raw, json)
Hash identifier: koeKGKqedBbYMoGJ5R5wpCMoac6fUWKjySosdWSMw2Q=
Subject key identifier: 9A:B7:0E:EF:8E:9A:2F:44:D3:29:50:65:D2:87:23:8F:40:D9:3D:49
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 6B600872C21BE43848D199EB176BD278CDA3B1FA
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS215728.roa
Signing time: Tue 08 Sep 2026 04:14:43 +0000
ROA not before: Tue 08 Sep 2026 04:09:43 +0000
ROA not after: Tue 07 Sep 2027 04:14:43 +0000
asID: 215728
IP address blocks: 143.20.42.0/24 maxlen: 24
143.20.105.0/24 maxlen: 24
143.20.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:60:08:72:c2:1b:e4:38:48:d1:99:eb:17:6b:d2:78:cd:a3:b1:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 8 04:09:43 2026 GMT
Not After : Sep 7 04:14:43 2027 GMT
Subject: CN=9AB70EEF8E9A2F44D3295065D287238F40D93D49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:52:8d:e2:49:cf:3c:5c:50:e2:c4:d1:4b:e0:
9e:cf:7d:ce:bb:34:81:25:1b:51:6e:de:d2:79:09:
44:d6:a9:16:5c:f5:c2:8c:1c:87:0b:f0:98:c6:56:
2f:45:e4:e4:f9:9c:cc:b3:a6:a7:ab:ac:31:40:76:
0a:0b:f4:96:f0:1f:82:f2:cc:5d:02:2e:67:60:82:
e7:7a:a6:c2:0c:4e:ce:b6:c8:f0:93:f0:15:3d:df:
9b:be:e1:31:59:e8:07:34:9a:23:5e:28:31:d1:ce:
23:66:6a:a9:e0:81:7e:ba:78:90:f0:7e:4b:1e:ab:
50:8d:bd:53:d4:5b:9b:db:6d:61:04:7a:68:f8:b0:
7c:81:c0:44:ef:38:46:00:a3:e4:bf:ad:67:f8:5d:
c7:8c:6e:96:d8:58:8e:fc:9a:4a:cb:e2:55:08:f2:
70:6c:19:2b:2e:34:25:70:be:26:df:fa:33:d1:88:
2a:a7:63:db:65:91:70:d1:3c:97:e3:ef:31:f7:9d:
4d:5c:aa:b1:65:4e:7f:6f:0d:df:f5:c4:ea:4e:33:
bc:ac:33:7b:6f:b6:8e:2a:e8:94:40:c0:05:9b:ab:
79:98:f7:2e:ac:fe:b0:ef:77:1a:26:41:53:33:25:
67:7e:a3:69:9d:6e:f3:89:4f:ab:bd:33:c5:d9:2c:
d4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B7:0E:EF:8E:9A:2F:44:D3:29:50:65:D2:87:23:8F:40:D9:3D:49
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS215728.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.42.0/24
143.20.105.0/24
143.20.191.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:85:0d:1d:5b:7b:f7:a3:74:57:2b:09:f7:35:c0:81:43:33:
98:53:54:09:2d:c0:64:45:be:2e:bb:19:24:77:34:6f:81:01:
46:f3:7d:fe:ab:b8:5d:fd:98:d1:6a:4a:43:05:bf:9a:9c:7a:
20:7c:9a:dd:a1:16:35:90:4d:96:09:b6:d1:3b:a8:a4:0c:6c:
88:76:f3:a7:48:57:9a:4f:b4:61:db:4b:e4:30:68:c1:98:3c:
65:a0:41:09:e3:57:0b:d7:e9:ae:f3:b1:f5:52:84:f6:92:6c:
c6:0d:f6:5a:3f:22:3e:78:20:bc:1d:54:15:0f:b8:43:72:aa:
b6:7d:3c:c0:10:90:3f:86:e2:00:e4:8a:6e:96:cd:9f:d2:d5:
07:9d:d7:15:3a:85:9a:1a:ac:1e:cf:2b:43:db:95:c0:db:f3:
0b:52:70:59:a4:7e:68:29:f2:da:8b:76:9d:5d:2c:d8:07:97:
a1:de:e9:1a:df:a9:4c:38:83:4d:66:4e:58:48:38:c6:e9:e4:
80:3c:06:4f:82:8e:d9:1a:50:c0:7e:2e:b4:9b:2c:0a:9e:a9:
04:a6:d2:03:33:19:63:2c:d5:e1:21:48:70:fb:c6:5f:f8:5f:
f1:19:3c:07:64:34:99:ba:eb:8c:b4:d7:38:a8:cb:28:27:67:
bc:28:ff:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:21:23 2026 by rpki-client