Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS21840.roa
File: AS21840.roa (raw, json)
Hash identifier: N90livDsFyVDzXXItXwRSU2yKw+e45LKXcdTqJLFjtY=
Subject key identifier: AB:C3:03:B9:65:75:03:46:1A:08:03:A6:83:92:3A:2A:63:11:2D:6A
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 745D991316267B63F4BB2A7945B0B552AF275114
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS21840.roa
Signing time: Tue 28 Oct 2025 09:38:14 +0000
ROA not before: Tue 28 Oct 2025 09:33:14 +0000
ROA not after: Tue 27 Oct 2026 09:38:14 +0000
asID: 21840
IP address blocks: 143.20.93.0/24 maxlen: 24
143.20.115.0/24 maxlen: 24
143.20.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:5d:99:13:16:26:7b:63:f4:bb:2a:79:45:b0:b5:52:af:27:51:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Oct 28 09:33:14 2025 GMT
Not After : Oct 27 09:38:14 2026 GMT
Subject: CN=ABC303B9657503461A0803A683923A2A63112D6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e0:40:d4:56:92:b9:ad:3d:09:99:05:d7:91:
be:4e:36:77:f5:e6:31:bd:e9:a8:b3:03:20:a0:e4:
ad:38:cd:f7:7c:c0:2a:c2:b0:fd:95:42:e0:75:c2:
4a:fe:5d:fc:78:ac:6f:b1:81:d1:2f:5a:61:db:5f:
1d:49:0b:9e:ab:d3:bf:f5:90:f3:0b:07:d3:4f:c6:
97:a8:8b:32:51:f3:8a:2e:c4:d1:56:a8:dd:c2:1f:
d9:89:54:1e:51:d0:b9:02:4d:1f:c4:68:b6:a2:fc:
c2:fa:e9:20:a8:cd:ba:53:26:fb:06:97:a6:13:04:
48:39:94:97:52:8f:eb:c8:c5:bc:71:4c:fa:ec:7a:
b0:4d:11:e3:77:8f:a9:34:21:0e:fc:0d:b7:fc:20:
16:6b:11:47:ec:99:fa:2f:81:01:66:48:7d:a5:a7:
80:c8:31:14:eb:0d:15:fc:85:0d:00:ac:5a:9a:5a:
5a:72:fb:d1:23:f5:92:26:dc:72:f1:59:17:b4:d7:
03:5e:d8:9a:17:8c:4c:56:54:61:c3:ef:2b:38:90:
c4:1e:e5:18:ff:5f:b2:5c:dc:98:f2:22:3e:12:75:
1e:bf:b0:83:fd:ef:a6:25:23:9c:72:04:90:06:e8:
37:60:68:cc:ce:73:a1:9f:62:08:dc:df:ec:90:87:
a9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C3:03:B9:65:75:03:46:1A:08:03:A6:83:92:3A:2A:63:11:2D:6A
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS21840.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.93.0/24
143.20.115.0/24
143.20.197.0/24
Signature Algorithm: sha256WithRSAEncryption
65:33:fd:af:9c:e3:ba:a7:f3:14:5e:d0:95:9a:cf:99:da:9c:
31:48:aa:28:6c:f4:94:78:e2:f0:87:1d:85:b5:f2:57:cd:28:
de:81:1a:c2:06:2e:58:30:3d:38:7c:e7:7b:3b:ad:63:49:ad:
fd:95:b0:06:ac:38:02:4e:ab:32:8b:12:03:1e:46:9d:2d:ac:
ab:0a:51:5c:2a:e7:a5:15:2e:5f:e8:f1:24:04:9d:2f:64:a7:
27:6d:4f:a7:b0:a6:31:bd:f9:87:9c:d1:16:5a:c3:9e:96:85:
6b:93:32:0b:1b:a2:ef:fc:a3:ed:2a:df:74:22:1d:c1:af:05:
02:d6:a6:05:ea:e3:0c:b1:f3:0e:0b:a8:c6:21:12:18:ff:6f:
42:0e:be:c1:8f:92:b2:b8:72:5b:20:50:d4:5d:61:f8:10:a3:
6d:ab:a9:54:dc:3d:1f:d9:24:6b:48:95:a4:0a:44:40:73:ac:
76:23:fb:61:8c:2e:40:b5:81:74:e8:73:b1:f9:59:5a:3e:35:
ab:70:aa:21:7e:89:db:59:fe:df:19:c3:ad:57:41:1a:f1:f0:
38:1c:b0:e9:32:33:73:c2:c4:9b:02:1a:0e:51:f2:6e:ea:73:
72:73:1e:08:23:62:a7:0c:dc:89:66:f0:06:df:b3:22:51:0d:
4c:96:3a:38
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:01:11 2025 by rpki-client