Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS219329.roa
File: AS219329.roa (raw, json)
Hash identifier: URGLgWn6qK/rcNdr5nLt0bWvUxVX8PbZLoUqcxL+6Ik=
Subject key identifier: E5:5C:59:30:5D:1A:F6:80:32:EC:94:0B:83:7C:32:1E:C1:A9:E8:26
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 6BA9D179C6DFC976D23825E1CA156FAB45C34DAF
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS219329.roa
Signing time: Wed 16 Sep 2026 12:29:28 +0000
ROA not before: Wed 16 Sep 2026 12:24:28 +0000
ROA not after: Wed 15 Sep 2027 12:29:28 +0000
asID: 219329
IP address blocks: 143.20.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 19:08:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:a9:d1:79:c6:df:c9:76:d2:38:25:e1:ca:15:6f:ab:45:c3:4d:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 16 12:24:28 2026 GMT
Not After : Sep 15 12:29:28 2027 GMT
Subject: CN=E55C59305D1AF68032EC940B837C321EC1A9E826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:da:07:49:01:16:cd:ff:a7:75:aa:5e:33:8e:
f4:1c:32:09:03:0c:5c:f9:7c:0f:fd:83:a2:1b:c1:
d2:d7:ea:58:c5:d3:98:2f:ec:4a:b3:12:34:e3:62:
eb:29:ab:57:50:f3:45:68:a2:79:d9:7e:eb:cb:f3:
4e:e4:c4:6d:17:ae:a4:89:51:66:94:ee:c3:82:47:
46:88:44:60:ce:e3:96:75:f2:45:ba:33:68:52:e7:
73:f9:1c:e3:3c:8c:e4:54:6a:16:51:24:40:3e:46:
03:c5:d1:b6:d2:fa:bb:aa:55:35:33:18:1c:55:c0:
bf:e1:18:b3:6d:41:6d:50:d5:41:80:53:8a:d1:3b:
30:5c:76:69:a3:ac:de:e5:f6:73:64:9c:f7:6f:13:
0d:f4:df:73:3e:16:64:cc:84:d5:49:a4:d5:ef:1f:
37:b1:0d:f7:90:77:1b:86:f5:1d:71:0b:79:ef:ee:
df:09:25:63:78:3a:cf:a2:cf:82:72:e9:3b:42:8d:
1a:30:3d:f7:ed:c7:43:1d:b4:c6:93:c5:cf:23:81:
54:6a:44:60:66:80:2a:d6:44:47:32:55:8c:a1:fd:
16:39:17:4e:54:35:39:a4:a3:aa:e7:62:b1:3a:4b:
f5:18:ce:bc:59:e2:54:7b:5c:20:9d:e2:59:b5:cc:
ee:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:5C:59:30:5D:1A:F6:80:32:EC:94:0B:83:7C:32:1E:C1:A9:E8:26
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS219329.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.227.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:c4:df:af:58:d3:6e:cc:a3:5c:9a:7f:2f:84:82:6c:e3:63:
ba:5e:e4:89:d7:10:8d:85:55:89:04:ef:63:68:53:24:73:7a:
b8:bb:aa:38:90:1d:21:2f:64:57:86:96:2f:a6:59:47:90:4a:
48:0f:73:20:61:1c:f9:b5:20:83:cc:e2:79:5f:dd:a6:32:71:
82:fa:47:0f:b5:4f:30:de:7d:a5:d7:d0:0c:95:9c:24:85:b7:
b4:dc:19:09:a3:4d:48:69:35:50:50:82:f6:21:87:9c:c1:38:
3f:5c:a2:e2:21:95:02:f4:22:b7:02:0d:6a:82:40:0e:c3:aa:
d7:ee:29:2b:24:15:25:f5:5b:68:3e:4d:65:e9:13:88:1d:e3:
5b:8e:b7:b7:42:52:45:76:11:9f:74:c0:e0:a6:f1:2f:d6:8a:
bc:f0:44:53:1e:04:58:63:b9:ac:d4:df:bd:24:b7:6b:0a:6d:
5c:c7:fb:fe:39:73:4d:39:ed:53:9d:13:ff:c6:34:81:75:aa:
2e:63:d3:f7:66:91:57:9f:1a:7f:e6:89:82:a6:36:f7:6d:b9:
c4:f9:85:0b:ca:ef:9e:c4:63:bc:06:c2:a6:84:bc:fe:19:15:
ef:dd:a7:dd:f4:d9:d1:3c:5b:3f:f4:93:96:a0:88:42:7e:87:
88:63:d5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 08:26:50 2026 by rpki-client