Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS393942.roa
File: AS393942.roa (raw, json)
Hash identifier: DBcIqdtaU4BKjOQAC8kddwLht8/iw28+IqpktHFjDmo=
Subject key identifier: CF:E4:F7:46:F2:4B:89:73:8D:DA:3F:DB:E7:77:5C:63:B2:57:37:F7
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 5F6365A93BA3C34B94EA470AEFCFD6F0B9B8F92B
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS393942.roa
Signing time: Wed 04 Nov 2026 08:49:39 +0000
ROA not before: Wed 04 Nov 2026 08:44:39 +0000
ROA not after: Wed 03 Nov 2027 08:49:39 +0000
asID: 393942
IP address blocks: 143.20.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:63:65:a9:3b:a3:c3:4b:94:ea:47:0a:ef:cf:d6:f0:b9:b8:f9:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Nov 4 08:44:39 2026 GMT
Not After : Nov 3 08:49:39 2027 GMT
Subject: CN=CFE4F746F24B89738DDA3FDBE7775C63B25737F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:73:5d:33:06:be:4f:14:eb:04:4b:cc:bc:da:
9e:d0:74:7c:31:cd:68:ee:c6:85:63:30:42:80:73:
6b:c3:4f:d5:ac:0d:be:33:6a:75:ab:8b:21:82:e7:
3a:de:8b:7e:88:b2:06:8a:54:3e:34:6a:c4:09:53:
eb:70:ed:f6:07:d1:0a:47:92:d6:a0:05:03:ef:6d:
3e:5e:84:ac:9b:b5:7e:d5:58:d2:18:b6:e5:a6:ee:
4b:36:3c:bd:07:8c:3a:0e:94:2c:1b:b4:13:de:bd:
ab:8d:8d:29:87:ff:b2:22:d9:ba:04:45:37:43:a9:
fc:75:01:3a:17:51:e8:3f:37:65:f5:e6:2c:c0:37:
fe:f4:c9:69:f4:b5:a5:99:ff:0e:1c:71:7c:4b:e3:
3a:32:65:d4:34:66:92:91:db:85:7a:c0:2d:40:27:
a8:18:7e:c2:90:4d:a6:c5:9f:2a:b1:15:1a:d1:53:
51:e9:66:5d:43:5c:22:12:9b:c5:89:27:dd:55:83:
43:29:05:6a:ec:66:2a:5b:e8:e4:ff:d4:55:55:76:
81:04:29:bf:52:7b:6c:55:30:29:2f:ba:80:20:fa:
a2:48:c6:8d:29:fe:e5:83:35:1b:d8:af:ed:ab:2f:
e6:79:a4:e0:c2:fb:d1:ad:df:40:bf:36:c3:8e:e3:
39:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E4:F7:46:F2:4B:89:73:8D:DA:3F:DB:E7:77:5C:63:B2:57:37:F7
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS393942.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.91.0/24
Signature Algorithm: sha256WithRSAEncryption
01:67:c8:0a:bb:8a:15:41:c1:83:f9:e0:2f:bf:2b:86:35:2c:
27:c6:52:41:84:2e:df:86:51:d5:c6:9c:b4:3d:10:8d:a3:35:
71:82:0e:ec:d3:6c:da:e0:db:9b:80:2a:69:e1:97:1a:83:b4:
cb:9a:ed:61:12:96:47:f9:f5:26:c8:6c:05:a1:1a:6a:5a:e6:
91:81:ae:fc:15:c7:ab:b0:e0:c5:35:c6:22:47:46:61:02:82:
d9:16:f7:d6:44:1e:5b:ba:01:e8:b0:df:4d:60:7e:fa:06:6f:
21:fd:2c:45:97:ff:54:eb:a9:47:d6:07:59:2a:df:92:42:92:
10:a0:7d:94:90:e8:b5:d7:59:08:06:9a:db:5c:a8:5c:14:97:
f1:bd:0f:32:38:3c:61:dc:21:50:07:9e:49:7d:49:29:ff:94:
14:5c:2d:e7:ac:11:24:2c:60:db:f5:95:c1:e8:a1:75:d7:0f:
34:bc:15:3e:6f:29:97:de:a2:62:92:c5:fa:8f:23:e8:50:2e:
1e:bc:27:32:70:7a:7b:e4:d5:6b:80:96:f9:f9:2e:e9:bf:8c:
ff:9a:ab:25:0a:a0:81:e1:d1:ee:6c:ba:7e:33:56:5a:46:1f:
dc:e2:f5:6b:38:bd:5c:51:cf:97:54:76:29:f2:f7:91:d0:54:
29:56:07:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 06:39:14 2026 by rpki-client