Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS395374.roa
File: AS395374.roa (raw, json)
Hash identifier: mtGcnqu4Gxug+WNG+n4nwk2NvPTlzQIbX7H8FyoB8U0=
Subject key identifier: 3E:A1:0C:7E:8E:D2:01:D9:A0:9C:F0:D5:BF:F9:82:71:15:70:40:DB
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 3EA16417ED41CB7CACF06680E70815E60C3AFDAE
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS395374.roa
Signing time: Thu 29 Oct 2026 01:49:39 +0000
ROA not before: Thu 29 Oct 2026 01:44:39 +0000
ROA not after: Thu 28 Oct 2027 01:49:39 +0000
asID: 395374
IP address blocks: 143.20.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:a1:64:17:ed:41:cb:7c:ac:f0:66:80:e7:08:15:e6:0c:3a:fd:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Oct 29 01:44:39 2026 GMT
Not After : Oct 28 01:49:39 2027 GMT
Subject: CN=3EA10C7E8ED201D9A09CF0D5BFF98271157040DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:db:07:cb:97:29:df:ec:c6:16:66:55:c8:73:
b5:d8:83:9d:75:c6:8c:33:fd:6d:58:a2:fc:26:bf:
3d:3a:1f:65:db:5e:71:e4:68:99:5c:9f:b4:0e:e0:
52:18:f9:12:11:20:5f:43:1f:4c:79:8d:84:3b:96:
8c:e6:92:a7:46:fa:ff:3e:7e:ca:f0:84:ce:11:d5:
a9:f7:d4:72:6d:79:9b:31:a2:a8:09:59:cb:33:62:
b9:b5:6c:ee:77:dd:56:51:88:56:34:00:30:85:99:
25:75:e1:9e:7e:c7:e9:93:56:d7:88:9c:9a:c5:af:
c0:ef:46:50:1e:4d:9d:3c:f5:72:aa:75:9c:c6:45:
a7:b5:e3:39:b6:ad:09:6e:5b:d4:d4:a4:00:6b:36:
37:94:26:9a:d1:6e:7a:ee:95:ad:81:46:a0:95:70:
2f:4a:5f:e5:50:72:4c:2b:74:4d:5e:4b:14:34:d6:
95:df:cf:c6:ca:e9:48:ad:87:ae:96:5d:74:78:5f:
65:e5:f7:6a:0c:58:27:26:07:5e:ad:c3:01:9a:0e:
3e:d2:0a:32:c1:e9:4b:97:2d:1c:92:7c:97:8b:99:
14:3e:b1:d6:38:d4:b6:99:b8:3a:0d:cb:d9:d1:08:
52:6e:03:9d:78:2d:c8:30:66:f5:a6:85:d1:88:93:
69:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A1:0C:7E:8E:D2:01:D9:A0:9C:F0:D5:BF:F9:82:71:15:70:40:DB
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS395374.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.90.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:3e:b6:63:3a:22:9e:e8:d4:0f:d9:98:22:5a:74:a1:3d:cb:
88:86:4d:ac:43:47:cd:9d:90:5a:de:3b:5c:d2:d1:95:7f:19:
89:d9:b0:5f:fc:c8:13:5e:18:73:0d:65:46:c3:1f:da:86:a0:
6f:f0:d9:7d:78:85:79:3c:9c:9d:17:de:e2:41:b8:25:16:c6:
70:cc:1e:5c:37:77:4d:c7:1d:a1:2f:4a:fc:13:42:eb:43:5b:
f7:56:26:3e:fa:1a:eb:9d:5c:f3:77:e8:fb:f0:ee:53:37:6d:
2c:fb:0d:8e:9b:1b:f3:3f:47:8a:30:45:8f:bd:77:a4:1c:dc:
1b:22:ca:7f:1a:35:d2:f1:23:9e:52:d3:4b:34:f6:67:7b:19:
98:95:ea:0e:c3:77:ad:85:53:d6:91:7e:18:7f:76:c3:6f:19:
14:3b:38:1e:18:f0:d3:5f:67:25:8d:05:88:a4:c0:d6:f0:15:
9d:29:b4:08:d7:ab:ea:93:0d:32:99:5a:9b:4a:ea:48:e1:3e:
6e:5e:d4:a1:47:0a:3d:f4:25:f4:e3:7d:91:af:86:bb:d7:a9:
18:0a:6a:54:30:e9:54:93:e3:33:41:b5:aa:91:ad:ac:39:da:
89:e8:2a:55:6f:b0:19:e0:af:0f:3b:fc:e9:38:5d:50:a3:32:
85:ef:6c:70
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUPqFkF+1By3ys8GaA5wgV5gw6/a4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk
ZWI5M2Q5ZDAeFw0yNjEwMjkwMTQ0MzlaFw0yNzEwMjgwMTQ5MzlaMDMxMTAvBgNV
BAMTKDNFQTEwQzdFOEVEMjAxRDlBMDlDRjBENUJGRjk4MjcxMTU3MDQwREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC22wfLlynf7MYWZlXIc7XYg511
xowz/W1Yovwmvz06H2XbXnHkaJlcn7QO4FIY+RIRIF9DH0x5jYQ7lozmkqdG+v8+
fsrwhM4R1an31HJteZsxoqgJWcszYrm1bO533VZRiFY0ADCFmSV14Z5+x+mTVteI
nJrFr8DvRlAeTZ089XKqdZzGRae14zm2rQluW9TUpABrNjeUJprRbnrula2BRqCV
cC9KX+VQckwrdE1eSxQ01pXfz8bK6Uith66WXXR4X2Xl92oMWCcmB16twwGaDj7S
CjLB6UuXLRySfJeLmRQ+sdY41LaZuDoNy9nRCFJuA514LcgwZvWmhdGIk2n3AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUPqEMfo7SAdmgnPDVv/mCcRVwQNswHwYDVR0j
BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2
MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2
NVBaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt
NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTMzk1Mzc0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjxRa
MA0GCSqGSIb3DQEBCwUAA4IBAQCjPrZjOiKe6NQP2ZgiWnShPcuIhk2sQ0fNnZBa
3jtc0tGVfxmJ2bBf/MgTXhhzDWVGwx/ahqBv8Nl9eIV5PJydF97iQbglFsZwzB5c
N3dNxx2hL0r8E0LrQ1v3ViY++hrrnVzzd+j78O5TN20s+w2OmxvzP0eKMEWPvXek
HNwbIsp/GjXS8SOeUtNLNPZnexmYleoOw3ethVPWkX4Yf3bDbxkUOzgeGPDTX2cl
jQWIpMDW8BWdKbQI16vqkw0ymVqbSupI4T5uXtShRwo99CX0432Rr4a716kYCmpU
MOlUk+MzQbWqka2sOdqJ6CpVb7AZ4K8PO/zpOF1QozKF72xw
-----END CERTIFICATE-----
Generated at Sun Nov 8 07:44:12 2026 by rpki-client