Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS400468.roa
File: AS400468.roa (raw, json)
Hash identifier: ojK39NyoBiwFw5tfcWJFH46bJOktz1Dn60TBwjvk42I=
Subject key identifier: 70:35:00:C9:92:EE:44:C1:CC:4D:80:5B:DE:B3:F0:20:B2:94:74:13
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 3EBD5DAC58EA34E19DB554AA5C2C1224EEEE131B
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS400468.roa
Signing time: Tue 10 Nov 2026 07:00:15 +0000
ROA not before: Tue 10 Nov 2026 06:55:15 +0000
ROA not after: Tue 09 Nov 2027 07:00:15 +0000
asID: 400468
IP address blocks: 143.20.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:bd:5d:ac:58:ea:34:e1:9d:b5:54:aa:5c:2c:12:24:ee:ee:13:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Nov 10 06:55:15 2026 GMT
Not After : Nov 9 07:00:15 2027 GMT
Subject: CN=703500C992EE44C1CC4D805BDEB3F020B2947413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:50:12:9c:7d:0d:4f:6f:c5:27:9d:62:b0:0c:
7e:2b:11:f2:30:77:14:74:d2:f2:21:65:12:b4:06:
2c:93:17:54:13:b1:5d:8e:55:e8:2b:4d:b7:df:2b:
5d:71:a5:43:83:b0:01:ee:b5:9b:db:55:a6:3f:4a:
03:b1:b6:c0:12:dd:9b:cd:e4:24:0d:df:c5:54:82:
4d:97:3a:68:b8:0e:bd:fd:e3:23:7d:e2:a1:5f:e3:
da:e5:56:9a:43:ab:b6:f8:99:fb:35:1e:d2:27:3b:
f3:19:9a:6a:4b:32:d3:6c:8f:e0:e0:60:c2:39:26:
1e:99:1d:cc:0c:95:a3:b3:41:7c:c1:2d:23:37:68:
1f:72:59:61:3c:1d:57:de:2e:8f:d7:74:24:f9:e3:
ce:56:25:58:57:a6:2a:57:57:d8:a0:2e:f4:78:79:
cb:c1:71:50:26:61:27:d7:1e:be:87:93:bb:9d:c2:
8d:57:13:8f:68:3e:e3:91:3c:29:fb:64:c6:70:9c:
74:cf:c4:ff:5b:66:65:f2:e1:12:27:33:d5:76:0b:
c4:c1:87:ce:89:ac:11:da:e0:e4:13:d8:eb:6c:e6:
88:65:c2:84:92:5a:1b:e9:71:9f:61:c4:52:ca:ef:
e7:6c:45:d5:07:6c:0f:a9:b8:1a:d5:ae:66:a3:80:
92:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:35:00:C9:92:EE:44:C1:CC:4D:80:5B:DE:B3:F0:20:B2:94:74:13
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS400468.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.213.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:37:5e:74:d8:ab:46:df:5a:ea:33:45:2b:58:de:72:86:2a:
8e:9b:c8:53:ad:6a:50:40:7a:c4:0f:3d:9f:68:f4:4b:9b:d8:
cd:35:05:4c:38:3d:db:5c:a0:16:33:60:cb:88:3b:8b:80:9a:
0d:26:88:45:57:b4:7b:ce:1b:95:b5:95:c9:03:67:90:23:53:
b8:51:51:f5:ec:98:55:4c:4e:79:26:d0:0d:8a:17:46:4f:ce:
33:8c:aa:8a:56:43:cf:42:43:30:6e:18:ff:eb:85:0a:02:da:
74:93:3e:9e:51:b2:6e:2e:21:66:78:47:ba:46:75:df:20:f4:
c4:b6:ce:87:09:0d:fc:ee:70:0f:13:fe:c5:5a:3c:69:04:68:
a2:fa:f8:40:16:fd:5b:91:00:f1:02:c2:f5:64:da:e7:53:6e:
61:07:1e:a7:a3:41:fe:32:8a:09:d6:bb:54:29:ef:aa:9a:e7:
14:13:86:9d:f3:d9:4b:f7:45:0d:8f:45:9b:39:76:c7:74:7e:
8c:89:2a:5e:4c:29:2d:0c:08:47:5b:61:9a:fa:07:f1:ce:70:
0a:6e:e3:5e:51:47:f7:cb:60:72:86:be:6d:d9:d9:61:a8:64:
6d:6b:07:10:5a:d6:0a:de:85:0c:6c:4b:fc:b6:bb:1a:ff:33:
7f:be:33:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:01:03 2026 by rpki-client