Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS400468.roa
File: AS400468.roa (raw, json)
Hash identifier: 3oKsFLnSj08Y/nBp8UUml9laMjhVgxKCGwtQmYZqJNY=
Subject key identifier: CF:8B:07:7A:51:89:42:F8:BA:E6:7D:EC:CE:03:E3:D4:21:C3:F0:0E
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 64682B1672F0CF45832DF3B29E807A1FBED14614
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS400468.roa
Signing time: Wed 09 Sep 2026 11:25:21 +0000
ROA not before: Wed 09 Sep 2026 11:20:21 +0000
ROA not after: Wed 08 Sep 2027 11:25:21 +0000
asID: 400468
IP address blocks: 143.20.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:37:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:68:2b:16:72:f0:cf:45:83:2d:f3:b2:9e:80:7a:1f:be:d1:46:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 9 11:20:21 2026 GMT
Not After : Sep 8 11:25:21 2027 GMT
Subject: CN=CF8B077A518942F8BAE67DECCE03E3D421C3F00E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:33:68:66:86:36:d3:a1:af:b7:46:de:55:46:
ac:65:2f:15:b8:c0:79:f0:22:a6:9d:84:a7:5e:67:
be:e0:31:02:d0:15:9b:ac:ce:dc:3d:3d:c3:51:17:
58:51:5e:56:16:03:eb:31:2a:5d:1f:4c:f5:7f:41:
64:de:f0:ee:ac:d5:77:8e:28:b1:01:a2:ac:47:0b:
39:b4:10:a2:b2:8e:7c:47:bf:9e:24:6c:8c:7d:06:
16:e1:93:04:a6:85:2f:7e:2d:02:f7:1f:0d:d8:eb:
6e:d0:ca:f7:6a:91:4b:b2:39:80:f1:9a:67:41:4b:
b4:a0:06:0e:86:35:fd:41:5b:84:90:f1:43:59:ab:
62:3e:a4:87:22:e3:74:c6:76:43:ea:04:7f:56:89:
7f:ef:35:06:98:ae:34:5f:a6:16:78:f6:59:88:f2:
29:3b:4f:cc:cb:6c:4a:04:99:11:8f:bc:7c:57:fb:
a3:4e:fe:d2:55:14:aa:d2:97:4f:a2:d7:9e:ca:6b:
ea:ba:a9:5b:84:f3:bb:02:93:a4:3a:0c:4a:f4:02:
64:d4:fa:c6:d0:1a:4c:ca:d1:b9:87:d6:d0:94:59:
71:cd:b8:5a:d6:11:af:34:a7:b8:26:9e:d6:22:b4:
dc:f3:76:99:fd:fb:b7:87:fe:13:4e:58:4b:b5:89:
3a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:8B:07:7A:51:89:42:F8:BA:E6:7D:EC:CE:03:E3:D4:21:C3:F0:0E
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS400468.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.213.0/24
Signature Algorithm: sha256WithRSAEncryption
af:be:2d:e4:27:98:2e:a4:f9:de:51:ac:1a:6e:d6:cc:a3:e7:
77:ed:08:bd:02:5d:c8:1b:58:91:a7:31:56:58:90:28:b7:12:
77:a1:41:f0:86:8c:81:5f:dc:f2:6d:fc:1e:38:f3:59:6d:42:
ea:50:5c:ad:4d:31:1b:af:4a:f7:ca:a0:74:99:91:6d:c8:c9:
66:d5:e9:08:4e:fd:8c:c9:29:24:c4:7e:58:a5:1d:dc:ff:d3:
35:f3:f3:9b:a0:b4:8d:40:74:32:34:01:64:54:8e:f2:1f:e1:
be:1d:65:1a:ca:5a:4d:a8:88:bc:4c:0d:43:60:08:9b:34:7c:
ae:ba:d8:16:53:02:a1:d8:be:38:30:55:b2:6c:8f:1a:f2:e0:
6a:63:d0:1f:ff:66:c9:7b:ed:f9:9f:61:11:63:1e:37:32:e4:
da:22:02:22:4a:68:f8:b0:52:3e:8e:18:d5:6f:47:7f:64:75:
ad:f0:e3:62:05:77:2e:26:d5:89:00:cb:10:77:57:1b:b2:e6:
b5:24:f3:58:d1:a6:71:d6:38:c3:9b:09:05:79:4a:33:88:33:
00:eb:9f:f5:70:51:05:1a:51:62:2f:86:7b:25:50:9f:d2:a7:
5e:50:53:58:b2:07:5f:fd:d0:1f:24:8d:01:ef:ab:39:e0:72:
e0:fb:27:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:11:02 2026 by rpki-client