Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS401075.roa
File: AS401075.roa (raw, json)
Hash identifier: j5RYenXeMUjMhh99o3GGqK64lp6SdYy40TmlwAo0eFI=
Subject key identifier: 19:E2:CE:0B:18:31:FB:92:E4:BA:99:09:75:63:47:08:C0:9B:FF:2D
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 6719204510D5B49AF235F221E48B19713411FE6B
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS401075.roa
Signing time: Fri 18 Sep 2026 10:49:35 +0000
ROA not before: Fri 18 Sep 2026 10:44:35 +0000
ROA not after: Fri 17 Sep 2027 10:49:35 +0000
asID: 401075
IP address blocks: 143.20.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:37:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:19:20:45:10:d5:b4:9a:f2:35:f2:21:e4:8b:19:71:34:11:fe:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 18 10:44:35 2026 GMT
Not After : Sep 17 10:49:35 2027 GMT
Subject: CN=19E2CE0B1831FB92E4BA990975634708C09BFF2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:10:a1:81:ad:b8:16:82:aa:e0:9f:75:b0:0f:
f6:c9:24:2a:cd:b3:7b:63:2d:70:5a:51:20:c5:4e:
6e:fd:09:7d:e2:28:17:a0:47:82:6b:b6:72:bf:17:
3c:33:9c:d3:78:77:ec:09:01:ae:d4:83:4b:36:83:
8b:d3:c8:80:ea:8a:52:bc:52:3d:13:d7:be:8c:5c:
5b:52:f6:80:a6:6d:dd:cb:2e:3b:cb:be:c6:38:e9:
aa:d8:73:43:bf:67:a6:7e:bb:8d:2c:ac:de:50:92:
4b:ea:56:f9:2e:d6:1b:81:2b:e1:a1:6b:a9:90:c8:
49:3a:57:7e:b0:ed:74:50:96:93:8b:14:08:05:31:
5d:e7:0f:c7:e1:aa:76:86:d9:df:93:77:a0:37:0c:
68:0b:a3:9a:a1:fc:03:2e:64:3f:c3:17:b3:71:34:
a9:46:11:f6:a2:7c:3c:ff:45:33:6c:c7:14:2d:5d:
6a:83:13:1b:45:c9:b8:f3:95:7d:00:2d:c6:cd:09:
e9:95:9e:ce:2b:96:9b:5c:5e:f9:a9:2e:b4:0e:f3:
45:ae:dc:c9:87:78:06:b0:5a:6d:91:67:26:f4:ba:
23:cf:70:46:95:0b:ca:28:35:fd:68:49:21:8b:ed:
3a:6b:e8:ae:a9:f1:4b:f6:57:5d:8c:bc:f5:24:de:
29:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E2:CE:0B:18:31:FB:92:E4:BA:99:09:75:63:47:08:C0:9B:FF:2D
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS401075.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.38.0/24
Signature Algorithm: sha256WithRSAEncryption
da:f5:bb:e5:ca:58:4b:d3:16:43:92:86:a2:a7:a1:e2:5e:5b:
ae:b4:76:a9:7f:41:0f:13:fd:ee:d1:0a:46:bf:8c:5f:16:8b:
e4:c8:27:57:74:2c:9d:3f:34:39:75:d0:b9:40:fd:bb:f5:f0:
b9:a0:92:92:64:d8:1a:a7:24:40:94:10:98:67:a9:12:40:66:
b3:f5:e9:1b:fb:22:fa:f0:f5:8e:49:3e:a5:23:95:2b:48:82:
cc:76:51:e7:23:e3:31:d0:34:7e:38:5a:1c:e8:ef:12:28:bb:
c7:5a:cf:89:f0:32:ff:f8:ad:cc:d2:21:66:f2:07:fc:0f:61:
7e:27:c0:64:7d:bf:20:6c:33:02:fa:5d:e6:0e:d4:dc:d2:a3:
ec:a1:5a:6f:72:0f:8e:84:b3:c1:f8:6f:ae:de:c1:7a:71:b7:
d0:a3:5b:79:17:e1:56:92:72:c7:9a:ed:6c:ba:44:b7:94:c9:
11:2e:ae:bb:74:6a:54:d1:7e:80:67:1d:4a:c1:ff:6a:3c:cb:
6d:b3:5c:aa:3e:db:de:a9:9c:d4:be:66:f0:46:1c:95:32:3b:
79:78:b1:f7:2f:ec:e5:03:1e:fb:77:a1:54:41:80:66:0b:c8:
e4:40:65:2a:b9:51:10:95:6b:aa:bf:26:3a:7c:65:74:9f:f4:
50:dc:74:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:37:43 2026 by rpki-client