Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS401486.roa
File: AS401486.roa (raw, json)
Hash identifier: lr41xMlu7RhKgkeWgVOgkZDD+Y4Ryn3/U3v5DZDvEiM=
Subject key identifier: 2B:DA:12:52:BB:9F:C5:03:20:D0:C4:60:91:98:44:E8:01:33:9D:60
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 3BC8EDA71AA094705112D4103787F59F3620B5A3
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS401486.roa
Signing time: Wed 16 Sep 2026 19:50:12 +0000
ROA not before: Wed 16 Sep 2026 19:45:12 +0000
ROA not after: Wed 15 Sep 2027 19:50:12 +0000
asID: 401486
IP address blocks: 143.20.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:c8:ed:a7:1a:a0:94:70:51:12:d4:10:37:87:f5:9f:36:20:b5:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 16 19:45:12 2026 GMT
Not After : Sep 15 19:50:12 2027 GMT
Subject: CN=2BDA1252BB9FC50320D0C460919844E801339D60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:82:de:d7:ce:32:f2:d2:07:3a:78:df:e7:df:
f3:20:dd:49:af:f4:e5:3e:b5:a5:96:f0:2b:ac:af:
ff:b0:ca:f2:66:8c:4f:a3:ff:aa:91:99:47:54:67:
94:d7:ca:a5:5b:d9:4d:6e:f2:d9:8e:af:c0:c9:f2:
aa:85:35:4d:20:dd:25:a4:51:69:fb:f8:69:ad:4c:
7e:16:8e:64:12:e4:f3:3d:f1:9c:38:76:70:64:dc:
83:b3:f5:e1:e9:ac:52:c7:16:00:38:a6:14:b1:db:
9a:8e:41:63:11:1b:5e:a7:54:45:c6:63:80:33:0a:
bf:eb:6c:af:ef:9f:12:08:e3:0b:eb:d6:90:85:8f:
57:62:2b:c3:8d:e7:75:09:71:b4:1c:9c:07:6c:f5:
d0:de:4b:d8:73:e3:7f:34:b2:d9:26:44:8a:5e:a2:
53:2e:41:91:1b:5b:c5:14:51:a1:2b:a1:d9:75:20:
96:df:e7:a3:93:1c:39:9a:69:66:42:e9:47:e3:b1:
d6:64:9b:b4:26:c8:da:7c:a2:7f:7a:59:1f:6b:e5:
0c:0b:fd:57:86:54:51:7e:86:89:90:ab:f9:a2:e8:
a7:91:5c:9d:19:5f:8a:0a:78:26:b0:4f:f5:14:2c:
66:f6:99:49:d9:42:b8:a2:36:ca:13:97:d6:3c:64:
38:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DA:12:52:BB:9F:C5:03:20:D0:C4:60:91:98:44:E8:01:33:9D:60
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS401486.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.24.0/22
Signature Algorithm: sha256WithRSAEncryption
37:f2:13:5f:95:94:e4:22:16:0a:cf:f5:4c:ef:37:40:3a:3b:
ab:28:ec:79:86:88:4f:db:a6:15:87:d4:84:35:91:a7:cc:26:
90:1f:66:4d:5c:c3:b5:3a:1b:5b:9e:f7:65:7d:4c:d3:e6:ce:
27:0f:2b:b8:ff:0c:c9:46:ed:b7:65:7d:53:af:54:90:58:ce:
d8:47:62:4a:f9:3e:b7:70:86:3c:d2:0a:c9:ac:10:82:58:39:
ce:5b:4c:3a:28:47:ab:34:c1:ce:d5:07:cc:f7:b4:92:d4:d7:
20:b3:e7:fe:4f:64:b4:18:a9:37:76:c3:a6:3c:42:74:64:12:
00:3d:6b:54:35:dd:89:fa:5a:dd:29:72:ae:41:ad:0e:33:e8:
28:9e:70:13:55:8c:7f:24:97:68:be:86:be:6a:50:4d:cf:67:
9c:e2:05:33:4e:dc:ea:ef:a4:1a:aa:1c:fd:f7:f9:5f:d1:10:
bd:1a:1e:00:0e:9a:13:44:e8:4b:77:5d:b1:54:10:53:d2:d0:
32:c1:77:6f:f5:36:88:72:5f:84:e8:38:a3:c9:27:3f:d5:fa:
bd:9d:74:e6:d4:2d:d9:e0:05:0e:e2:30:15:9c:b1:0c:41:72:
81:df:46:28:be:47:da:d2:6b:46:94:58:19:fb:30:1a:24:3c:
5e:2e:db:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 02:37:35 2026 by rpki-client