Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS402970.roa
File: AS402970.roa (raw, json)
Hash identifier: kKfaj5Vjw3mVklIrbGRBxbtI8eKBvC1BNpo2WOvz7rg=
Subject key identifier: B8:A7:82:B9:C7:81:4D:D3:7F:C2:76:50:C8:22:C4:4B:E0:3D:8B:C6
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 7874BE47C709C4E601A6B774EBE5AEACD4D6C85D
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS402970.roa
Signing time: Wed 16 Sep 2026 19:50:12 +0000
ROA not before: Wed 16 Sep 2026 19:45:12 +0000
ROA not after: Wed 15 Sep 2027 19:50:12 +0000
asID: 402970
IP address blocks: 143.20.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:74:be:47:c7:09:c4:e6:01:a6:b7:74:eb:e5:ae:ac:d4:d6:c8:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 16 19:45:12 2026 GMT
Not After : Sep 15 19:50:12 2027 GMT
Subject: CN=B8A782B9C7814DD37FC27650C822C44BE03D8BC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2e:21:0b:d3:ac:2a:ae:ad:bd:07:8c:85:2b:
23:49:ba:71:fe:37:39:c8:e4:97:f4:8e:80:73:00:
a3:ea:b8:11:14:10:eb:52:da:24:cd:1b:f6:4d:a2:
b0:23:31:31:00:bd:42:e8:5e:d6:3c:2f:33:6a:31:
c6:77:fc:14:55:f8:67:4a:9f:44:4a:ab:7e:56:4e:
53:44:7d:b2:0d:e0:ea:cb:ae:fc:75:75:80:1c:35:
d3:4e:a4:40:69:09:d3:3e:65:63:3e:77:3a:96:93:
89:02:88:0e:06:bf:79:bf:13:56:a4:5d:7a:80:dd:
ce:41:6c:26:25:cf:09:f6:b5:ce:58:8f:45:79:31:
ed:35:1a:31:f1:3f:15:1e:b9:b4:94:60:e2:1d:a4:
a1:9d:64:cc:5b:8d:82:c9:64:a8:08:aa:2b:3d:1f:
7d:27:81:d7:66:f4:30:a9:04:d1:4d:50:81:01:95:
a8:8c:64:58:f1:19:89:65:21:40:c8:52:5f:a1:00:
0a:4a:b4:77:17:1a:81:65:da:30:7f:42:8a:ff:27:
92:bd:85:88:61:c4:ff:a6:b2:78:5e:52:58:32:88:
ee:78:97:cd:6f:9a:a3:29:36:b3:7f:3a:a8:5e:78:
cb:34:3c:1e:bb:71:3a:a2:5d:0d:a0:df:e5:ca:9f:
be:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A7:82:B9:C7:81:4D:D3:7F:C2:76:50:C8:22:C4:4B:E0:3D:8B:C6
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS402970.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.24.0/22
Signature Algorithm: sha256WithRSAEncryption
24:65:70:4c:94:95:6e:18:d5:00:d5:70:4a:e3:5f:8c:46:e3:
36:fd:60:ce:92:79:cc:9a:27:de:9e:db:15:34:ee:de:ff:0d:
02:fe:e4:0e:ff:67:e2:0c:b5:cd:07:c5:bb:fc:c5:e8:3e:c5:
a4:0b:55:98:17:db:48:56:f3:ec:eb:77:4e:59:bb:ec:13:19:
56:63:75:35:a5:fa:a8:dc:1c:2d:39:99:1c:14:b2:df:6b:e5:
78:6e:cb:76:ac:61:5e:2d:f5:f9:3e:a7:5b:86:53:09:fb:36:
1c:55:5b:4c:b7:27:e9:57:cb:eb:34:7a:77:33:d9:39:26:4d:
a5:ba:42:f5:d6:b0:98:ce:68:75:9e:29:99:87:11:b4:87:05:
2a:ce:fc:ce:18:8f:a2:d8:e4:4c:b6:50:5a:17:8c:82:4e:a8:
41:32:b7:a3:eb:69:f1:f1:3c:fa:21:51:38:46:64:55:c2:be:
6a:d0:b6:7c:34:91:a8:68:ff:76:f2:22:c5:a7:69:2b:a7:21:
eb:12:49:a5:a2:fc:8f:72:ca:f5:d1:35:df:0e:66:22:07:9e:
b0:eb:76:e2:c9:6a:c3:2f:58:4d:0e:10:39:d7:92:84:bf:62:
b0:85:a7:36:e0:98:71:74:b7:78:01:d0:6b:63:55:ac:82:d2:
fa:d1:67:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:22:41 2026 by rpki-client