Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS203048.roa
File: AS203048.roa (raw, json)
Hash identifier: nofrdIDLfeaSU7TWZuDgYsaKMJlTg7BOLoFYydryzQg=
Subject key identifier: D9:FB:8E:BC:37:CA:29:53:89:0F:80:AE:AE:4A:E0:B5:A3:F5:BE:76
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 6F613A3A391FCFA25A3937AA297E206419174BFC
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS203048.roa
Signing time: Wed 15 Apr 2026 01:16:05 +0000
ROA not before: Wed 15 Apr 2026 01:11:05 +0000
ROA not after: Wed 14 Apr 2027 01:16:05 +0000
asID: 203048
IP address blocks: 143.14.150.0/24 maxlen: 24
155.117.102.0/24 maxlen: 24
162.141.48.0/24 maxlen: 24
162.141.107.0/24 maxlen: 24
168.222.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:61:3a:3a:39:1f:cf:a2:5a:39:37:aa:29:7e:20:64:19:17:4b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 15 01:11:05 2026 GMT
Not After : Apr 14 01:16:05 2027 GMT
Subject: CN=D9FB8EBC37CA2953890F80AEAE4AE0B5A3F5BE76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b7:72:b7:da:b7:08:ef:e9:1d:d9:9f:c9:e0:
04:b3:de:0d:b4:0c:d5:16:4f:f0:db:39:13:83:78:
58:f8:dd:47:0b:22:8e:e7:86:ad:8a:1a:02:ac:2d:
9a:ba:ba:28:58:79:ac:f8:80:ce:bb:21:e0:09:12:
00:25:31:86:b0:a3:d5:6a:67:7f:34:92:b4:ab:e2:
d7:ab:31:2e:99:7a:d4:cd:a9:bf:d9:d3:12:45:95:
44:0f:01:d3:6b:c7:10:1c:9d:76:a8:c7:8f:3f:d4:
7a:36:b4:27:86:4f:6a:a8:bf:d3:cb:50:d8:eb:75:
dc:ca:46:c0:6a:03:c8:56:61:7f:f7:c8:2a:97:eb:
3d:e7:23:8b:26:8a:99:d0:99:d7:e2:35:32:bf:94:
8c:c2:c9:8c:95:b1:d3:a6:ef:f2:ac:3a:22:29:4b:
e8:1e:fc:8f:67:41:af:59:16:35:a9:2e:d2:b6:b2:
f3:59:83:6f:65:0f:e2:34:6c:f7:30:f9:1c:fe:02:
67:91:5b:01:32:2f:f9:55:64:d4:6b:be:e5:b2:38:
45:52:c6:0c:ff:d4:60:29:bd:73:46:95:51:f9:ea:
86:03:af:61:58:cc:f9:80:2c:59:52:d3:1f:75:8f:
46:f4:d2:45:ff:be:04:3f:f9:82:29:fa:e4:ba:30:
c4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:FB:8E:BC:37:CA:29:53:89:0F:80:AE:AE:4A:E0:B5:A3:F5:BE:76
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS203048.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.150.0/24
155.117.102.0/24
162.141.48.0/24
162.141.107.0/24
168.222.42.0/24
Signature Algorithm: sha256WithRSAEncryption
34:b0:e8:33:55:7e:09:17:ae:0c:8b:02:b9:0f:b1:0c:91:98:
7d:2d:7b:09:14:3f:71:3d:15:52:5c:a1:c1:fb:0b:c3:06:2b:
42:83:fc:84:12:65:20:00:7d:71:cb:f0:25:0b:47:11:6a:6f:
65:d5:6d:1b:1e:09:a3:8c:2c:ba:60:d5:82:ec:ed:0e:ae:46:
41:cf:d1:05:dc:03:79:92:f4:38:70:a4:31:2d:84:26:87:73:
e7:03:e7:f7:ae:3e:45:c5:e1:82:fb:3f:7a:f1:76:ad:f7:96:
21:7a:99:7e:93:cf:84:77:48:b9:c0:15:8e:a6:47:75:51:08:
c0:6c:ba:96:41:ee:57:3b:61:a4:dc:f6:18:91:55:d1:b7:09:
96:39:ba:19:a6:24:be:57:78:eb:02:a1:5b:ba:15:75:2c:c5:
c1:00:4c:20:b0:44:c6:e7:ab:1e:61:37:b8:24:e6:ac:90:24:
89:db:5b:ff:76:fa:b1:da:6c:05:f2:c3:9a:f7:a3:34:0f:7e:
21:e2:31:bf:6a:f6:ed:94:d9:6b:9c:9e:a7:a0:32:8a:0d:59:
36:f9:da:f5:2a:7e:c6:7b:6a:cf:4b:d0:8c:e3:1a:4a:2d:b9:
08:e7:9d:fe:dd:6d:db:4c:ae:50:43:96:48:d4:1e:82:d7:b5:
2a:5f:f7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:10:54 2026 by rpki-client