Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS203048.roa
File: AS203048.roa (raw, json)
Hash identifier: MIDQ0H58BA6sKknHZ3ZPbxf3ScJ3PiuJrre3mQPSNR8=
Subject key identifier: 03:75:AD:7D:9B:41:30:BD:8F:D9:78:A0:BA:4B:31:B4:8E:12:28:E0
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 05432FE19042549F4362C8A447B7F4B105128D89
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS203048.roa
Signing time: Tue 24 Feb 2026 18:07:14 +0000
ROA not before: Tue 24 Feb 2026 18:02:14 +0000
ROA not after: Tue 23 Feb 2027 18:07:14 +0000
asID: 203048
IP address blocks: 150.241.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:43:2f:e1:90:42:54:9f:43:62:c8:a4:47:b7:f4:b1:05:12:8d:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Feb 24 18:02:14 2026 GMT
Not After : Feb 23 18:07:14 2027 GMT
Subject: CN=0375AD7D9B4130BD8FD978A0BA4B31B48E1228E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:08:37:93:7a:5f:6b:73:0f:a8:92:8e:30:ae:
c6:34:7c:5d:ca:b9:9b:73:5f:4c:24:8f:6b:2b:33:
a5:cc:e1:07:f5:49:75:7c:08:52:a1:59:15:ba:0f:
8f:ce:f6:4e:58:d8:bf:0a:ae:63:11:76:14:fb:38:
b9:36:44:1a:89:84:f4:5d:e9:b6:6c:f1:15:27:88:
cd:61:06:ca:71:4f:64:9c:f2:e8:02:d3:fe:38:83:
5d:f5:c3:df:12:1f:53:ec:4f:f2:43:1e:10:2e:0c:
d1:a7:c1:07:9d:14:04:48:93:6b:b1:79:98:5c:f7:
8e:a2:c0:d1:2b:7b:86:d1:70:69:90:11:31:bd:04:
72:78:ff:ea:39:85:3c:bf:fe:e9:e1:df:ce:ca:37:
8a:19:b3:78:51:da:ac:6b:70:f0:74:1c:b9:f4:f4:
c6:f4:4a:28:cf:c2:c4:8a:b2:57:d4:dc:4b:ef:34:
19:55:c5:e7:f8:dd:99:db:2e:62:98:02:cb:0d:d3:
1b:9f:92:c4:32:7a:b2:b9:dc:68:d7:ce:be:90:f1:
95:ca:c7:02:fd:af:ba:4b:63:9e:df:99:01:14:0f:
9e:fc:b1:45:77:6f:d5:05:60:d0:59:3e:c4:9b:61:
ce:e9:07:9e:8e:c9:3a:cc:6f:df:1c:68:3b:50:29:
df:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:75:AD:7D:9B:41:30:BD:8F:D9:78:A0:BA:4B:31:B4:8E:12:28:E0
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS203048.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.241.140.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:73:6a:be:33:5e:a3:5a:31:bd:e3:51:a9:92:9c:d4:13:e3:
69:b5:6f:65:db:f3:5c:3d:1c:5b:87:e3:c4:cc:76:59:ab:0d:
ba:ed:92:60:b2:89:46:cb:1b:c2:50:e2:4e:68:4d:7c:1a:81:
3a:6e:94:59:cc:07:e6:be:bd:3f:23:d1:6a:62:1b:ee:4c:ca:
5e:17:50:83:25:16:7e:59:c1:59:f9:2e:bf:76:93:e8:82:e4:
4f:d6:db:22:10:1a:3d:6c:d0:e3:8c:29:04:3e:8a:1e:77:de:
78:0a:32:d6:23:f6:67:fa:f9:de:fe:f9:26:fe:27:c7:f5:93:
82:68:55:58:75:9d:ce:83:83:c3:5a:57:95:f7:cf:94:b8:a0:
e7:f3:af:3d:15:07:9a:81:fe:5d:01:8c:08:01:14:3f:ce:f7:
5d:ec:2c:41:c0:14:9b:4b:86:96:ae:24:2b:f3:47:da:26:f9:
f7:f3:d9:f5:ea:66:5f:fc:77:20:e1:7a:55:c7:43:6a:2e:51:
d0:4f:e7:e4:af:61:39:5e:83:58:78:aa:56:9f:fe:e9:70:b6:
cd:0a:6b:2f:db:11:36:9a:75:f5:b2:e1:5c:46:f4:45:58:db:
06:c6:5d:59:3a:0e:cb:0d:92:17:69:34:5a:a6:83:09:86:2d:
78:ee:b3:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:07:42 2026 by rpki-client