Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS203048.roa
File: AS203048.roa (raw, json)
Hash identifier: lZpgHG6gzDkmS9Z2lKJ4RQgInzEX5pdnKldJ1uEupZw=
Subject key identifier: D5:5F:85:06:2D:42:1D:69:A6:C7:5B:27:07:71:B4:A5:32:B1:32:05
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 1A44E31EABDA2B8C9E6449682E7DB767ED4C9E6F
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS203048.roa
Signing time: Tue 09 Jun 2026 05:11:31 +0000
ROA not before: Tue 09 Jun 2026 05:06:31 +0000
ROA not after: Tue 08 Jun 2027 05:11:31 +0000
asID: 203048
IP address blocks: 155.117.215.0/24 maxlen: 24
155.117.221.0/24 maxlen: 24
162.141.126.0/24 maxlen: 24
168.222.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 19:43:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:44:e3:1e:ab:da:2b:8c:9e:64:49:68:2e:7d:b7:67:ed:4c:9e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 9 05:06:31 2026 GMT
Not After : Jun 8 05:11:31 2027 GMT
Subject: CN=D55F85062D421D69A6C75B270771B4A532B13205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cc:59:c1:9e:b2:14:e0:2f:d7:1c:fc:50:b5:
9d:46:d6:56:fd:e1:2b:40:8b:61:55:91:ce:55:3f:
19:62:93:6f:af:24:e3:a4:81:76:6f:cb:62:65:17:
18:33:f5:a8:ba:da:c6:e4:b1:f0:91:cc:de:39:b4:
85:49:7d:4a:a4:33:b4:52:db:16:66:91:d2:dd:1f:
11:5e:c3:74:23:69:70:75:a1:97:f7:9f:e3:9f:cb:
34:f8:47:a8:0c:b8:e6:e6:c1:87:f0:ff:ea:96:4a:
5e:57:e0:f6:19:ef:8a:66:20:ce:ba:2e:1d:f4:fe:
6b:59:96:5d:0a:c1:e4:be:0a:bb:12:1f:b0:1e:5c:
6e:d2:8b:a5:31:e0:84:33:e0:4f:07:ce:62:71:63:
5b:5a:5e:23:f9:47:12:dd:e6:89:87:97:42:1d:f5:
c6:26:b4:ed:42:76:b8:9d:75:dd:2b:b1:28:92:e2:
05:10:36:9c:34:b5:23:c2:be:18:46:03:64:b9:45:
fd:fd:02:eb:c1:4a:ed:83:d5:5a:f7:74:a6:8f:89:
0f:11:d2:e7:77:bc:50:06:55:49:1d:67:f6:91:2a:
de:7e:ea:63:95:32:b0:ad:4f:c9:32:a6:b3:39:0d:
f3:10:9e:82:b8:68:c7:53:27:c8:83:d5:47:57:4f:
c9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:5F:85:06:2D:42:1D:69:A6:C7:5B:27:07:71:B4:A5:32:B1:32:05
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS203048.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.215.0/24
155.117.221.0/24
162.141.126.0/24
168.222.66.0/24
Signature Algorithm: sha256WithRSAEncryption
74:a2:76:13:bd:6e:76:ac:6c:8f:c4:68:56:3a:21:8d:87:77:
e5:06:cd:ec:ac:a8:b4:8a:1e:4b:25:8b:a0:05:11:8e:a5:4e:
26:0d:fe:55:c9:ac:57:6e:3d:87:cc:b0:07:a9:86:a8:39:44:
0c:0e:35:57:7b:7a:18:2f:50:14:3d:8b:c8:e5:78:34:0b:7f:
98:1b:01:4b:6b:65:f1:4f:e1:57:db:d3:aa:6d:bf:68:cb:c1:
b2:4f:1b:c5:1b:d1:f7:53:ed:c3:6a:6e:21:d5:9a:14:0a:51:
9c:97:21:90:65:04:ad:c7:62:6b:0b:9e:50:df:af:1b:0b:2a:
55:e8:6d:52:35:aa:ff:cf:07:89:56:8c:84:2f:c0:c7:a5:1f:
bd:4c:83:b2:d1:0c:e4:e2:31:3a:83:7a:73:ef:53:d2:0c:8b:
f3:27:0d:c7:1a:99:0f:23:28:c4:0d:32:3c:51:7a:be:6e:a3:
bc:50:20:30:1f:f7:ea:82:17:f2:a5:e7:c1:99:75:e6:06:fd:
ae:3a:08:06:bf:e4:eb:76:5a:f4:5f:94:72:9d:63:b0:e7:4e:
4f:d5:5a:69:bc:ff:5d:de:5f:13:38:38:d8:be:93:7d:14:56:
22:ff:68:9e:7d:0b:d0:31:80:aa:7a:3c:24:d7:9b:d1:8a:18:
6d:e7:8e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:03:50 2026 by rpki-client