Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS203075.roa
File: AS203075.roa (raw, json)
Hash identifier: gSTHiAYZNtMZ0Aqov1ONDbuRutRwqTZfEIZOwGbicvQ=
Subject key identifier: BE:85:8B:E8:43:B8:88:70:AA:80:20:40:8D:88:BE:D1:2E:49:5D:0F
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 294639BB5F1C702BDEDF682FD94956BA567F65DB
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS203075.roa
Signing time: Wed 16 Sep 2026 07:25:20 +0000
ROA not before: Wed 16 Sep 2026 07:20:20 +0000
ROA not after: Wed 15 Sep 2027 07:25:20 +0000
asID: 203075
IP address blocks: 5.199.44.0/24 maxlen: 24
212.74.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 21:12:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:46:39:bb:5f:1c:70:2b:de:df:68:2f:d9:49:56:ba:56:7f:65:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Sep 16 07:20:20 2026 GMT
Not After : Sep 15 07:25:20 2027 GMT
Subject: CN=BE858BE843B88870AA8020408D88BED12E495D0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:26:80:fb:bd:c8:b2:50:11:98:f9:9e:44:3d:
d0:df:17:08:e7:8c:b0:25:88:61:6f:77:59:41:f4:
6e:bb:96:41:2a:98:d3:fa:ae:77:5f:a4:de:35:68:
c6:94:c2:bb:d3:44:80:50:2a:5b:a0:02:cd:d6:79:
48:19:2a:7c:be:db:36:e4:c7:d7:70:4b:3c:16:b8:
2c:2a:50:72:ce:38:5d:a0:0e:f0:78:b2:e4:85:b7:
2c:cc:be:1a:00:34:13:0b:4a:c4:d3:30:c4:59:b2:
c6:94:08:be:e2:8f:bd:a6:f7:fc:6d:f8:a1:dc:43:
13:a5:26:5f:01:26:7f:7f:65:50:7b:b9:55:9d:52:
6e:8f:54:78:28:f7:a0:91:b9:99:9c:9b:3b:b8:07:
5d:a8:d3:79:de:b2:f8:d1:a2:ee:c1:13:39:75:50:
4c:4d:08:53:4c:e7:c4:ea:cc:7b:20:cd:c6:3b:21:
cf:b1:49:09:68:f8:64:64:33:ae:24:21:24:d1:65:
dd:d8:2f:7b:0c:9d:03:7a:7d:e4:eb:7c:f0:3b:98:
e3:59:1c:68:e7:43:ab:2f:c8:c8:c9:44:5e:84:8b:
eb:87:18:9d:d8:5c:36:a9:fe:42:94:30:7b:79:db:
75:bd:f4:89:c6:c4:08:e9:bb:03:de:e6:ac:e1:06:
39:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:85:8B:E8:43:B8:88:70:AA:80:20:40:8D:88:BE:D1:2E:49:5D:0F
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS203075.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.44.0/24
212.74.58.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:55:1d:8f:99:0c:7f:ab:d0:1e:23:4a:69:4e:80:e8:6c:5f:
0b:15:f8:57:45:d4:a2:5f:57:5c:57:a2:f2:49:f7:17:9e:73:
9b:64:8f:8e:28:55:5f:b8:80:dc:d9:48:fa:f4:2f:e2:7c:cc:
5a:3d:ec:37:6e:23:e9:00:57:84:e7:2b:a2:bd:20:01:87:17:
1e:7c:b6:ee:1d:dd:58:1f:70:3a:3b:a7:10:fd:47:47:24:70:
3d:93:35:29:3a:7a:c4:4e:bc:04:82:7a:88:62:7b:f5:f8:98:
9e:d0:7c:a9:a5:e5:19:18:d4:01:60:00:2a:74:79:1b:c6:88:
63:ae:71:d9:9c:ce:70:5e:c2:64:3f:0a:3b:fa:bb:fa:09:d7:
ab:1b:f9:f5:e5:be:3d:8e:4f:2d:6f:a2:5f:b4:5b:a0:73:5c:
b0:77:29:95:85:da:3e:c5:08:3c:44:34:10:7e:85:79:4e:f4:
41:42:f9:46:a4:34:ef:77:6d:85:21:55:ba:c6:35:5b:81:7b:
58:be:fa:17:01:c4:89:3b:06:bf:c2:6f:54:4c:54:69:fa:52:
a8:d7:b2:c9:c2:ad:da:3d:70:b1:60:8f:d1:c2:c6:c5:8a:cd:
ea:eb:84:47:9b:4f:07:c0:49:e2:6b:7d:ad:1d:28:ff:63:31:
6f:a0:aa:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:08:05 2026 by rpki-client