Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS203076.roa
File: AS203076.roa (raw, json)
Hash identifier: J3+JyOyh25GXoVmDWEU/cE/eS0miM17OqrB8XOtoJvY=
Subject key identifier: F9:02:94:3F:63:7D:D9:E0:DE:AA:EE:67:B7:F8:3F:0E:64:A3:CB:F6
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 0249E51D96B0B9F1735D545D8AAA84A09505F0C5
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS203076.roa
Signing time: Wed 16 Sep 2026 07:25:21 +0000
ROA not before: Wed 16 Sep 2026 07:20:21 +0000
ROA not after: Wed 15 Sep 2027 07:25:21 +0000
asID: 203076
IP address blocks: 5.199.12.0/24 maxlen: 24
5.199.28.0/24 maxlen: 24
185.169.122.0/24 maxlen: 24
185.169.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 04:10:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:49:e5:1d:96:b0:b9:f1:73:5d:54:5d:8a:aa:84:a0:95:05:f0:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Sep 16 07:20:21 2026 GMT
Not After : Sep 15 07:25:21 2027 GMT
Subject: CN=F902943F637DD9E0DEAAEE67B7F83F0E64A3CBF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fa:43:c2:e5:a5:04:17:a9:48:63:52:88:20:
67:a2:7a:c8:d7:b0:7f:46:04:d5:22:98:7c:fb:ba:
4d:1e:43:65:d0:df:22:43:24:eb:b4:6f:dd:30:97:
89:f7:8f:79:81:a1:65:ae:7b:59:7d:1e:c5:7b:da:
0c:f0:55:88:81:d4:7b:4f:30:b5:71:2d:e7:2b:44:
2b:ff:6a:d5:90:32:d4:28:9a:52:81:ca:34:71:ff:
8a:5e:56:1b:52:91:cd:4c:bb:36:3b:f1:97:aa:36:
f9:cf:50:60:11:25:18:ab:13:0d:21:f0:75:88:46:
aa:c1:77:45:7f:ca:38:5f:78:c7:63:6e:cb:7d:e5:
40:6f:8c:41:46:96:d3:c3:88:3c:b4:5b:90:1c:b2:
16:0d:b9:05:20:fa:2b:94:ee:c5:a3:40:bc:ee:ab:
49:0e:78:11:10:1e:de:43:69:73:4c:77:e7:6d:a7:
0b:6f:71:53:fc:78:1d:ba:b2:66:3e:85:70:83:90:
9f:19:9e:85:28:cb:61:e0:4d:f4:04:6c:94:81:d1:
e7:f7:b2:42:63:8d:7b:6f:23:0a:62:39:89:95:96:
56:15:56:ab:c2:f2:da:2a:d9:ab:46:21:47:97:77:
16:6e:d5:9a:0a:96:bc:c8:2d:ff:ba:07:3a:87:a5:
cd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:02:94:3F:63:7D:D9:E0:DE:AA:EE:67:B7:F8:3F:0E:64:A3:CB:F6
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS203076.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.12.0/24
5.199.28.0/24
185.169.122.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:0f:7f:d2:d5:a4:60:c4:c1:38:4f:6d:d3:44:cf:6f:e2:d2:
d5:37:52:3e:dc:d1:b6:0e:09:d2:bd:b2:af:e1:3e:da:55:df:
7c:1a:56:e3:70:83:7c:81:bd:3e:39:f9:aa:31:c5:7a:4d:64:
f2:98:44:b3:e6:e3:05:04:15:63:5c:b7:5b:7e:45:6c:b2:e5:
2c:59:92:8e:ae:14:5d:1b:97:30:8c:02:89:35:49:f3:9e:27:
ed:67:f0:6b:d5:9e:14:47:94:fb:28:3f:da:f6:ee:01:49:17:
17:3c:63:0f:32:3f:d0:ba:c3:3d:ce:70:45:da:f5:8c:d4:f9:
b3:bd:b8:c0:e9:18:5d:95:81:c2:c4:40:07:fb:d1:1e:41:e9:
fb:da:07:ef:0f:0d:51:d4:63:0e:2c:a2:f9:09:22:6e:39:8a:
1b:56:f9:e5:a4:d8:54:b8:c5:8c:03:09:0e:55:2e:89:f0:9c:
26:05:82:00:fc:2d:78:cd:5f:3c:7c:5a:c8:3e:f4:a9:13:51:
42:23:29:87:45:25:5b:f2:b9:0c:af:af:4b:8c:4e:d3:95:d2:
5b:b3:af:a9:3a:cd:c6:bf:59:e1:56:64:56:e6:6f:aa:0e:1f:
bc:a0:45:19:89:11:ef:fa:6e:de:44:5f:f0:3b:fd:43:6d:ac:
0e:1a:06:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:08:48 2026 by rpki-client