Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS203094.roa
File: AS203094.roa (raw, json)
Hash identifier: XbKt1SbTlcy1ynmL23H5y/cXaOwxjbm8E0/1F4dwTKA=
Subject key identifier: 95:9F:8D:C5:DC:F9:43:78:86:B1:7C:1E:F6:CD:4B:BC:62:DA:0F:C5
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 585AB22F64F897F596A18E3FA4A5396F5E0CDD4A
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS203094.roa
Signing time: Wed 16 Sep 2026 07:25:21 +0000
ROA not before: Wed 16 Sep 2026 07:20:21 +0000
ROA not after: Wed 15 Sep 2027 07:25:21 +0000
asID: 203094
IP address blocks: 5.199.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 04:10:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:5a:b2:2f:64:f8:97:f5:96:a1:8e:3f:a4:a5:39:6f:5e:0c:dd:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Sep 16 07:20:21 2026 GMT
Not After : Sep 15 07:25:21 2027 GMT
Subject: CN=959F8DC5DCF9437886B17C1EF6CD4BBC62DA0FC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:29:c8:06:2d:cc:34:d8:bf:5c:da:90:2b:a0:
36:5b:cb:96:72:e5:83:dc:2e:98:f2:df:fd:bc:78:
11:60:8b:66:7d:6b:f9:03:5f:86:1f:02:f2:ab:47:
8f:1a:4c:02:64:5f:8e:e2:90:5e:7f:95:a4:67:86:
7d:23:d4:47:98:85:49:3e:02:15:f2:56:f9:cd:20:
cb:ea:49:fa:e4:f9:6b:b4:e6:85:0a:91:b1:26:30:
f9:61:66:25:45:c1:64:6b:f5:89:00:fd:d9:37:52:
90:87:d3:59:5b:2b:d2:6e:ee:ed:ee:c8:24:d4:6d:
dc:d7:29:df:e2:bf:b2:de:69:cf:2f:f3:e9:10:05:
25:8e:cb:2d:4d:22:2a:c9:0c:5b:b0:23:bb:f0:80:
24:4b:27:c2:c9:5d:cc:ff:ec:25:39:87:71:71:9c:
3d:6b:4f:39:06:fb:1a:51:6a:9c:93:e9:8d:e9:46:
24:6f:c2:01:e1:76:f6:25:38:30:fc:57:07:a2:33:
a7:8e:57:5f:4e:b5:8f:cd:71:9f:28:33:10:5f:b2:
48:44:ad:fe:d3:6c:b2:01:69:16:91:b2:27:71:f0:
0f:fb:5e:85:dc:19:06:e6:e8:31:b5:8e:44:56:8e:
86:a9:45:41:3c:86:7f:88:d5:18:a5:8d:b4:45:3a:
5a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:9F:8D:C5:DC:F9:43:78:86:B1:7C:1E:F6:CD:4B:BC:62:DA:0F:C5
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS203094.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.21.0/24
Signature Algorithm: sha256WithRSAEncryption
17:d2:09:84:ae:31:e8:98:7e:b7:64:7b:c4:05:67:0c:9a:1c:
72:69:e4:b3:14:c4:e2:80:f8:17:9c:21:3d:6c:a8:d8:53:e7:
0d:4e:45:5e:77:69:b9:4c:45:58:f5:e5:5f:13:00:f9:4e:0b:
cb:31:93:a7:7f:78:b6:a2:51:6d:23:c1:3a:a4:89:98:d3:89:
e0:70:4a:ab:99:a8:b3:72:44:5e:e0:9f:89:8d:39:bf:4a:60:
6b:b6:a6:76:8c:09:11:a5:3b:7e:dd:8e:5b:37:1b:da:52:ba:
be:fb:b1:fb:9a:d1:d4:2a:e3:cb:6a:a5:a2:7c:f8:4c:fc:56:
45:ae:08:11:88:36:e1:50:70:a2:71:0e:ce:4c:46:4a:8a:2e:
bc:9d:a3:ea:0f:bb:21:35:65:de:81:d1:de:11:2c:20:63:26:
c5:ca:45:3e:4c:60:a7:9b:f4:7c:bb:42:c6:ee:6b:61:93:1b:
78:7e:ff:f4:7f:cc:b7:04:ea:2c:cf:18:ab:08:4d:e7:be:b4:
6b:1a:a4:0e:ad:e5:16:bd:18:0e:36:25:0a:79:b6:45:04:d1:
9d:47:ef:dd:68:8e:45:40:5f:62:b3:a9:d7:30:21:ab:44:c7:
f0:08:74:11:9e:bc:dc:47:07:6f:0c:56:b4:dc:cc:3a:89:25:
7e:70:cb:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:13:33 2026 by rpki-client