Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS203098.roa
File: AS203098.roa (raw, json)
Hash identifier: et07MwlA23qTeJEK7eHuUUA6ju/4RUoM8vzrnRG+0R4=
Subject key identifier: E8:95:77:47:DD:B8:2E:A0:14:49:9C:CB:D2:06:64:FB:BE:4E:60:2E
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 7C40EB977871F6CD16A5E734FA11C6766392D753
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS203098.roa
Signing time: Thu 12 Jun 2025 14:16:38 +0000
ROA not before: Thu 12 Jun 2025 14:11:38 +0000
ROA not after: Thu 11 Jun 2026 14:16:38 +0000
asID: 203098
IP address blocks: 2a0a:a606::/32 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 12:46:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:40:eb:97:78:71:f6:cd:16:a5:e7:34:fa:11:c6:76:63:92:d7:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jun 12 14:11:38 2025 GMT
Not After : Jun 11 14:16:38 2026 GMT
Subject: CN=E8957747DDB82EA014499CCBD20664FBBE4E602E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:60:24:a7:ac:46:8c:76:9c:a7:6c:1b:af:84:
77:9d:ca:e2:26:e2:ce:e3:2b:d1:b1:83:c2:05:5e:
55:88:f5:36:79:4f:4a:6a:1d:6c:1e:b9:ab:c3:18:
c1:07:28:fb:f0:08:34:b9:e5:fd:31:69:9f:c4:4f:
34:38:8f:a4:a5:d9:23:78:bc:0a:fd:96:7d:5e:e3:
27:a5:90:af:fb:20:ed:b0:93:80:23:16:6a:b4:12:
57:71:1f:e9:66:88:23:86:03:2d:b2:46:f7:a8:3d:
dd:80:cf:fb:40:58:5b:59:5d:32:5d:23:25:c7:af:
f3:0e:9f:67:1c:87:0d:0d:95:51:01:e7:3a:93:ae:
ed:70:76:d9:61:3a:f8:37:f4:a0:77:7d:ba:46:22:
2d:36:9a:48:6a:95:22:28:f2:0f:28:c6:56:8f:cd:
a0:2b:7d:db:f8:d1:b0:40:a8:55:c8:63:67:36:c4:
ca:7e:59:53:bb:65:26:53:17:0b:b5:ae:68:02:cf:
dd:29:dc:2d:0a:b1:5a:04:28:7c:8b:b8:02:d4:f4:
a3:23:6c:8c:a7:e2:e5:3a:b3:7a:da:80:ad:1b:13:
f5:e3:32:0b:6f:ea:79:e2:0e:dd:00:c2:81:d3:fb:
d7:ec:8e:36:7c:ea:4b:06:65:41:95:7c:de:66:25:
9f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:95:77:47:DD:B8:2E:A0:14:49:9C:CB:D2:06:64:FB:BE:4E:60:2E
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS203098.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:a606::/32
Signature Algorithm: sha256WithRSAEncryption
b0:50:f5:f6:17:5f:cf:7f:14:7c:73:8e:b6:45:fa:8b:43:a5:
f4:ba:7a:3b:e9:49:43:fe:e8:eb:fd:37:bf:91:ef:86:fb:3e:
9c:2b:15:46:7f:c3:09:e5:be:dc:c5:6e:e5:aa:fc:79:52:23:
53:dd:94:7f:68:f7:0f:fb:32:39:13:0a:f4:ae:89:15:de:9b:
88:56:6b:60:4c:9c:5b:a1:ac:12:7d:9d:7f:c5:93:b8:a2:10:
c5:50:71:ab:d3:03:f0:4e:ea:c0:96:1e:ac:25:a3:2d:90:e5:
0d:8e:84:c7:72:72:91:d6:d0:9f:b8:d7:fe:f1:0e:46:7a:f6:
cf:97:c5:2d:2b:e6:79:b8:62:df:06:de:c9:be:e0:8f:b9:f6:
65:6b:db:7e:be:39:52:c1:b6:ff:fe:c6:1b:a5:c3:a8:f2:c9:
ec:ca:45:f2:3a:d6:d6:f9:8b:6a:14:a0:0d:a1:46:8f:96:c0:
35:43:84:eb:da:8c:97:ab:c9:19:91:7d:51:74:99:e2:d5:87:
a0:c9:63:06:db:ef:87:d1:ce:dd:55:d3:25:ee:1a:3e:7d:b9:
49:65:4b:31:0b:93:45:a6:c9:07:7b:9b:7c:bc:e2:10:21:73:
cc:62:58:6b:3b:c5:a3:29:9c:12:7b:98:e8:3d:1c:0b:5c:fc:
7a:77:d8:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:43:40 2025 by rpki-client