Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS203997.roa
File: AS203997.roa (raw, json)
Hash identifier: UZATc+a7OEPKCKgRF0nOWLSdXtur/TqC56OgpT3yNlA=
Subject key identifier: 18:85:81:DA:00:4E:D7:0D:A1:95:00:46:B2:11:39:24:FA:BB:2B:65
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 7DA9C6AEB04A85F3041D13D7EC462146960E3927
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS203997.roa
Signing time: Sat 28 Mar 2026 07:12:21 +0000
ROA not before: Sat 28 Mar 2026 07:07:21 +0000
ROA not after: Sat 27 Mar 2027 07:12:21 +0000
asID: 203997
IP address blocks: 179.61.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:a9:c6:ae:b0:4a:85:f3:04:1d:13:d7:ec:46:21:46:96:0e:39:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Mar 28 07:07:21 2026 GMT
Not After : Mar 27 07:12:21 2027 GMT
Subject: CN=188581DA004ED70DA1950046B2113924FABB2B65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1b:b2:86:66:38:4c:8b:fc:f1:3e:9e:5e:dd:
25:f3:87:33:e6:cd:41:ea:5a:15:3f:e1:70:9d:59:
1c:5e:94:66:7c:78:25:05:0a:57:6e:c2:30:8f:a6:
0d:c1:54:17:c2:13:2e:90:3e:9e:38:38:25:00:35:
d6:c1:21:97:b6:03:bc:33:a6:99:13:8a:ae:2b:27:
84:4c:00:a3:20:19:dd:f3:59:98:3c:cd:3d:6c:dd:
5c:cc:0a:ae:84:21:94:88:5c:00:cc:8b:b9:87:a6:
f5:7d:b0:5e:cc:f7:d2:84:52:4f:29:32:e1:65:df:
2d:e6:71:73:31:a8:f7:b1:59:71:86:18:c4:3a:70:
54:23:b8:91:ad:7e:0f:c4:f7:44:20:34:de:3b:94:
86:e2:b5:86:8f:ba:b6:60:f8:b9:f4:f9:e4:18:f5:
28:21:aa:bd:64:ad:78:54:98:ff:c0:b7:be:b7:59:
45:e5:b7:f7:9a:9e:81:c9:e3:eb:96:21:50:68:dc:
44:c3:59:72:74:ff:e3:d7:53:ac:9a:a9:0c:89:71:
a2:01:e8:b4:bc:98:46:06:48:93:c0:e6:1c:e1:c3:
ad:da:0e:b8:62:cb:4b:9d:d6:5a:b7:f5:81:e9:76:
21:b6:ff:40:3c:62:e5:0b:67:96:3a:e7:1f:d2:4b:
3e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:85:81:DA:00:4E:D7:0D:A1:95:00:46:B2:11:39:24:FA:BB:2B:65
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS203997.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.243.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:15:a0:b4:d8:2d:c6:c8:a2:f0:0e:71:06:47:c8:e5:60:02:
9e:28:6b:a9:a8:76:cf:85:8f:1e:5c:c7:fb:db:12:ee:a4:d0:
e7:5f:9e:8d:93:b6:c0:42:7a:4a:ba:0a:7f:eb:b2:6a:d5:19:
a6:09:cb:72:55:ca:1c:b2:92:aa:b8:12:24:15:1c:d1:a3:61:
63:97:ce:fa:fb:08:36:02:6b:de:46:78:51:79:a7:96:9e:aa:
0d:95:3e:da:5a:62:c6:dd:b4:90:a4:39:47:19:c0:b7:22:bc:
16:5b:cf:13:80:e5:90:9c:e4:0c:31:33:08:5a:f1:dc:b9:d9:
c8:3e:0f:48:7e:67:ac:4b:bf:96:ec:7a:36:b2:11:77:4b:ce:
3e:c4:c2:d2:e7:56:40:39:72:a3:f7:8d:31:b2:b3:ae:ed:46:
e3:12:2b:3b:0c:03:fa:2e:e0:a9:d4:6f:05:e9:b6:46:6a:bc:
e4:18:7b:d5:20:4b:87:d2:c2:c2:4c:aa:39:1b:18:e5:fa:db:
c9:3c:3f:e6:0c:63:fc:9b:db:60:40:69:74:16:c5:fe:cc:c3:
84:e0:ac:67:fc:4f:6e:73:30:82:27:82:bf:00:83:09:75:1c:
cc:e1:64:59:96:4e:7a:38:d0:8f:2c:b3:46:90:32:4d:67:73:
2e:73:73:26
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUfanGrrBKhfMEHRPX7EYhRpYOOScwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNjAzMjgwNzA3MjFaFw0yNzAzMjcwNzEyMjFaMDMxMTAvBgNV
BAMTKDE4ODU4MURBMDA0RUQ3MERBMTk1MDA0NkIyMTEzOTI0RkFCQjJCNjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsG7KGZjhMi/zxPp5e3SXzhzPm
zUHqWhU/4XCdWRxelGZ8eCUFClduwjCPpg3BVBfCEy6QPp44OCUANdbBIZe2A7wz
ppkTiq4rJ4RMAKMgGd3zWZg8zT1s3VzMCq6EIZSIXADMi7mHpvV9sF7M99KEUk8p
MuFl3y3mcXMxqPexWXGGGMQ6cFQjuJGtfg/E90QgNN47lIbitYaPurZg+Ln0+eQY
9Sghqr1krXhUmP/At763WUXlt/eanoHJ4+uWIVBo3ETDWXJ0/+PXU6yaqQyJcaIB
6LS8mEYGSJPA5hzhw63aDrhiy0ud1lq39YHpdiG2/0A8YuULZ5Y65x/SSz4XAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUGIWB2gBO1w2hlQBGshE5JPq7K2UwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjAzOTk3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsz3z
MA0GCSqGSIb3DQEBCwUAA4IBAQCKFaC02C3GyKLwDnEGR8jlYAKeKGupqHbPhY8e
XMf72xLupNDnX56Nk7bAQnpKugp/67Jq1RmmCctyVcocspKquBIkFRzRo2Fjl876
+wg2AmveRnhReaeWnqoNlT7aWmLG3bSQpDlHGcC3IrwWW88TgOWQnOQMMTMIWvHc
udnIPg9IfmesS7+W7Ho2shF3S84+xMLS51ZAOXKj940xsrOu7UbjEis7DAP6LuCp
1G8F6bZGarzkGHvVIEuH0sLCTKo5Gxjl+tvJPD/mDGP8m9tgQGl0FsX+zMOE4Kxn
/E9uczCCJ4K/AIMJdRzM4WRZlk56ONCPLLNGkDJNZ3Muc3Mm
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:02:29 2026 by rpki-client