Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS7203.roa
File: AS7203.roa (raw, json)
Hash identifier: mokrh06xaW/ocfpegA7b3R+UMfNy6Y41yclri+YJtqo=
Subject key identifier: AA:07:B1:E9:07:3A:ED:DB:49:26:2D:83:F8:E5:EB:60:AB:4B:8C:6E
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 38424A9E07CDA606A2BD45ACD0B75DA306C6F767
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS7203.roa
Signing time: Mon 14 Sep 2026 01:49:35 +0000
ROA not before: Mon 14 Sep 2026 01:44:35 +0000
ROA not after: Mon 13 Sep 2027 01:49:35 +0000
asID: 7203
IP address blocks: 179.61.166.0/24 maxlen: 24
179.61.245.0/24 maxlen: 24
191.96.130.0/24 maxlen: 24
191.101.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:20:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:42:4a:9e:07:cd:a6:06:a2:bd:45:ac:d0:b7:5d:a3:06:c6:f7:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 14 01:44:35 2026 GMT
Not After : Sep 13 01:49:35 2027 GMT
Subject: CN=AA07B1E9073AEDDB49262D83F8E5EB60AB4B8C6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f0:1d:cb:d0:6e:a8:5b:ec:76:d3:51:aa:d6:
2a:2e:90:c0:57:19:f8:19:8a:a9:8e:05:12:e4:dc:
27:82:9b:da:be:ca:96:a0:b7:c8:4c:08:0b:6c:35:
76:5a:2f:03:10:5a:22:a4:60:f7:33:a7:bc:c5:c9:
e2:33:bf:7f:d6:77:03:19:76:27:00:0e:f4:4d:c9:
32:68:bd:93:ed:89:18:ff:70:58:a3:1d:36:dd:53:
93:26:bb:2f:d4:ca:81:05:50:4f:56:0e:f2:5e:eb:
02:13:f6:98:9e:99:91:14:cf:0d:98:94:84:4a:83:
cd:9e:a5:2d:63:af:c3:d2:2a:d7:3b:dd:08:e8:f9:
36:5c:2e:54:a1:a4:14:e1:59:e4:97:88:4e:2f:ca:
c4:31:4e:ef:e9:d9:63:c4:08:a2:d3:bd:09:ad:08:
3d:1d:b6:59:a7:de:22:9b:25:b6:e4:16:be:4f:57:
57:b2:60:17:ff:b2:e7:52:63:2f:1e:7f:22:03:1e:
b5:f6:9b:c1:e8:00:25:12:41:d6:b1:e9:9e:06:a6:
5d:8d:5a:68:92:e9:1a:87:30:54:b1:2e:80:29:bb:
df:66:1e:52:39:65:48:df:38:da:2e:b8:dc:07:91:
20:31:93:ab:24:af:78:4f:c3:c8:dc:08:3e:99:32:
d3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:07:B1:E9:07:3A:ED:DB:49:26:2D:83:F8:E5:EB:60:AB:4B:8C:6E
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS7203.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.166.0/24
179.61.245.0/24
191.96.130.0/24
191.101.41.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:aa:3f:f3:33:05:42:d2:91:66:79:26:a2:50:45:40:fd:a7:
c3:51:b2:8f:a7:bf:6c:4e:b7:81:0b:c2:9b:10:d9:c4:90:43:
c6:5e:cc:d3:1b:2c:5e:f5:7d:26:cd:53:73:04:13:9e:63:31:
1a:32:6e:f7:59:e2:df:87:5f:2b:4c:d2:f1:1e:eb:01:3f:61:
98:00:a7:5a:87:e2:bb:41:a1:6f:5a:2a:27:e4:c2:dd:e4:16:
78:75:dd:97:3d:75:14:ff:20:43:19:81:fa:26:5b:4f:8c:87:
53:38:8f:d5:83:2b:e6:7c:3f:13:a8:26:10:0c:13:5d:03:2d:
98:c3:1b:34:7e:d8:bf:ca:dc:46:8c:53:40:fd:6a:df:40:f1:
73:d6:87:58:74:42:0e:90:53:46:7b:6d:00:08:fe:59:35:98:
a8:d9:95:65:ae:e4:5f:67:38:41:59:4a:34:42:29:44:71:a2:
9a:4b:ba:c2:b7:02:42:1f:1a:45:3f:bc:6f:81:50:dc:d1:87:
1c:97:a2:f7:04:90:e2:2b:c9:26:83:e9:9f:a1:51:90:7e:7a:
12:fc:36:cb:65:97:28:6a:81:96:b8:ff:c9:54:24:1c:b5:ee:
46:80:3e:ae:88:40:d4:10:a8:02:55:4a:b3:03:cf:05:46:85:
65:1d:ec:1e
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUOEJKngfNpgaivUWs0LddowbG92cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNjA5MTQwMTQ0MzVaFw0yNzA5MTMwMTQ5MzVaMDMxMTAvBgNV
BAMTKEFBMDdCMUU5MDczQUVEREI0OTI2MkQ4M0Y4RTVFQjYwQUI0QjhDNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC78B3L0G6oW+x201Gq1ioukMBX
GfgZiqmOBRLk3CeCm9q+ypagt8hMCAtsNXZaLwMQWiKkYPczp7zFyeIzv3/WdwMZ
dicADvRNyTJovZPtiRj/cFijHTbdU5Mmuy/UyoEFUE9WDvJe6wIT9piemZEUzw2Y
lIRKg82epS1jr8PSKtc73Qjo+TZcLlShpBThWeSXiE4vysQxTu/p2WPECKLTvQmt
CD0dtlmn3iKbJbbkFr5PV1eyYBf/sudSYy8efyIDHrX2m8HoACUSQdax6Z4Gpl2N
WmiS6RqHMFSxLoApu99mHlI5ZUjfONouuNwHkSAxk6skr3hPw8jcCD6ZMtOrAgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQUqgex6Qc67dtJJi2D+OXrYKtLjG4wHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTNzIwMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAxBggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEALM9pgME
ALM99QMEAL9gggMEAL9lKTANBgkqhkiG9w0BAQsFAAOCAQEAaqo/8zMFQtKRZnkm
olBFQP2nw1Gyj6e/bE63gQvCmxDZxJBDxl7M0xssXvV9Js1TcwQTnmMxGjJu91ni
34dfK0zS8R7rAT9hmACnWofiu0Ghb1oqJ+TC3eQWeHXdlz11FP8gQxmB+iZbT4yH
UziP1YMr5nw/E6gmEAwTXQMtmMMbNH7Yv8rcRoxTQP1q30Dxc9aHWHRCDpBTRntt
AAj+WTWYqNmVZa7kX2c4QVlKNEIpRHGimku6wrcCQh8aRT+8b4FQ3NGHHJei9wSQ
4ivJJoPpn6FRkH56Evw2y2WXKGqBlrj/yVQkHLXuRoA+rohA1BCoAlVKswPPBUaF
ZR3sHg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 03:14:17 2026 by rpki-client