Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS203472.roa
File: AS203472.roa (raw, json)
Hash identifier: Cf7vLeEen4RW1Zv+FzR1WuP5g19FCCObVtK0F1tW/IE=
Subject key identifier: A5:F3:89:B4:66:CA:C9:CA:10:28:89:70:A6:40:30:E5:93:2A:85:FE
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 730CCF416BDE0422E887B5C95FC3CC9EDCA6D0AC
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS203472.roa
Signing time: Wed 04 Nov 2026 20:32:51 +0000
ROA not before: Wed 04 Nov 2026 20:27:51 +0000
ROA not after: Wed 03 Nov 2027 20:32:51 +0000
asID: 203472
IP address blocks: 2a0e:8f02:f046::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:0c:cf:41:6b:de:04:22:e8:87:b5:c9:5f:c3:cc:9e:dc:a6:d0:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 20:27:51 2026 GMT
Not After : Nov 3 20:32:51 2027 GMT
Subject: CN=A5F389B466CAC9CA10288970A64030E5932A85FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:31:a2:a6:78:f0:7b:78:7f:33:78:21:84:25:
6d:e1:0c:f7:52:13:24:41:53:9b:2d:69:76:5d:18:
3f:85:09:b7:68:de:01:95:b3:8d:58:05:ac:19:0f:
31:e1:dd:2b:4f:6a:fa:94:f5:b8:77:8d:72:22:79:
9e:5e:33:5b:04:cb:4a:75:01:34:82:94:88:9c:e7:
68:a6:28:e1:03:f1:8d:03:8c:9d:48:51:33:33:a1:
dd:e9:a3:17:34:02:10:33:b2:db:b8:27:e1:ad:17:
2f:1a:70:c4:ea:fe:46:f5:3e:c7:a6:92:8f:6b:9f:
ff:b9:ca:7c:64:d4:35:a3:28:34:9c:3e:57:55:6c:
24:70:c4:88:21:ec:c3:5e:fd:b1:65:58:1f:4a:9a:
04:fc:d0:46:c1:e9:82:f1:40:57:da:3f:8a:5e:ab:
93:74:9a:cd:81:3b:6a:83:f7:b8:36:24:76:dc:35:
ec:c7:15:86:4e:35:8c:4c:48:d8:58:9b:72:c9:53:
13:40:08:32:9e:14:8f:25:dd:e3:c1:e0:c0:86:51:
73:b6:3c:65:73:49:44:db:76:03:05:d4:92:f8:26:
3c:fa:ad:33:1f:d1:48:4c:16:a9:fa:a3:b3:cf:fd:
56:03:aa:b4:c9:b9:06:8d:62:78:86:08:62:cd:e4:
48:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F3:89:B4:66:CA:C9:CA:10:28:89:70:A6:40:30:E5:93:2A:85:FE
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS203472.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f046::/48
Signature Algorithm: sha256WithRSAEncryption
b7:d2:1a:b9:70:ec:24:9e:db:d4:e1:41:a8:fd:67:bc:ca:56:
20:23:f4:a9:08:27:b2:43:27:a5:1e:6f:26:89:af:72:bf:99:
d8:cc:ff:3e:7e:6a:3e:81:ab:94:93:d1:66:8c:87:59:fb:c1:
28:42:fd:ca:11:79:5e:6d:12:a0:c6:07:2a:2d:34:7c:61:2b:
a3:1b:de:bf:53:43:ed:79:a5:45:16:fc:ce:1c:5c:b6:9d:9c:
13:0f:d8:58:bb:31:f2:af:4c:12:f0:58:5b:78:a7:18:e7:90:
74:eb:98:89:a6:bb:e2:0c:a1:23:b4:7b:3d:d1:92:61:38:a5:
2c:73:40:7e:1c:1d:07:16:02:ec:e8:52:11:11:22:2e:73:20:
c9:8a:36:eb:d8:fa:e1:6b:5a:57:a1:46:a4:34:11:f1:e4:3f:
e7:4f:b4:ef:42:e4:94:08:89:34:2d:95:32:9e:b6:f6:80:46:
28:36:c5:27:98:02:0f:cf:ad:9c:02:5e:36:f3:12:86:26:15:
5a:a5:a2:af:b5:e7:74:2c:2a:61:e4:c1:28:13:01:1d:c7:e2:
fd:05:1a:8e:af:df:53:72:f4:ec:bf:70:8a:d6:fd:91:28:59:
87:5a:f0:a5:db:7a:46:52:d7:88:63:d9:85:9a:6e:cd:7e:3f:
a9:aa:58:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 06:05:15 2026 by rpki-client