Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS203528.roa
File: AS203528.roa (raw, json)
Hash identifier: XbqKq3BpcWQncqJgFHBsXlHKjLFBHLa0ukOxfOihTgQ=
Subject key identifier: E1:18:6A:70:3B:20:F4:F3:F2:3E:E2:1A:61:BC:F6:54:35:1F:27:2B
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 2F5785A12E7D33C448A87E2F84FB1AC45E495CE5
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS203528.roa
Signing time: Wed 04 Nov 2026 20:32:54 +0000
ROA not before: Wed 04 Nov 2026 20:27:54 +0000
ROA not after: Wed 03 Nov 2027 20:32:54 +0000
asID: 203528
IP address blocks: 2a0e:8f02:21d0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:52:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:57:85:a1:2e:7d:33:c4:48:a8:7e:2f:84:fb:1a:c4:5e:49:5c:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 20:27:54 2026 GMT
Not After : Nov 3 20:32:54 2027 GMT
Subject: CN=E1186A703B20F4F3F23EE21A61BCF654351F272B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:33:dc:34:e9:ce:f5:7e:60:5d:f9:25:16:f6:
86:29:f3:60:e4:f3:db:64:0a:60:dc:70:9a:2c:b6:
1f:3c:b5:5e:f7:75:ee:de:fd:ce:b0:08:6e:bf:bb:
8e:51:8a:6b:90:95:33:d1:fe:38:4c:46:ad:b2:69:
bd:82:90:cf:55:6e:24:b7:81:32:44:87:c2:20:df:
04:10:20:8b:f2:d4:d8:db:24:4e:f7:ea:2e:d6:88:
01:55:19:ca:da:41:90:62:de:39:81:80:35:51:c8:
11:9d:6d:b5:60:d2:57:c2:ae:b9:02:42:01:e6:b5:
d8:ab:16:ca:d0:a7:47:43:bc:9d:45:15:1c:f4:1e:
1d:e8:01:b7:0a:2f:1d:af:20:59:df:74:a7:fb:60:
04:83:db:d6:1f:18:04:a3:a2:e0:36:b9:f2:ee:9b:
0a:cf:a1:82:5e:23:0c:9d:64:49:1a:f6:e5:5e:bb:
fc:25:7c:66:ab:d0:c5:ab:9d:85:e4:59:14:3e:81:
da:6b:71:ad:69:a3:74:65:6b:8e:6e:63:55:51:1d:
af:43:13:8e:a0:6b:3b:4f:2a:8d:b2:c6:8e:19:7b:
26:f9:95:b4:b8:44:00:0a:5c:54:3a:c9:d0:f0:d8:
cd:1a:ce:5e:e3:ee:8d:ae:86:e8:2d:e9:7b:bb:a9:
51:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:18:6A:70:3B:20:F4:F3:F2:3E:E2:1A:61:BC:F6:54:35:1F:27:2B
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS203528.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:21d0::/44
Signature Algorithm: sha256WithRSAEncryption
67:07:50:f7:be:fc:e4:32:a0:30:16:52:18:60:b8:3e:e5:0e:
30:8c:e2:b7:99:0c:28:71:4f:3a:3e:d7:5a:06:6a:f3:cf:a0:
85:91:65:5f:5e:82:60:06:e5:6c:f3:dc:d0:48:29:c3:80:03:
81:cd:b0:eb:09:2b:c3:4f:9a:3c:57:8f:ec:df:c3:47:76:ea:
43:81:d4:62:92:75:f5:9b:1e:ef:25:a9:61:8e:8d:28:e0:1e:
83:01:4e:49:e0:66:be:af:e0:ca:01:46:82:3f:ad:08:bf:63:
97:2a:35:70:52:05:58:f2:91:f1:9e:57:27:db:b1:28:b4:88:
81:ef:df:12:30:f9:5e:ab:2c:8a:24:ea:72:ba:af:02:9e:c0:
cd:89:05:ae:6f:b5:a3:12:d4:6b:b8:69:ca:5a:81:4a:4f:3b:
ea:f8:15:7b:78:e9:02:33:a6:fa:e3:12:37:76:81:d6:79:61:
d3:6a:a5:7c:04:ad:f2:56:d7:7f:83:5d:c0:7c:7c:dd:6d:78:
97:82:8a:58:10:1c:12:12:67:5e:6f:89:63:6d:02:6d:5d:f4:
27:9c:38:91:2c:9c:4e:ad:15:04:de:26:90:da:e8:77:7d:35:
9b:e7:52:c2:a6:18:45:e2:8b:c2:25:62:b8:ad:e6:16:b5:20:
43:c0:11:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:23:38 2026 by rpki-client