Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS203738.roa
File: AS203738.roa (raw, json)
Hash identifier: /lcdSdRa9nml80rpyQoSvqECjOahaJyjVt38WE9WNyk=
Subject key identifier: 7A:2F:C3:B8:A0:01:A1:D2:13:D8:EE:B0:5B:A0:94:CD:0B:68:CE:FC
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 39444AB3CA8EC1C8041554AAAF233A2191533C47
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS203738.roa
Signing time: Wed 04 Nov 2026 20:32:47 +0000
ROA not before: Wed 04 Nov 2026 20:27:47 +0000
ROA not after: Wed 03 Nov 2027 20:32:47 +0000
asID: 203738
IP address blocks: 2a0e:8f02:f041::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:52:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:44:4a:b3:ca:8e:c1:c8:04:15:54:aa:af:23:3a:21:91:53:3c:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 20:27:47 2026 GMT
Not After : Nov 3 20:32:47 2027 GMT
Subject: CN=7A2FC3B8A001A1D213D8EEB05BA094CD0B68CEFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b0:b6:80:47:32:93:51:27:35:b5:44:86:52:
c0:5a:04:9b:ba:dd:88:fe:b5:ca:de:af:4c:75:46:
bd:44:a4:b8:57:cd:33:db:fd:38:15:19:be:9a:2f:
ea:74:2a:fa:41:c8:da:49:53:dc:1b:69:e3:b8:e1:
56:85:36:6e:88:fa:ab:73:c5:28:14:d3:d8:69:49:
fb:06:7a:ad:a7:b5:b7:7a:0e:ec:3b:b4:67:55:6c:
c3:fa:46:60:43:22:63:07:9e:9f:72:1c:e0:40:ac:
76:10:9f:aa:2c:18:2d:1c:9b:17:06:79:df:59:64:
da:01:b5:c7:fe:59:7a:a7:cf:bf:e8:32:83:9b:ae:
1b:0e:17:79:d1:48:ab:ba:3c:91:6c:12:a5:11:ad:
98:93:84:da:67:76:e7:62:3c:28:fd:ba:6d:50:be:
99:04:95:f0:4e:4f:63:0d:6c:e9:7c:10:74:d3:fa:
ec:72:7c:5e:f7:35:8e:eb:54:62:b5:ac:3b:f5:f1:
64:0b:c7:62:3d:3c:0e:b2:0f:86:dc:29:3d:1e:a8:
05:9d:00:7b:d6:b9:7b:a8:89:7e:b7:6f:ba:fc:f0:
a6:7f:89:6a:6f:a0:a3:1f:39:31:9f:b7:a1:1c:41:
5c:ac:45:ef:4b:70:28:d5:d3:15:02:6a:cd:40:d7:
03:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:2F:C3:B8:A0:01:A1:D2:13:D8:EE:B0:5B:A0:94:CD:0B:68:CE:FC
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS203738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f041::/48
Signature Algorithm: sha256WithRSAEncryption
35:dd:66:06:36:5a:8d:34:88:c9:6d:44:f5:63:99:cf:0c:1c:
04:f4:ae:0d:66:57:19:dc:c4:b2:25:23:23:81:44:f7:21:bd:
47:67:bf:90:4a:79:ba:fd:00:a1:0f:08:6a:f6:fc:26:23:71:
19:3b:5d:56:e9:06:37:3d:23:e3:55:87:a3:ed:db:c6:87:00:
8f:8a:0b:e6:cf:11:9f:b9:dd:23:80:28:03:b7:75:b2:a6:4b:
57:de:c8:2c:d5:15:c9:94:1e:e6:63:bd:01:7b:df:28:8e:fa:
26:6f:11:fe:c5:f1:39:02:a9:01:a7:c5:cf:ea:ce:92:ca:6c:
38:54:06:3f:45:16:e4:87:5c:49:23:fb:f3:f0:26:ba:ae:34:
58:e9:90:df:b0:3c:4d:c9:f0:bf:63:4d:68:ef:c4:a9:7d:fc:
aa:05:fc:09:d0:0b:25:06:68:02:7f:0e:17:39:7d:4a:61:98:
69:eb:21:02:b1:cb:80:7a:08:7b:70:10:41:6e:ff:46:88:d0:
3e:8a:3f:85:17:de:bd:b6:d6:c2:47:ed:90:6d:ac:b1:a9:3f:
c8:d5:57:29:04:94:3a:2d:2b:d8:48:55:15:4c:fd:7a:3d:bf:
83:84:64:66:72:2b:da:8d:0c:4a:f8:62:c5:bc:13:35:5a:cc:
91:f9:a3:ca
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIUOURKs8qOwcgEFVSqryM6IZFTPEcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZmFjNDcwOGQ3ZTI2NWRiMTA0NGY5YmIwZWU4NzI4NTg3
ZjQ4YjQ4NDAeFw0yNjExMDQyMDI3NDdaFw0yNzExMDMyMDMyNDdaMDMxMTAvBgNV
BAMTKDdBMkZDM0I4QTAwMUExRDIxM0Q4RUVCMDVCQTA5NENEMEI2OENFRkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUsLaARzKTUSc1tUSGUsBaBJu6
3Yj+tcrer0x1Rr1EpLhXzTPb/TgVGb6aL+p0KvpByNpJU9wbaeO44VaFNm6I+qtz
xSgU09hpSfsGeq2ntbd6Duw7tGdVbMP6RmBDImMHnp9yHOBArHYQn6osGC0cmxcG
ed9ZZNoBtcf+WXqnz7/oMoObrhsOF3nRSKu6PJFsEqURrZiThNpndudiPCj9um1Q
vpkElfBOT2MNbOl8EHTT+uxyfF73NY7rVGK1rDv18WQLx2I9PA6yD4bcKT0eqAWd
AHvWuXuoiX63b7r88KZ/iWpvoKMfOTGft6EcQVysRe9LcCjV0xUCas1A1wN/AgMB
AAGjggIOMIICCjAdBgNVHQ4EFgQUei/DuKABodIT2O6wW6CUzQtozvwwHwYDVR0j
BBgwFoAU+sRwjX4mXbEET5uw7ocoWH9ItIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYtZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5
MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5j
cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtc1J3alg0bVhiRUVUNXV3N29jb1dI
OUl0SVEuY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y
c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81YjU4ZTY0Ni1lN2Ey
LTQ2NWMtODdjNS00M2MzNTlhZDkzNjkvMC9BUzIwMzczOC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoO
jwLwQTANBgkqhkiG9w0BAQsFAAOCAQEANd1mBjZajTSIyW1E9WOZzwwcBPSuDWZX
GdzEsiUjI4FE9yG9R2e/kEp5uv0AoQ8Iavb8JiNxGTtdVukGNz0j41WHo+3bxocA
j4oL5s8Rn7ndI4AoA7d1sqZLV97ILNUVyZQe5mO9AXvfKI76Jm8R/sXxOQKpAafF
z+rOkspsOFQGP0UW5IdcSSP78/Amuq40WOmQ37A8Tcnwv2NNaO/EqX38qgX8CdAL
JQZoAn8OFzl9SmGYaeshArHLgHoIe3AQQW7/RojQPoo/hRfevbbWwkftkG2ssak/
yNVXKQSUOi0r2EhVFUz9ej2/g4RkZnIr2o0MSvhixbwTNVrMkfmjyg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 15:17:17 2026 by rpki-client