Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS203807.roa
File: AS203807.roa (raw, json)
Hash identifier: Y/hpmJxATLQ1nnPlKmOxtiU6Vj0Xh4Xzr8BUj7KhIKI=
Subject key identifier: E7:CE:9C:DA:F6:90:39:8B:9B:44:5B:54:2A:78:34:A6:F6:F1:42:34
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 0B3F9470471D18F66B4B126D8485E12AB18169B3
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS203807.roa
Signing time: Wed 04 Nov 2026 20:32:49 +0000
ROA not before: Wed 04 Nov 2026 20:27:49 +0000
ROA not after: Wed 03 Nov 2027 20:32:49 +0000
asID: 203807
IP address blocks: 2a0e:8f02:2210::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:52:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:3f:94:70:47:1d:18:f6:6b:4b:12:6d:84:85:e1:2a:b1:81:69:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 20:27:49 2026 GMT
Not After : Nov 3 20:32:49 2027 GMT
Subject: CN=E7CE9CDAF690398B9B445B542A7834A6F6F14234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ae:50:85:3b:8b:a0:99:9b:91:b4:02:26:5c:
25:7e:aa:55:a4:87:3f:8e:fc:e8:21:91:6f:65:e0:
5b:41:99:68:34:86:1b:fc:06:da:88:21:23:80:b9:
27:ae:fd:c5:e5:b2:df:9c:b1:87:2c:9d:3c:df:3d:
85:f9:92:26:fc:9e:b7:89:5f:c8:5d:91:5b:6a:64:
02:c0:7c:67:2b:cc:0f:00:0b:1a:70:33:16:0b:74:
8b:8c:f3:dd:f3:68:1a:c9:f8:9b:e1:51:fb:e7:5b:
1e:08:c3:27:40:d4:3e:3d:41:81:35:e7:ca:b4:d9:
41:ee:fb:95:cb:9b:4f:9b:f8:f5:2d:62:a5:2d:26:
41:3e:ff:96:b5:59:3b:f7:fe:83:2a:89:ba:98:c8:
93:4e:d9:13:6c:79:8f:b1:79:b9:9b:22:42:d6:7f:
56:5c:9b:98:19:f4:46:ca:6a:fc:5d:f6:ff:d9:8d:
00:b2:ee:59:03:33:58:60:c0:b9:19:6f:57:54:be:
34:10:62:5e:07:9f:46:af:18:94:6c:78:e5:6a:12:
38:b5:b4:cb:c5:ff:28:03:3d:be:42:e8:ec:f4:d4:
b9:0d:4f:eb:6f:fd:81:e6:2b:69:a2:e4:19:e8:b1:
9f:fc:97:86:32:9d:e9:bb:f5:23:9c:91:aa:4b:83:
9d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:CE:9C:DA:F6:90:39:8B:9B:44:5B:54:2A:78:34:A6:F6:F1:42:34
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS203807.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:2210::/44
Signature Algorithm: sha256WithRSAEncryption
85:83:32:e6:46:f9:6d:18:43:d9:0c:26:98:a9:37:b9:06:7c:
ec:47:84:5e:42:22:ea:d3:2d:6a:68:20:6a:9c:a0:0a:53:2d:
df:09:40:55:e0:a4:60:e9:4d:0b:03:9f:60:9b:3e:7a:3f:34:
b5:95:0e:84:24:cb:a2:5c:10:53:84:4c:31:f7:3c:c1:a7:d3:
08:01:a0:e8:e4:8d:cb:6f:9a:cb:76:a0:53:37:ae:f9:dd:31:
14:19:e0:fe:9a:96:9c:63:b5:67:0a:4c:37:14:c5:9e:cf:f4:
c1:49:53:ff:d2:cb:ef:fe:59:33:e6:a7:41:83:db:4e:ae:0c:
f8:f8:d0:20:04:c5:da:5d:92:c6:78:ba:5f:e4:b7:18:92:62:
62:b8:e7:43:fe:73:5c:89:45:3e:86:c9:3a:6a:07:8e:9e:cd:
94:44:4a:d4:e0:37:01:8a:10:ea:6b:0a:1e:1a:26:e7:49:50:
f7:e2:51:c0:d4:85:ba:46:1b:62:09:22:d8:60:5c:58:5a:54:
fe:78:79:32:d7:97:97:08:01:c9:2f:49:d2:f0:98:8c:ef:cc:
e1:1b:77:59:80:65:96:26:fe:ee:30:53:ff:f6:c5:24:05:68:
ce:fe:4c:41:d7:40:29:c2:51:fb:95:d8:95:1b:6c:5b:0f:fa:
b2:c7:d8:6d
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIUCz+UcEcdGPZrSxJthIXhKrGBabMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZmFjNDcwOGQ3ZTI2NWRiMTA0NGY5YmIwZWU4NzI4NTg3
ZjQ4YjQ4NDAeFw0yNjExMDQyMDI3NDlaFw0yNzExMDMyMDMyNDlaMDMxMTAvBgNV
BAMTKEU3Q0U5Q0RBRjY5MDM5OEI5QjQ0NUI1NDJBNzgzNEE2RjZGMTQyMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcrlCFO4ugmZuRtAImXCV+qlWk
hz+O/OghkW9l4FtBmWg0hhv8BtqIISOAuSeu/cXlst+csYcsnTzfPYX5kib8nreJ
X8hdkVtqZALAfGcrzA8ACxpwMxYLdIuM893zaBrJ+JvhUfvnWx4IwydA1D49QYE1
58q02UHu+5XLm0+b+PUtYqUtJkE+/5a1WTv3/oMqibqYyJNO2RNseY+xebmbIkLW
f1Zcm5gZ9EbKavxd9v/ZjQCy7lkDM1hgwLkZb1dUvjQQYl4Hn0avGJRseOVqEji1
tMvF/ygDPb5C6Oz01LkNT+tv/YHmK2mi5BnosZ/8l4Yynem79SOckapLg50dAgMB
AAGjggIOMIICCjAdBgNVHQ4EFgQU586c2vaQOYubRFtUKng0pvbxQjQwHwYDVR0j
BBgwFoAU+sRwjX4mXbEET5uw7ocoWH9ItIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYtZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5
MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5j
cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtc1J3alg0bVhiRUVUNXV3N29jb1dI
OUl0SVEuY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9y
c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81YjU4ZTY0Ni1lN2Ey
LTQ2NWMtODdjNS00M2MzNTlhZDkzNjkvMC9BUzIwMzgwNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoO
jwIiEDANBgkqhkiG9w0BAQsFAAOCAQEAhYMy5kb5bRhD2QwmmKk3uQZ87EeEXkIi
6tMtamggapygClMt3wlAVeCkYOlNCwOfYJs+ej80tZUOhCTLolwQU4RMMfc8wafT
CAGg6OSNy2+ay3agUzeu+d0xFBng/pqWnGO1ZwpMNxTFns/0wUlT/9LL7/5ZM+an
QYPbTq4M+PjQIATF2l2Sxni6X+S3GJJiYrjnQ/5zXIlFPobJOmoHjp7NlERK1OA3
AYoQ6msKHhom50lQ9+JRwNSFukYbYgki2GBcWFpU/nh5MteXlwgByS9J0vCYjO/M
4Rt3WYBllib+7jBT//bFJAVozv5MQddAKcJR+5XYlRtsWw/6ssfYbQ==
-----END CERTIFICATE-----
Generated at Sun Nov 15 15:17:14 2026 by rpki-client