Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS203915.roa
File: AS203915.roa (raw, json)
Hash identifier: EiTZ9KWp5JBkBWy3GDk1MiLEkMvz3zKT1MTodRCAMlw=
Subject key identifier: 72:C4:A9:B7:B0:DF:62:D0:AC:1F:98:83:7C:01:DF:F5:9E:18:56:AA
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 114CFB39B0728BB0789F909142B21A3DEE68B93B
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS203915.roa
Signing time: Wed 04 Nov 2026 20:32:50 +0000
ROA not before: Wed 04 Nov 2026 20:27:50 +0000
ROA not after: Wed 03 Nov 2027 20:32:50 +0000
asID: 203915
IP address blocks: 2a0e:8f02:f045::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:52:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:4c:fb:39:b0:72:8b:b0:78:9f:90:91:42:b2:1a:3d:ee:68:b9:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 20:27:50 2026 GMT
Not After : Nov 3 20:32:50 2027 GMT
Subject: CN=72C4A9B7B0DF62D0AC1F98837C01DFF59E1856AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fa:a0:ab:85:e6:b4:a5:49:ae:09:11:32:c5:
8d:81:af:61:19:e0:a5:2a:b0:6c:27:74:6d:c0:a3:
1a:c6:17:49:1b:14:5a:41:14:93:ca:3c:9f:93:13:
31:0f:e0:bc:ee:a5:81:1e:cc:44:e7:ec:43:f0:3a:
99:b4:9a:66:22:57:70:ec:f6:83:e9:08:0e:5a:7c:
0a:6a:01:df:32:2f:42:ae:4e:61:7d:35:43:2d:0d:
3a:2c:58:f8:4e:67:a3:cf:8a:f1:b5:27:ee:1e:3a:
5f:16:dd:86:17:cb:ed:1e:bb:2d:4c:39:92:1f:d7:
fa:79:0f:2a:04:c8:63:c0:c1:6e:af:21:88:9d:32:
61:e9:94:68:9b:71:42:f1:95:54:20:a7:b5:44:4a:
28:c2:8b:07:aa:4a:be:15:94:a4:64:e4:66:e0:26:
ec:1f:4c:42:d4:24:8b:27:e6:b5:87:c9:ba:d7:32:
8a:d7:4a:06:cf:f0:a4:f2:48:46:a1:05:92:0c:6b:
61:22:f9:78:0a:ca:8a:d7:14:0e:a1:6f:f5:dd:88:
d2:b5:0d:a8:9b:7f:db:d2:9f:47:84:91:f6:0d:3e:
12:0b:e4:64:11:99:57:55:eb:c0:ca:21:65:77:5f:
cd:09:ee:a3:c6:e7:d7:8f:46:16:d5:d4:cf:d5:83:
5f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C4:A9:B7:B0:DF:62:D0:AC:1F:98:83:7C:01:DF:F5:9E:18:56:AA
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS203915.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f045::/48
Signature Algorithm: sha256WithRSAEncryption
b6:76:b5:e6:62:58:55:7e:f4:5f:f5:70:99:da:73:25:05:07:
4d:e1:88:f2:99:58:98:b0:7e:a2:aa:4d:82:e1:59:86:9b:21:
24:04:ac:c8:9f:b0:14:7a:d7:82:c4:5a:2b:24:b6:5b:8a:6d:
1c:52:e8:ef:26:ff:1d:8b:2c:00:88:59:7d:52:84:a8:3f:07:
8f:53:28:18:f3:8a:1a:e1:d5:83:19:33:15:3c:a5:b0:83:c2:
1e:03:12:a3:1f:3c:62:b3:7f:39:54:4b:e7:0a:fb:96:42:d5:
da:33:aa:c4:5f:c9:9e:0a:27:ba:d6:6d:fb:6f:09:b8:ef:92:
bd:9d:b8:7a:a6:df:13:04:87:98:d6:85:f8:6d:cd:cf:11:93:
25:f1:63:7e:e4:b4:3a:17:93:2f:3e:6b:47:ef:fc:40:41:8c:
1f:fc:bc:a2:c7:3e:66:16:f3:38:a8:0e:65:90:3e:3d:b2:d3:
36:36:78:b2:39:80:de:6d:8f:47:6b:e7:8f:28:17:2c:86:f5:
dd:70:20:23:f3:b3:cf:59:ab:38:d0:1c:98:fb:30:d4:98:52:
42:ee:17:ef:cf:59:bc:29:4b:a7:d1:6d:b1:ac:db:31:ac:b2:
4b:79:1c:61:ec:02:dc:62:dc:9c:32:fb:f4:4c:17:8c:d2:69:
1c:fe:9b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:00:10 2026 by rpki-client