Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS10103.roa
File: AS10103.roa (raw, json)
Hash identifier: PtMvLk7zj9MYmc3Bo/PvpmAEdDLqobfzodzxyXxR3p4=
Subject key identifier: 17:FC:7B:DA:04:48:26:AB:5B:9C:40:33:EC:A6:99:C6:ED:5F:2D:01
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 03E49B8A7A000F42CA41F8A77A68BB080812FDAC
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS10103.roa
Signing time: Mon 06 Apr 2026 13:47:02 +0000
ROA not before: Mon 06 Apr 2026 13:42:02 +0000
ROA not after: Mon 05 Apr 2027 13:47:02 +0000
asID: 10103
IP address blocks: 82.26.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:e4:9b:8a:7a:00:0f:42:ca:41:f8:a7:7a:68:bb:08:08:12:fd:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 6 13:42:02 2026 GMT
Not After : Apr 5 13:47:02 2027 GMT
Subject: CN=17FC7BDA044826AB5B9C4033ECA699C6ED5F2D01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8f:7b:31:14:34:9d:58:68:b9:97:58:da:4d:
bd:32:9c:b8:c6:4b:69:ec:d2:9f:aa:5a:ff:50:59:
1b:7f:4c:19:d1:fb:94:ba:ca:4b:f1:73:e0:f1:8a:
4f:4f:10:01:70:18:10:bd:b7:f1:ef:0b:2b:60:b0:
1a:40:2e:23:9f:5f:48:43:bc:0a:5f:7c:07:98:c6:
1e:59:55:1f:98:62:e5:f2:3d:6b:04:ec:08:86:63:
46:a4:41:c1:d6:86:fa:8d:b8:1a:e0:6f:42:d9:eb:
2e:97:0f:7b:ef:e3:f1:69:81:fe:7b:45:fd:95:5a:
3c:61:77:b4:91:8f:b7:b4:b5:c4:ce:65:ef:3d:61:
46:0f:c8:6f:30:75:11:77:d9:1b:e8:94:09:4e:31:
72:75:bf:a3:e8:d6:d2:40:31:3b:a2:c3:9b:3b:c9:
9c:0c:28:c9:f2:2b:aa:1a:95:02:42:94:73:eb:5e:
fd:70:0c:e0:08:7a:b9:8d:fb:b7:f4:fb:6d:dd:e0:
3c:0b:43:81:81:14:8e:bd:4a:92:dd:fe:f5:03:a3:
4b:92:62:c9:d7:b4:3f:e2:0b:d0:f6:77:c6:66:04:
56:43:01:af:02:96:17:fe:cf:48:07:4b:48:6f:ff:
3b:8d:97:c5:a8:dd:29:4b:b1:f2:01:c9:10:8b:07:
c2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:FC:7B:DA:04:48:26:AB:5B:9C:40:33:EC:A6:99:C6:ED:5F:2D:01
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS10103.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.26.130.0/24
Signature Algorithm: sha256WithRSAEncryption
70:d6:4d:08:b7:61:52:12:e1:75:4e:16:e4:44:63:7c:98:a8:
af:c9:7d:21:98:3c:70:0e:27:fe:ac:8b:8f:29:e8:7c:f3:bc:
00:ad:43:8d:84:50:05:48:9a:1b:61:ec:b0:7c:9f:78:15:15:
65:9a:30:92:51:83:0c:93:2a:31:70:4a:f1:43:61:c6:0f:f0:
d5:7f:11:d9:9f:e0:21:03:7c:75:00:d8:68:83:57:bc:13:60:
15:2b:df:21:02:ea:f0:9d:db:c5:2c:ee:fa:d0:fd:4e:28:9d:
a0:71:4e:75:d6:8e:e7:2d:3f:06:1a:7c:b9:2c:47:8d:41:44:
94:02:55:5f:0c:aa:fc:21:89:29:58:d1:98:8e:d9:b2:60:51:
a0:6b:47:0f:c0:07:4b:98:c4:5b:91:8d:cf:0b:5e:f1:1d:58:
d0:41:91:b1:26:99:32:84:3f:15:a3:b3:80:5a:45:d0:6d:2d:
4c:0c:25:73:96:6e:f2:2d:b9:ea:61:0c:b5:d3:92:bb:e3:3e:
83:44:da:97:e9:3f:9b:a6:90:48:f7:ba:60:47:3c:c6:12:8c:
89:cb:3a:60:02:81:5e:89:4c:e3:68:e6:76:d5:7b:c6:01:14:
d4:2a:bf:e8:d6:fb:8d:95:c7:8b:4e:2c:bd:b9:c0:2a:3c:64:
f3:b8:ce:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:46:47 2026 by rpki-client