Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203048.roa
File: AS203048.roa (raw, json)
Hash identifier: ulZS5tDpMDYSZKZp9Ub1L6l3CO/8VX9u8KFsGQAJiro=
Subject key identifier: BA:F8:18:77:27:DC:55:9D:23:C8:46:B5:45:90:D2:81:05:F1:0B:22
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 70A077053C815D110D5FE22E9DDD781FBD39160C
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203048.roa
Signing time: Tue 09 Jun 2026 21:03:02 +0000
ROA not before: Tue 09 Jun 2026 20:58:02 +0000
ROA not after: Tue 08 Jun 2027 21:03:02 +0000
asID: 203048
IP address blocks: 82.25.199.0/24 maxlen: 24
82.39.65.0/24 maxlen: 24
82.39.117.0/24 maxlen: 24
82.47.41.0/24 maxlen: 24
82.47.58.0/24 maxlen: 24
82.47.97.0/24 maxlen: 24
82.47.108.0/24 maxlen: 24
82.47.115.0/24 maxlen: 24
82.47.145.0/24 maxlen: 24
82.47.149.0/24 maxlen: 24
82.47.170.0/24 maxlen: 24
82.47.171.0/24 maxlen: 24
84.75.243.0/24 maxlen: 24
178.83.71.0/24 maxlen: 24
178.83.186.0/24 maxlen: 24
178.83.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 15:07:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:a0:77:05:3c:81:5d:11:0d:5f:e2:2e:9d:dd:78:1f:bd:39:16:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 9 20:58:02 2026 GMT
Not After : Jun 8 21:03:02 2027 GMT
Subject: CN=BAF8187727DC559D23C846B54590D28105F10B22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c9:07:1c:09:a2:65:84:e7:82:bb:0e:bf:61:
78:dc:3c:1f:1c:dc:17:fa:07:a0:9d:2c:a8:98:74:
7a:4d:8a:c2:9e:3c:2e:49:31:ee:c8:35:9d:04:ed:
19:2e:9f:df:33:d2:1e:53:0b:ec:89:5b:59:4d:99:
1e:49:c9:ac:2a:61:86:02:31:73:0b:f8:2c:c8:4c:
08:48:a9:8b:9f:3e:9a:06:99:f6:b1:82:fd:60:b6:
28:5b:e8:32:6e:08:a3:26:66:e6:f9:ae:b2:e4:a0:
23:e7:38:9e:43:c6:20:73:fa:c0:7b:e0:6b:b9:58:
5b:91:ae:22:ff:9a:ec:1e:76:01:60:63:4f:cc:f1:
59:9d:11:3a:76:07:02:77:63:39:e1:92:1e:9d:87:
1a:0e:2f:cf:57:b6:3f:0e:ac:57:19:91:b6:00:5b:
be:5b:ef:c0:b5:c2:c1:fd:a4:53:3f:f8:0b:d9:21:
61:b2:62:93:78:66:40:85:1d:6f:72:fd:92:8d:85:
c6:94:21:54:1b:cd:8c:9a:22:3e:c2:2d:44:41:52:
50:17:ff:9c:fa:45:0b:b7:f3:fc:e5:30:a9:20:d6:
92:56:97:29:8a:9c:09:8b:fb:45:01:aa:51:9c:d4:
86:8e:09:51:78:c5:4b:ea:57:2d:a4:79:05:b4:aa:
b7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F8:18:77:27:DC:55:9D:23:C8:46:B5:45:90:D2:81:05:F1:0B:22
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203048.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.25.199.0/24
82.39.65.0/24
82.39.117.0/24
82.47.41.0/24
82.47.58.0/24
82.47.97.0/24
82.47.108.0/24
82.47.115.0/24
82.47.145.0/24
82.47.149.0/24
82.47.170.0/23
84.75.243.0/24
178.83.71.0/24
178.83.186.0/24
178.83.225.0/24
Signature Algorithm: sha256WithRSAEncryption
38:54:2d:60:3b:44:24:98:fa:63:56:20:16:91:ac:88:e9:43:
2f:9e:a8:4e:1f:76:13:1d:92:db:bb:17:4e:77:e3:cb:a9:36:
c3:f3:fa:ef:7d:cf:3e:f0:b5:25:2f:da:7d:2b:e4:bc:bc:1b:
a0:bb:a1:66:2d:c5:a9:41:f8:b6:69:16:8a:84:c6:c9:3a:21:
de:3b:59:93:bb:d8:63:1e:11:94:9f:a9:f1:6b:d3:22:97:02:
c3:de:b9:01:d9:ff:e7:a0:59:5b:77:ef:cc:c5:24:34:72:e1:
3c:70:31:02:61:79:e5:b9:41:37:bc:fa:3f:19:c6:d2:9e:5f:
42:86:92:0e:48:f9:0c:90:a6:e8:0d:cc:2f:38:7a:9c:85:3c:
d6:e9:34:00:79:1e:83:b5:a2:82:21:01:cb:ad:f5:c7:a8:93:
c8:4e:0a:b2:21:df:7a:76:ca:ba:ad:80:6f:5d:94:72:b2:44:
f9:6d:70:0a:87:2e:9d:8f:4b:51:e3:41:45:d0:73:9a:ed:6c:
45:e6:d4:fa:f9:6f:2a:98:d2:1c:0d:a5:b1:ba:53:02:8f:b8:
55:d5:28:a7:88:94:9c:53:61:34:79:fd:0c:46:12:79:97:4e:
e6:83:95:42:66:69:a7:04:7c:1d:98:af:06:16:6a:52:60:71:
48:34:00:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:42:48 2026 by rpki-client