Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203090.roa
File: AS203090.roa (raw, json)
Hash identifier: 0ZbJImvZP9+9MKkc3SZiWpEzW/zB1s5AHDGjs1xdVFo=
Subject key identifier: 80:0F:94:E8:09:75:1E:C0:3F:FD:93:43:02:4C:CE:C2:F7:D3:2A:98
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 718EF31961967ABBD2D538F7F955D245391C834B
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203090.roa
Signing time: Mon 23 Feb 2026 15:01:37 +0000
ROA not before: Mon 23 Feb 2026 14:56:37 +0000
ROA not after: Mon 22 Feb 2027 15:01:37 +0000
asID: 203090
IP address blocks: 82.40.40.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:8e:f3:19:61:96:7a:bb:d2:d5:38:f7:f9:55:d2:45:39:1c:83:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Feb 23 14:56:37 2026 GMT
Not After : Feb 22 15:01:37 2027 GMT
Subject: CN=800F94E809751EC03FFD9343024CCEC2F7D32A98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d1:31:d6:1a:4d:fa:a4:06:6d:be:0d:35:5b:
cf:e6:ae:e9:e6:32:72:7a:e7:57:64:30:76:9e:fe:
1f:3a:c9:6f:60:12:f4:92:39:f4:26:a0:b2:d2:90:
22:df:0a:b9:04:3e:b9:cd:b2:47:81:3b:81:1d:a3:
cb:ff:2d:b5:07:20:0e:5c:8e:fe:4c:bc:57:6f:01:
18:a5:72:11:e2:55:93:14:24:8b:16:e8:72:7e:a3:
5f:c2:0f:eb:31:0d:27:66:eb:38:ef:48:c0:75:36:
b8:19:b4:b8:7b:76:16:a4:57:f3:44:df:60:49:1a:
ca:e1:f4:c9:6b:79:d2:68:51:28:e4:c8:fb:37:dc:
3c:8b:ad:43:de:ae:0a:e7:15:39:8c:18:cd:93:17:
10:6f:f3:18:1c:2b:ac:f0:e1:84:20:33:63:a7:ac:
0c:8c:f9:6a:25:b4:a3:24:74:95:d0:38:a7:e9:d8:
3d:0c:25:f9:e1:3a:18:ea:cc:c0:a6:1a:7a:a1:66:
72:76:8d:de:6f:6e:e3:63:75:96:c1:bb:04:16:12:
b7:1e:df:e0:c3:32:cd:33:8f:ad:38:f0:17:b7:cf:
41:90:c9:a6:79:30:9a:f5:f5:22:6a:2a:8c:37:f7:
d7:c2:46:7e:3a:dd:88:b9:34:0c:3c:d8:c1:90:18:
e5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:0F:94:E8:09:75:1E:C0:3F:FD:93:43:02:4C:CE:C2:F7:D3:2A:98
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203090.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.40.40.0/21
Signature Algorithm: sha256WithRSAEncryption
9a:f4:b8:0a:db:05:47:28:f5:25:af:0f:f5:14:79:cd:3d:8d:
e1:6a:d8:13:8e:6b:1a:38:7f:f4:bb:4b:cd:74:ef:c6:d6:fa:
6f:af:dc:dc:5d:f2:07:f4:e1:0e:9a:e8:af:e6:f1:98:61:76:
39:96:6c:86:f1:0d:e5:58:33:5c:83:a7:0e:97:e5:57:dd:82:
dc:a7:9c:f3:ee:2a:e1:ad:00:8e:46:5a:ea:93:f5:4e:8b:e7:
00:00:1c:7d:0b:c2:73:a9:0d:a3:67:6b:1d:51:5b:4d:6d:29:
4d:4c:02:94:81:cb:94:e8:12:4c:51:87:72:a9:70:b7:f3:eb:
14:e1:44:24:2b:1a:4c:93:94:f5:68:45:3c:e5:c0:7c:10:de:
b9:df:24:36:e6:bf:c0:d0:43:c4:db:7f:25:9a:27:ef:8d:f7:
86:10:f8:01:af:85:03:db:e6:2d:28:72:7f:73:5c:95:1c:cc:
36:d9:d0:40:d5:c3:1e:72:4f:6f:d1:a8:4e:c3:30:b0:e7:54:
7f:a6:e7:ae:18:0b:b9:fc:6e:fb:40:df:65:f1:45:e1:58:12:
ea:af:6e:a1:10:82:e9:49:90:8a:17:b5:84:3e:ee:f9:6c:06:
4b:ca:12:4e:43:ce:44:26:60:54:3b:b6:f0:e4:a7:9a:0b:41:
f3:76:b1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:37:46 2026 by rpki-client