Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203090.roa
File: AS203090.roa (raw, json)
Hash identifier: RggnfDHpnh820izW/3FCZ9iHK+WrC8EkmcND0BKJ1hg=
Subject key identifier: BB:39:B0:8F:02:A4:E4:76:43:62:1C:B0:7B:D0:24:69:95:D5:90:B4
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 12C9FD6CF47B4241ADE5651802F93E61A1FF66E6
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203090.roa
Signing time: Thu 09 Apr 2026 10:47:12 +0000
ROA not before: Thu 09 Apr 2026 10:42:12 +0000
ROA not after: Thu 08 Apr 2027 10:47:12 +0000
asID: 203090
IP address blocks: 82.39.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:c9:fd:6c:f4:7b:42:41:ad:e5:65:18:02:f9:3e:61:a1:ff:66:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 9 10:42:12 2026 GMT
Not After : Apr 8 10:47:12 2027 GMT
Subject: CN=BB39B08F02A4E47643621CB07BD0246995D590B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f8:35:06:d3:76:25:b7:c8:23:26:32:01:6c:
05:4c:7e:80:0e:8a:5f:bd:55:e6:1e:90:3e:24:76:
c4:2c:04:8a:35:89:40:e3:09:58:7f:e1:d0:b8:85:
03:e2:97:c4:06:be:cf:c4:20:52:7c:ee:62:19:bc:
f6:ef:3b:10:96:83:a9:a3:b1:88:d2:6a:e3:13:35:
a0:e3:05:e9:00:09:7b:13:f8:2c:d4:81:72:7d:d1:
65:da:66:8a:8a:43:f4:90:ab:0a:f8:8b:1b:e2:18:
fe:e8:51:d9:71:a5:1b:02:a1:2c:9c:f7:b6:7c:28:
63:29:40:63:83:98:81:0d:4f:99:3f:19:db:6c:51:
a3:a4:fc:18:61:16:25:52:5c:8f:fc:21:a4:99:d7:
2a:c7:bd:a3:b2:5c:59:8a:a2:e0:fd:51:50:7a:ba:
b7:b5:82:81:1b:77:df:19:31:9a:2a:c4:8f:98:19:
3f:09:88:1c:95:c7:04:34:70:47:b4:ad:80:ed:05:
5b:99:5b:8c:8e:9b:31:03:bc:ae:74:9a:0d:bb:8e:
18:b5:19:5f:4f:9c:62:da:30:ce:02:33:93:3d:c1:
1e:ab:fa:b4:ac:86:a8:ae:e3:78:fd:a1:5b:b8:a1:
88:fa:33:f0:92:0b:8c:a1:cc:10:f1:33:a5:b1:23:
37:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:39:B0:8F:02:A4:E4:76:43:62:1C:B0:7B:D0:24:69:95:D5:90:B4
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203090.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.39.250.0/24
Signature Algorithm: sha256WithRSAEncryption
71:71:54:61:30:92:be:f4:a9:b2:dd:cb:fa:02:b0:9b:10:a4:
33:d3:89:2e:ce:51:4c:38:39:d5:06:d5:b6:da:1f:0c:3d:3d:
0b:ad:de:8b:c2:62:16:59:bf:dd:67:05:02:17:2d:77:da:b9:
a1:a1:27:26:da:f9:f2:5d:72:24:d2:7e:10:59:b5:5b:b5:c4:
7b:88:f4:11:46:2e:93:91:db:cb:01:46:46:00:8c:81:60:72:
56:d8:86:05:21:13:cd:2b:cd:eb:0c:45:20:bd:6a:ee:3e:8d:
81:dd:b7:8b:57:f4:53:71:c9:b9:12:4c:d8:78:4b:8d:0c:bd:
77:a9:e4:10:23:27:7f:49:b1:d6:d5:69:f0:6c:7c:7c:9f:b9:
07:b8:57:2b:47:d4:78:6a:4b:22:56:34:19:79:3c:87:53:38:
f5:a2:6b:df:44:07:8f:91:e5:cd:cc:b5:de:f3:5d:38:0e:0a:
ce:cd:f2:8a:a1:b8:d2:96:d6:e5:d0:d4:42:69:7a:66:88:c5:
00:f5:5e:30:b0:bc:46:2f:c0:07:20:18:64:d2:e8:9f:4a:89:
9a:79:a6:4f:73:de:6b:02:61:82:17:6a:f7:55:ed:85:73:95:
7f:35:09:af:41:ee:f0:cd:dc:5d:4f:91:b6:bb:e6:d9:17:63:
50:a7:76:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:08:04 2026 by rpki-client