Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203156.roa
File: AS203156.roa (raw, json)
Hash identifier: 3p3BewpYzwMYXMHJCCLpXD72/UAcoXxVXHLT6vqQOM8=
Subject key identifier: 98:52:4F:55:E3:98:D2:34:30:69:BB:E3:AB:92:80:DF:CB:EC:36:40
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 211D73DFE2835CA7594F3CDB38E95916450040A1
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203156.roa
Signing time: Mon 19 Oct 2026 19:41:12 +0000
ROA not before: Mon 19 Oct 2026 19:36:12 +0000
ROA not after: Mon 18 Oct 2027 19:41:12 +0000
asID: 203156
IP address blocks: 178.83.48.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:1d:73:df:e2:83:5c:a7:59:4f:3c:db:38:e9:59:16:45:00:40:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 19 19:36:12 2026 GMT
Not After : Oct 18 19:41:12 2027 GMT
Subject: CN=98524F55E398D2343069BBE3AB9280DFCBEC3640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:f0:23:8b:5e:2c:0a:78:70:42:46:4c:82:b4:
48:40:77:8d:28:b3:a9:83:a7:48:a8:ae:7b:27:4d:
19:c4:21:2e:c4:04:58:d7:b1:52:e9:07:28:62:29:
aa:d5:1c:aa:64:53:5c:7f:2f:e5:da:a3:d1:a6:81:
00:73:64:1d:69:b6:79:f8:2a:c1:17:1e:ce:0e:0c:
95:29:bd:1a:56:b1:85:be:6a:56:c4:2c:06:6b:e0:
1c:6c:49:a4:e5:85:3b:4d:7a:03:fc:fd:5f:55:68:
f5:88:39:b9:01:18:77:ce:68:76:df:b0:8b:b8:85:
06:90:98:e3:98:3c:2b:73:4b:e9:3c:62:91:bf:98:
f4:29:e8:e6:32:06:73:5c:67:35:e8:59:2f:be:d6:
b5:e0:c7:38:81:a4:4e:4a:de:12:55:7a:24:73:b9:
8e:c8:be:cc:36:b9:9c:78:6c:d6:ae:76:0a:03:c6:
8b:1e:70:63:96:5d:42:39:9a:87:1d:63:82:a7:42:
86:2b:18:9c:aa:f0:e2:9d:84:10:1c:97:da:7b:d9:
7a:a8:20:8a:b7:09:cd:bd:72:4c:4e:c7:5b:7e:21:
f4:c6:1b:8b:a4:af:59:5b:aa:d3:79:ef:33:37:c4:
93:6b:aa:1b:35:34:48:b1:e7:fe:1f:9e:2c:bb:ac:
b7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:52:4F:55:E3:98:D2:34:30:69:BB:E3:AB:92:80:DF:CB:EC:36:40
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203156.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.48.0/23
Signature Algorithm: sha256WithRSAEncryption
19:74:e0:50:b1:34:93:17:28:fc:e5:47:42:20:75:20:34:26:
cd:c7:fe:2a:e2:2e:9f:a3:9f:4b:b2:a9:14:f4:db:3b:f3:47:
f8:9c:d8:fe:d0:82:50:99:3f:78:39:b5:e1:75:a1:39:02:bd:
05:ab:70:79:05:45:a1:db:44:ee:f8:4a:de:a1:3f:0d:c5:de:
9d:aa:62:39:25:6c:21:44:29:37:c5:5d:c7:2a:8d:59:8a:f0:
79:33:36:4a:de:11:37:f7:fa:9d:99:16:06:bb:16:c6:0e:d3:
f6:24:d9:10:63:46:12:0d:55:c8:84:c3:2c:e8:57:3e:3c:18:
ea:9d:e5:b8:11:e9:c1:80:fd:64:9b:94:47:91:d0:e3:0a:77:
3e:b4:87:41:d4:42:51:ab:a1:42:6d:7c:dc:67:f0:ae:61:1b:
03:85:9e:b0:97:1a:77:f4:ee:b8:db:80:e7:76:d1:1c:a2:f3:
ca:9a:0e:d4:26:6c:77:bf:ed:cc:83:5a:27:d8:b7:35:53:bc:
eb:af:68:ae:47:a1:40:95:d2:4b:2b:4d:19:dd:71:5a:c3:a6:
01:8d:eb:ba:7b:79:c6:a7:24:00:c6:1b:81:ee:3b:a6:e6:fb:
5e:55:12:84:0b:5c:ff:85:1f:af:a9:0c:91:f2:b5:8f:be:d0:
dd:73:a2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:20:56 2026 by rpki-client