Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203446.roa
File: AS203446.roa (raw, json)
Hash identifier: bMZhoNXliR9UMwb8//IIEquBbARY8ckOGIRVFRudTK8=
Subject key identifier: CE:45:55:1E:0D:11:32:69:40:C5:85:DD:C7:1E:25:43:1D:6C:6B:EE
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 26690CC0EBF1B30B11014AD9D1F5F25F33099991
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203446.roa
Signing time: Mon 06 Apr 2026 00:04:08 +0000
ROA not before: Sun 05 Apr 2026 23:59:08 +0000
ROA not after: Mon 05 Apr 2027 00:04:08 +0000
asID: 203446
IP address blocks: 82.29.103.0/24 maxlen: 24
178.83.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:69:0c:c0:eb:f1:b3:0b:11:01:4a:d9:d1:f5:f2:5f:33:09:99:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 5 23:59:08 2026 GMT
Not After : Apr 5 00:04:08 2027 GMT
Subject: CN=CE45551E0D11326940C585DDC71E25431D6C6BEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8b:b0:59:56:0a:a2:51:aa:de:e4:0f:f5:cb:
5e:97:68:fe:16:17:6c:dd:80:cc:82:e8:f3:d2:65:
2b:de:19:bf:d8:60:d1:60:85:c7:19:79:1f:3d:0a:
79:a4:97:74:5a:05:54:c6:22:97:e0:74:cf:46:20:
e2:7f:73:a2:3f:db:d8:fe:fd:d7:c0:26:ca:51:89:
e9:75:9f:ad:3b:b0:84:7e:29:5b:8c:fb:54:8b:71:
57:a7:f3:4e:89:b7:d6:27:90:48:3f:c1:cb:36:e9:
7a:25:56:e5:25:4b:84:13:bc:a3:0e:50:ed:55:a7:
68:18:e3:4f:2b:fa:a0:05:2e:e8:ba:bf:86:d8:60:
dd:c4:12:39:b4:33:97:c5:00:b0:c6:00:9a:ad:8c:
ad:99:66:50:19:b4:e7:ce:8c:09:78:15:47:62:1d:
1e:cc:82:b4:ef:30:35:d3:b8:24:63:ef:3d:81:4b:
05:15:ef:dd:fd:21:cb:5a:5f:08:6d:30:51:3f:fd:
bf:5a:dd:16:3b:71:9d:ee:8a:cc:08:48:62:da:6d:
d0:13:61:b8:ac:41:34:8b:ae:eb:e0:24:60:56:b6:
69:77:9e:d8:20:5d:bb:2c:cd:d2:eb:38:60:f5:14:
38:23:3a:ab:f3:ca:35:ad:9d:fb:02:9d:71:8e:95:
5d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:45:55:1E:0D:11:32:69:40:C5:85:DD:C7:1E:25:43:1D:6C:6B:EE
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203446.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.29.103.0/24
178.83.15.0/24
Signature Algorithm: sha256WithRSAEncryption
44:76:dd:99:de:9d:08:19:95:28:8f:ed:b8:52:19:3a:3f:c4:
0d:ae:b9:e8:23:ed:6b:3f:1b:9a:ac:d0:a1:0e:d0:53:84:8b:
a6:79:39:32:a6:40:4d:52:10:29:ac:dc:a3:70:b7:5a:7b:ad:
88:af:e2:8f:0b:44:85:31:0b:57:60:56:a2:42:0b:bf:1d:3a:
49:81:38:e4:d8:f8:a4:e4:91:a3:32:80:99:58:82:c8:16:16:
9a:dc:9e:00:f7:43:bf:25:12:7f:46:aa:6d:bd:47:b4:74:23:
a1:b8:ee:cd:fb:87:54:a4:e6:f9:a6:a0:97:9f:57:3f:f9:1b:
1b:6b:95:53:7e:23:a0:72:15:de:79:78:e1:7c:78:17:b3:7a:
ae:f6:fd:9f:fb:3a:f5:56:b3:65:07:91:ea:fb:a6:99:63:10:
3d:03:53:e9:57:c1:ca:18:f2:69:14:ba:a2:61:5f:9b:c1:64:
2d:40:86:c2:8c:be:f9:41:41:f8:10:81:58:40:e5:b6:4e:8a:
87:5b:24:a2:c3:e7:f4:18:f9:ca:90:d0:c0:62:a7:a0:9d:dd:
a1:bf:15:a5:57:72:fc:fa:30:79:56:d1:30:1e:97:af:4a:a0:
2e:3d:75:4f:0d:d1:dc:7d:e5:02:83:4f:4f:d0:18:11:be:e6:
be:a5:d5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:01:40 2026 by rpki-client