Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203462.roa
File: AS203462.roa (raw, json)
Hash identifier: NkXtA56O0dkCmrzqBdLH2E4hx3MzdCkeur9+h/1kPdE=
Subject key identifier: 65:D4:19:AD:5C:6C:A2:A8:DD:19:E2:E8:4B:BF:B8:DA:88:A8:A9:54
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 09074B0F8FF259D372EA0D04A8D989BABA5094A9
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203462.roa
Signing time: Wed 09 Sep 2026 10:49:33 +0000
ROA not before: Wed 09 Sep 2026 10:44:33 +0000
ROA not after: Wed 08 Sep 2027 10:49:33 +0000
asID: 203462
IP address blocks: 82.22.0.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:14:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:07:4b:0f:8f:f2:59:d3:72:ea:0d:04:a8:d9:89:ba:ba:50:94:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 9 10:44:33 2026 GMT
Not After : Sep 8 10:49:33 2027 GMT
Subject: CN=65D419AD5C6CA2A8DD19E2E84BBFB8DA88A8A954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f2:98:ae:c8:fd:df:ce:88:bc:28:5c:24:1f:
ed:45:e8:a6:45:35:bc:b3:ed:0f:67:8c:4f:80:71:
37:fe:1b:ce:d7:79:bc:20:cc:26:45:30:5a:29:fb:
6d:92:36:b6:12:f5:29:6d:bc:3e:76:4b:ca:fc:77:
56:2b:24:14:3d:09:27:85:a8:8f:66:fa:bf:2e:93:
d6:04:3a:a3:57:9b:9a:a0:f7:79:8a:d0:26:05:78:
8e:51:6f:a9:19:7d:8a:2d:5e:2b:49:31:7d:6f:fc:
bc:ec:3b:67:6b:22:20:48:68:57:3c:f3:eb:35:ee:
15:0e:3b:c9:44:54:8d:7e:ad:d8:ed:50:40:2d:8a:
5c:99:a5:ea:e0:9e:2f:c9:90:49:53:b4:07:f7:03:
e6:da:8d:57:1a:8f:7f:af:fe:ac:ce:73:3f:ae:ca:
82:f4:f4:90:35:ea:1a:e0:43:4d:bb:0a:79:82:54:
2a:1f:cd:5b:e6:14:f2:3b:16:ef:57:ce:a0:bc:df:
d3:82:30:bb:8f:9c:f3:52:7d:4a:35:d3:ea:31:96:
85:74:3c:3e:f1:4c:fe:25:51:90:a7:85:6a:d6:c3:
9a:15:f7:48:af:07:02:f3:b8:0a:ce:52:79:92:02:
ca:0d:94:2d:81:95:9a:54:71:4e:5c:be:00:8c:34:
af:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D4:19:AD:5C:6C:A2:A8:DD:19:E2:E8:4B:BF:B8:DA:88:A8:A9:54
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203462.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.0.0/23
Signature Algorithm: sha256WithRSAEncryption
40:9c:71:c2:1a:e4:25:7a:6e:28:d3:df:c9:41:47:c8:ba:3e:
2d:fc:cb:a5:a4:37:72:4b:4a:b8:be:fc:00:c3:7c:4a:2f:ed:
f6:49:6b:73:e1:26:37:38:c8:9f:05:37:82:47:56:4d:bb:14:
31:ab:62:2a:74:c1:5d:ab:eb:d9:24:d9:dc:55:e0:fa:f9:4e:
cf:56:96:6e:1f:ae:c4:a8:6a:17:d1:1f:c4:de:7e:16:46:ef:
fc:d1:4d:d3:82:fb:fe:19:f1:d2:01:08:aa:a0:00:84:14:8a:
75:c1:fb:bb:45:85:c2:74:bc:4b:d8:b1:59:36:21:5d:51:98:
5e:e9:bf:8f:29:95:2c:db:e4:ae:ca:16:ba:63:5b:2a:70:da:
ec:42:25:f5:c4:45:79:0e:8c:3f:52:14:59:43:fc:e7:72:51:
d7:28:a8:37:e2:ca:99:32:2e:5a:a5:00:c7:57:d8:52:56:11:
cf:59:05:bc:44:32:38:2e:1f:23:8c:36:99:84:12:0e:ef:d6:
5b:23:6a:a3:7b:6d:71:0f:89:18:a7:89:76:51:4e:81:f7:76:
ce:3a:81:c4:95:5e:5e:7f:9c:f9:96:d6:d5:16:e6:6e:35:08:
b8:fe:6a:3f:c4:4c:61:fb:b6:32:1b:c5:0f:da:d3:56:83:da:
04:21:97:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:55:39 2026 by rpki-client