Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203548.roa
File: AS203548.roa (raw, json)
Hash identifier: /E69Y/OsJyBcNAY63P1A0f1qe+yoHWo3rqGXRDUlgPE=
Subject key identifier: D6:EF:C4:2E:DF:47:35:D4:37:68:B0:E4:83:3E:A5:34:DE:FC:0E:8A
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1FA64C2501628BA5B8B7EB7A9606E17BD59C909C
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203548.roa
Signing time: Mon 30 Mar 2026 09:52:04 +0000
ROA not before: Mon 30 Mar 2026 09:47:04 +0000
ROA not after: Mon 29 Mar 2027 09:52:04 +0000
asID: 203548
IP address blocks: 82.39.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:a6:4c:25:01:62:8b:a5:b8:b7:eb:7a:96:06:e1:7b:d5:9c:90:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 30 09:47:04 2026 GMT
Not After : Mar 29 09:52:04 2027 GMT
Subject: CN=D6EFC42EDF4735D43768B0E4833EA534DEFC0E8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:43:3f:e8:1b:16:06:ef:58:7e:62:e6:7f:d4:
f7:2e:27:c8:26:0e:27:fc:7a:a3:69:5a:d4:12:e1:
77:cd:0a:6a:4c:4c:c0:c4:39:de:bd:49:e2:ce:a3:
3b:11:99:b2:e4:bf:1c:20:6b:49:53:3b:67:9d:15:
91:08:88:62:5b:67:3f:2b:ad:05:5e:cd:f8:40:a1:
8e:77:5e:ce:0f:ca:15:8e:37:09:01:4b:eb:4b:88:
04:fc:8b:6b:8c:64:0d:d9:10:c5:c0:1a:73:d4:83:
13:c1:86:2a:46:29:76:3e:bc:60:eb:1f:a7:3b:ac:
38:51:24:60:49:ce:3e:4d:52:cc:97:ac:d0:07:58:
88:76:a6:5d:95:3f:bc:58:7e:d8:c0:71:01:20:3c:
42:e3:82:2b:c4:8d:1b:35:e1:2a:78:47:d9:3c:8f:
10:fa:90:69:51:09:fd:24:af:31:3e:dd:d2:2e:6c:
91:95:e4:14:12:38:b2:78:c6:ef:1e:9d:70:12:27:
09:3d:fd:96:6a:e5:25:ed:3d:45:9f:e8:3a:ea:c5:
5b:a4:56:b2:1e:95:8d:a2:d6:97:b5:f5:6f:f1:84:
23:cd:f3:15:af:9e:15:2d:0f:85:15:6a:ac:75:ab:
22:a5:98:a5:d8:f8:ad:bd:81:3a:fd:0d:57:fd:e1:
bc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:EF:C4:2E:DF:47:35:D4:37:68:B0:E4:83:3E:A5:34:DE:FC:0E:8A
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203548.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.39.166.0/24
Signature Algorithm: sha256WithRSAEncryption
25:f8:6d:ba:9b:f2:c8:43:33:f0:04:5a:55:4f:ce:6e:52:02:
00:60:34:ba:55:b5:fa:14:fa:0b:37:72:68:3d:4e:cb:45:cb:
9b:43:d3:2c:22:32:08:2f:f3:48:c4:b3:d4:8e:3c:0a:81:38:
d6:1d:87:6d:df:d2:5b:1a:36:b6:c2:70:1b:20:25:47:02:51:
b3:a0:b1:52:51:21:d3:ba:f8:68:2f:e4:cb:bd:13:90:11:44:
f7:e2:43:27:5b:4f:f7:99:e1:c2:12:23:7a:fa:f4:0b:c5:df:
2a:75:22:b3:fe:2a:cc:c0:11:3f:44:d2:a0:73:66:f7:fc:d5:
db:32:1f:21:58:7a:2a:57:10:26:ee:74:5f:ff:6e:6b:14:b1:
e8:7d:dc:78:b0:e0:60:67:a9:f4:d3:d4:e7:1b:98:f2:03:76:
d7:85:a4:82:3f:da:f8:a0:89:b1:5b:0c:89:da:a4:21:3d:a3:
94:2a:c5:df:6c:48:bc:3f:ef:c2:55:50:d9:ca:d0:e7:de:68:
a7:77:af:10:c1:06:34:0c:f1:15:1b:bb:2f:47:3d:31:39:2f:
18:11:f7:e9:7c:b7:82:b9:c3:87:2f:97:b8:2e:33:09:68:9e:
5c:52:02:a8:74:41:1e:d8:99:18:30:71:35:ad:70:89:4c:03:
f5:59:56:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:00:08 2026 by rpki-client