Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203728.roa
File: AS203728.roa (raw, json)
Hash identifier: VW+HZkxqFdMbmZg5L4LCa+IcxdIx7xDTVNQBl6rN+oc=
Subject key identifier: F2:EC:03:23:19:42:B2:92:BD:97:EB:B4:F0:EB:EE:2E:20:A7:69:78
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 7967C33C71534F6C99D32E4C7CFD0C2E63AD4074
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203728.roa
Signing time: Mon 06 Apr 2026 00:05:05 +0000
ROA not before: Mon 06 Apr 2026 00:00:05 +0000
ROA not after: Mon 05 Apr 2027 00:05:05 +0000
asID: 203728
IP address blocks: 82.22.11.0/24 maxlen: 24
82.25.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:67:c3:3c:71:53:4f:6c:99:d3:2e:4c:7c:fd:0c:2e:63:ad:40:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 6 00:00:05 2026 GMT
Not After : Apr 5 00:05:05 2027 GMT
Subject: CN=F2EC03231942B292BD97EBB4F0EBEE2E20A76978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:31:75:a6:a5:36:cb:52:30:a5:75:d6:84:e0:
32:80:59:f6:a0:6f:fd:0e:39:56:28:77:e2:dc:ae:
cb:f2:90:67:6a:31:ec:33:7e:36:cd:09:30:d7:80:
de:9f:6e:d3:c1:15:06:83:60:dc:d8:19:81:d3:03:
d0:3a:0a:88:d0:56:f5:3b:14:bd:8c:32:a3:e5:af:
b4:40:8f:88:4e:71:a0:30:e1:17:5b:b5:5a:31:39:
a2:e7:8c:28:87:e8:38:0f:93:33:dd:bf:8b:ec:64:
5c:f9:36:cb:0f:ad:95:ef:95:03:86:7f:bd:3d:09:
0f:f6:03:14:74:11:ed:d3:be:d7:27:7c:75:f5:c5:
9f:a1:e1:e7:11:96:f4:34:d5:ae:3a:74:91:fb:b5:
aa:b8:3a:73:d0:ed:02:ad:be:08:11:ef:4b:6b:79:
46:58:58:27:ec:9c:d5:69:b3:49:f0:a0:0a:f6:20:
60:05:91:53:42:ca:f3:35:f7:3b:e1:9d:26:75:5d:
55:43:75:6d:e0:aa:32:13:a8:22:09:e6:da:36:1a:
c4:9f:f8:4e:14:84:87:cf:6b:ff:6c:f3:ba:d9:11:
05:08:65:c5:63:b1:3f:e6:9f:3e:86:0b:f6:1f:55:
8e:0e:2e:1b:b2:cc:5a:ca:2b:63:83:0c:5a:59:a8:
9e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:EC:03:23:19:42:B2:92:BD:97:EB:B4:F0:EB:EE:2E:20:A7:69:78
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203728.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.11.0/24
82.25.45.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:f1:a0:68:c6:4c:69:e6:eb:f0:3e:3f:3d:60:e5:7f:82:a6:
64:2c:39:e7:fa:59:dd:f4:79:bd:9c:95:cc:b2:8d:8f:9d:c8:
ca:be:c7:b6:86:3a:b5:33:3f:d5:3b:36:f6:17:99:e0:da:59:
44:d5:2c:25:c2:0b:ac:c5:bb:2b:32:66:f6:0f:4c:76:91:38:
d1:3f:fa:63:26:93:20:e2:5c:07:73:cf:19:51:a5:4f:5c:d7:
bd:6e:41:b2:5c:91:bd:74:a9:0c:1f:4f:b9:5e:78:82:3e:56:
14:49:49:8c:4d:69:4f:77:9b:c9:c8:4c:75:36:34:14:f9:ce:
6b:57:41:fa:2c:59:78:2e:82:a7:a0:b3:2c:e7:8c:a3:7f:ae:
d3:f5:dd:04:3e:6e:de:e1:0a:f9:11:09:2c:71:ea:64:15:b7:
36:ef:70:cb:01:fd:d9:77:cb:a3:3e:96:bc:46:81:ed:fe:d2:
f9:dd:93:c9:a4:a6:d3:8b:16:91:ac:94:8f:04:4c:39:d8:d4:
4c:4a:04:07:d4:f2:20:75:56:86:19:bf:8e:19:38:cc:36:7a:
90:49:7e:0c:c9:91:49:9e:13:ad:a0:47:29:f6:71:46:90:a8:
ee:10:78:9f:7b:b4:1e:e8:4e:d2:ef:11:7e:9d:51:05:9d:78:
0e:cb:28:4e
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUeWfDPHFTT2yZ0y5MfP0MLmOtQHQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA0MDYwMDAwMDVaFw0yNzA0MDUwMDA1MDVaMDMxMTAvBgNV
BAMTKEYyRUMwMzIzMTk0MkIyOTJCRDk3RUJCNEYwRUJFRTJFMjBBNzY5NzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPMXWmpTbLUjClddaE4DKAWfag
b/0OOVYod+LcrsvykGdqMewzfjbNCTDXgN6fbtPBFQaDYNzYGYHTA9A6CojQVvU7
FL2MMqPlr7RAj4hOcaAw4RdbtVoxOaLnjCiH6DgPkzPdv4vsZFz5NssPrZXvlQOG
f709CQ/2AxR0Ee3TvtcnfHX1xZ+h4ecRlvQ01a46dJH7taq4OnPQ7QKtvggR70tr
eUZYWCfsnNVps0nwoAr2IGAFkVNCyvM19zvhnSZ1XVVDdW3gqjITqCIJ5to2GsSf
+E4UhIfPa/9s87rZEQUIZcVjsT/mnz6GC/YfVY4OLhuyzFrKK2ODDFpZqJ6/AgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQU8uwDIxlCspK9l+u08OvuLiCnaXgwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjAzNzI4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUhYL
AwQAUhktMA0GCSqGSIb3DQEBCwUAA4IBAQBu8aBoxkxp5uvwPj89YOV/gqZkLDnn
+lnd9Hm9nJXMso2PncjKvse2hjq1Mz/VOzb2F5ng2llE1SwlwgusxbsrMmb2D0x2
kTjRP/pjJpMg4lwHc88ZUaVPXNe9bkGyXJG9dKkMH0+5XniCPlYUSUmMTWlPd5vJ
yEx1NjQU+c5rV0H6LFl4LoKnoLMs54yjf67T9d0EPm7e4Qr5EQkscepkFbc273DL
Af3Zd8ujPpa8RoHt/tL53ZPJpKbTixaRrJSPBEw52NRMSgQH1PIgdVaGGb+OGTjM
NnqQSX4MyZFJnhOtoEcp9nFGkKjuEHife7Qe6E7S7xF+nVEFnXgOyyhO
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:46:48 2026 by rpki-client