Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS204603.roa
File: AS204603.roa (raw, json)
Hash identifier: 15WKsy3UyRxRt222zz4+HjcuLAqPpwCgYIHPOOaNg6c=
Subject key identifier: 9E:89:A9:9F:C3:ED:10:37:16:C9:15:B7:C5:03:B1:DE:5E:3A:9E:66
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 3A58D3AF8EDDE72DF9141263ACAB299BE48586EA
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS204603.roa
Signing time: Fri 18 Sep 2026 07:46:58 +0000
ROA not before: Fri 18 Sep 2026 07:41:58 +0000
ROA not after: Fri 17 Sep 2027 07:46:58 +0000
asID: 204603
IP address blocks: 178.83.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:58:d3:af:8e:dd:e7:2d:f9:14:12:63:ac:ab:29:9b:e4:85:86:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 18 07:41:58 2026 GMT
Not After : Sep 17 07:46:58 2027 GMT
Subject: CN=9E89A99FC3ED103716C915B7C503B1DE5E3A9E66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e5:51:e7:05:4f:4c:52:d8:2b:36:4b:ba:55:
9f:aa:46:2d:b8:8d:b1:f2:90:ae:bc:78:91:ff:4a:
fe:99:5b:3b:1f:fe:c9:11:2c:f3:91:8f:b1:80:e6:
93:7a:a1:04:27:c2:13:fa:fa:95:59:cf:1c:14:60:
73:90:78:e3:08:c8:ca:8e:ef:71:c3:b3:5e:e7:1d:
58:b9:c1:a8:7e:9c:80:9e:de:1a:4a:5e:50:3a:0f:
ac:da:b3:ef:1d:32:63:70:ba:5e:5d:38:b9:57:46:
e5:b9:28:a8:6f:c4:6c:d7:3f:29:34:88:f8:4b:2e:
c5:2c:14:d1:c8:c8:da:3d:88:55:ed:20:3f:24:ff:
78:36:e0:44:8f:cd:ac:f3:9d:4a:c6:a2:b6:cf:4a:
a8:e7:73:c8:70:28:ad:84:1b:b0:e8:c9:99:34:f1:
f8:b7:76:4f:6d:3c:07:a4:19:27:6c:a4:c7:47:89:
03:94:bc:f0:24:d4:74:85:a8:75:f6:6f:68:eb:99:
6b:29:b9:0d:8b:6a:72:14:34:fb:6e:76:5b:f9:3f:
1d:7d:07:8c:fd:82:73:77:f2:1b:f9:72:cd:8e:c7:
e8:16:5e:89:82:b9:29:58:dc:e3:0a:b4:10:5f:c5:
ce:79:e2:06:c0:79:0e:b1:27:5d:b7:5c:f2:1e:7b:
f1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:89:A9:9F:C3:ED:10:37:16:C9:15:B7:C5:03:B1:DE:5E:3A:9E:66
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS204603.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.113.0/24
Signature Algorithm: sha256WithRSAEncryption
27:27:e3:27:63:f1:60:c3:a7:77:8b:00:c9:ca:1c:c7:df:1a:
9b:da:e7:57:54:db:55:27:a8:5a:3f:a0:e9:9b:c6:99:5d:cb:
bb:61:ad:cd:da:d8:3e:26:43:19:bc:12:0e:00:20:e2:f4:bf:
6b:d7:c6:f3:ba:19:fa:f8:84:7b:7e:80:a3:f8:f4:b9:09:0d:
64:8a:59:9b:cc:00:0f:b7:b2:69:3e:a9:3d:50:13:74:ba:72:
71:9d:a8:98:a3:35:78:6c:18:76:f2:51:6d:82:f7:94:a0:c9:
28:13:57:6f:33:ab:d9:f8:be:a0:aa:7a:ea:d6:2d:1b:40:12:
75:9d:be:8f:8d:08:ab:32:30:e1:6c:d1:53:9b:16:dc:a4:04:
4e:5d:e3:32:6b:38:79:ed:f3:41:03:2a:fc:1f:51:19:87:c9:
be:ea:f6:2d:fc:e5:5e:a9:cd:b7:e1:b1:7e:b3:47:b2:df:d5:
a9:03:b0:0a:f5:a1:c2:2a:bc:9e:08:fe:17:5e:54:22:b5:c1:
f2:53:dc:33:48:51:29:56:fb:c8:09:ad:36:95:c1:cf:65:c0:
69:15:1b:44:dd:61:da:e6:f2:29:a6:e7:d0:5b:35:50:d5:bf:
23:4d:3a:b2:80:07:51:e9:30:6d:89:67:7e:8d:ce:63:e1:b6:
9d:58:ed:df
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUOljTr47d5y35FBJjrKspm+SFhuowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA5MTgwNzQxNThaFw0yNzA5MTcwNzQ2NThaMDMxMTAvBgNV
BAMTKDlFODlBOTlGQzNFRDEwMzcxNkM5MTVCN0M1MDNCMURFNUUzQTlFNjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX5VHnBU9MUtgrNku6VZ+qRi24
jbHykK68eJH/Sv6ZWzsf/skRLPORj7GA5pN6oQQnwhP6+pVZzxwUYHOQeOMIyMqO
73HDs17nHVi5wah+nICe3hpKXlA6D6zas+8dMmNwul5dOLlXRuW5KKhvxGzXPyk0
iPhLLsUsFNHIyNo9iFXtID8k/3g24ESPzazznUrGorbPSqjnc8hwKK2EG7DoyZk0
8fi3dk9tPAekGSdspMdHiQOUvPAk1HSFqHX2b2jrmWspuQ2LanIUNPtudlv5Px19
B4z9gnN38hv5cs2Ox+gWXomCuSlY3OMKtBBfxc554gbAeQ6xJ123XPIee/FNAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUnompn8PtEDcWyRW3xQOx3l46nmYwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjA0NjAzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAslNx
MA0GCSqGSIb3DQEBCwUAA4IBAQAnJ+MnY/Fgw6d3iwDJyhzH3xqb2udXVNtVJ6ha
P6Dpm8aZXcu7Ya3N2tg+JkMZvBIOACDi9L9r18bzuhn6+IR7foCj+PS5CQ1kilmb
zAAPt7JpPqk9UBN0unJxnaiYozV4bBh28lFtgveUoMkoE1dvM6vZ+L6gqnrq1i0b
QBJ1nb6PjQirMjDhbNFTmxbcpAROXeMyazh57fNBAyr8H1EZh8m+6vYt/OVeqc23
4bF+s0ey39WpA7AK9aHCKryeCP4XXlQitcHyU9wzSFEpVvvICa02lcHPZcBpFRtE
3WHa5vIppufQWzVQ1b8jTTqygAdR6TBtiWd+jc5j4badWO3f
-----END CERTIFICATE-----
Generated at Sun Sep 20 14:25:49 2026 by rpki-client