Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS203636.roa
File: AS203636.roa (raw, json)
Hash identifier: yXufl6YtyEEE+KTIXDH6zPGCcK2u9B1DALFWj5BKkWs=
Subject key identifier: 6D:DE:52:1A:2A:1D:AD:86:6D:BE:99:22:AA:45:DA:C4:4E:88:13:8F
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 404AEF6711D956643782331672781FB59BF06047
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS203636.roa
Signing time: Thu 26 Feb 2026 12:21:46 +0000
ROA not before: Thu 26 Feb 2026 12:16:46 +0000
ROA not after: Thu 25 Feb 2027 12:21:46 +0000
asID: 203636
IP address blocks: 193.111.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:4a:ef:67:11:d9:56:64:37:82:33:16:72:78:1f:b5:9b:f0:60:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Feb 26 12:16:46 2026 GMT
Not After : Feb 25 12:21:46 2027 GMT
Subject: CN=6DDE521A2A1DAD866DBE9922AA45DAC44E88138F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fe:2e:1d:65:1e:3b:5e:e2:e6:60:af:08:73:
ee:52:40:f8:63:7e:9f:f5:81:b9:2a:54:0a:01:9a:
ee:ab:57:05:bb:64:42:1d:64:c5:78:da:32:02:8d:
53:8e:35:20:1e:2e:cf:83:2b:97:5a:8a:d0:70:f3:
f4:ae:79:4b:0e:a2:fd:fe:92:47:20:e2:63:6d:14:
69:97:e1:8d:98:4f:bd:5d:93:84:a7:a5:3e:cc:bd:
7c:f4:b5:82:1f:ae:9d:53:98:63:2d:72:ce:e2:4e:
4b:89:a3:c9:97:12:d7:b1:c3:08:1a:48:b3:84:86:
4d:8c:4a:d5:97:ff:9e:56:85:5d:c4:9f:1e:73:55:
8d:d6:db:1a:7f:22:bc:81:9f:cc:dc:0c:6f:bf:0e:
c0:b6:e1:7b:1f:29:db:b1:3d:27:99:9b:66:0d:0b:
a7:55:6a:9f:a2:36:a7:3d:7d:dd:7d:7d:01:74:0b:
5d:52:db:e4:c7:26:04:e4:5f:d0:10:c5:20:26:e1:
1f:f4:a2:14:6b:93:f5:ae:09:95:47:e8:72:6e:3b:
09:93:51:59:6f:48:1b:05:df:cf:f9:76:58:da:e4:
08:95:71:1e:0d:fe:fe:dd:dd:54:8e:11:1a:c2:7b:
37:13:ad:0e:36:9b:a2:81:ab:8b:6d:66:1c:ce:b7:
61:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:DE:52:1A:2A:1D:AD:86:6D:BE:99:22:AA:45:DA:C4:4E:88:13:8F
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS203636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.116.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:b3:12:21:b6:3f:86:6b:c2:36:11:f4:a0:85:6b:d5:e6:7d:
0f:59:80:45:53:9e:b5:d2:2a:d0:7b:bc:2d:45:b8:1b:b2:1b:
e8:02:79:28:d2:05:31:67:f4:4c:71:ef:96:98:6b:8e:e5:97:
40:3b:d9:02:ed:4c:b4:68:1e:b8:4d:3b:1f:53:ab:5f:b5:21:
0b:e1:da:5b:1e:65:9c:e2:bb:7c:7c:cd:5f:0c:13:e8:37:27:
ee:73:3b:e6:00:5d:88:7c:c6:7c:95:29:a0:e1:33:be:27:d6:
a6:7f:3a:90:da:0d:8e:04:64:16:1c:e8:b3:75:a4:9c:ba:f9:
dc:24:a2:e8:7c:46:ba:e3:38:69:51:1f:07:21:5c:dc:5c:cf:
93:a0:1f:c3:24:80:0a:35:f0:0d:24:2d:a9:cd:1e:62:e7:4c:
41:78:72:a2:65:ec:2c:40:c5:22:11:2d:e3:c1:b1:68:e2:7f:
b0:19:57:6d:82:65:0b:cf:eb:8f:ef:0f:98:a4:2a:60:7d:03:
54:f3:f1:38:05:25:73:08:3e:a6:34:b7:2d:d7:3b:2e:55:58:
80:3e:52:6d:13:69:eb:6d:48:b6:3b:aa:75:c2:6d:ad:51:0a:
79:f4:e0:1f:95:3c:e3:47:92:02:bc:7a:ba:24:9f:b7:72:e1:
e2:e9:2f:86
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUQErvZxHZVmQ3gjMWcngftZvwYEcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi
MmQ2ZWQ5ZDAeFw0yNjAyMjYxMjE2NDZaFw0yNzAyMjUxMjIxNDZaMDMxMTAvBgNV
BAMTKDZEREU1MjFBMkExREFEODY2REJFOTkyMkFBNDVEQUM0NEU4ODEzOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC/i4dZR47XuLmYK8Ic+5SQPhj
fp/1gbkqVAoBmu6rVwW7ZEIdZMV42jICjVOONSAeLs+DK5daitBw8/SueUsOov3+
kkcg4mNtFGmX4Y2YT71dk4SnpT7MvXz0tYIfrp1TmGMtcs7iTkuJo8mXEtexwwga
SLOEhk2MStWX/55WhV3Enx5zVY3W2xp/IryBn8zcDG+/DsC24XsfKduxPSeZm2YN
C6dVap+iNqc9fd19fQF0C11S2+THJgTkX9AQxSAm4R/0ohRrk/WuCZVH6HJuOwmT
UVlvSBsF38/5dlja5AiVcR4N/v7d3VSOERrCezcTrQ42m6KBq4ttZhzOt2ERAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUbd5SGiodrYZtvpkiqkXaxE6IE48wHwYDVR0j
BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi
ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM
VzdaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct
NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTMjAzNjM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwW90
MA0GCSqGSIb3DQEBCwUAA4IBAQDHsxIhtj+Ga8I2EfSghWvV5n0PWYBFU5610irQ
e7wtRbgbshvoAnko0gUxZ/RMce+WmGuO5ZdAO9kC7Uy0aB64TTsfU6tftSEL4dpb
HmWc4rt8fM1fDBPoNyfuczvmAF2IfMZ8lSmg4TO+J9amfzqQ2g2OBGQWHOizdaSc
uvncJKLofEa64zhpUR8HIVzcXM+ToB/DJIAKNfANJC2pzR5i50xBeHKiZewsQMUi
ES3jwbFo4n+wGVdtgmULz+uP7w+YpCpgfQNU8/E4BSVzCD6mNLct1zsuVViAPlJt
E2nrbUi2O6p1wm2tUQp59OAflTzjR5ICvHq6JJ+3cuHi6S+G
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:06:58 2026 by rpki-client