Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS203758.roa
File: AS203758.roa (raw, json)
Hash identifier: SLSwkg724gT0gDlTO9ifQraG1ily4YqlFfOqXE/9T48=
Subject key identifier: 5B:DA:BF:9B:1D:19:5D:D9:5C:28:C2:FF:14:0D:AC:29:68:13:D5:08
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 13F40ED1328DBDCEFE25CBAE49BA5FCB78EBDEBE
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS203758.roa
Signing time: Tue 29 Jul 2025 14:54:13 +0000
ROA not before: Tue 29 Jul 2025 14:49:13 +0000
ROA not after: Tue 28 Jul 2026 14:54:13 +0000
asID: 203758
IP address blocks: 141.98.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 00:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:f4:0e:d1:32:8d:bd:ce:fe:25:cb:ae:49:ba:5f:cb:78:eb:de:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jul 29 14:49:13 2025 GMT
Not After : Jul 28 14:54:13 2026 GMT
Subject: CN=5BDABF9B1D195DD95C28C2FF140DAC296813D508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fc:a1:0f:9a:e7:31:cd:22:ef:1d:21:35:d1:
be:d4:bf:1c:2f:7b:75:4c:bf:a3:ad:de:72:7c:76:
78:94:76:dd:b5:54:25:8a:86:ae:9c:6e:82:49:cb:
c8:ee:99:c6:14:49:06:32:76:56:e9:f0:d1:3d:f9:
bd:4a:7e:21:b7:b7:c1:03:fd:f3:44:21:87:fa:f2:
a1:97:cc:b7:3b:73:ff:26:41:4a:86:af:8e:30:cb:
c2:38:35:fa:25:43:0e:f5:44:48:29:9d:ad:a3:c3:
45:18:7f:7b:ff:cd:5f:61:f2:30:be:f5:f4:6e:d5:
bf:60:c0:b6:36:b1:50:75:d1:26:bb:df:6d:b3:1d:
ee:c5:54:29:62:38:ed:7f:bf:c0:65:49:cb:85:58:
42:94:a5:02:46:f8:ef:12:f8:2a:78:55:4c:d2:65:
43:27:b4:62:ea:72:e4:09:fa:7c:18:cb:e6:6d:f7:
ea:5d:14:4a:fc:74:21:27:77:7b:77:55:87:ce:fa:
9e:2d:3d:40:4e:e1:e8:b2:f7:a2:c3:a4:4b:41:6d:
3d:37:c3:22:5f:37:97:c3:a9:22:be:a0:5d:a3:da:
51:de:bf:c0:c4:64:1b:4d:57:b9:04:76:5d:bf:30:
25:63:c1:06:8d:53:ad:37:df:af:5f:ff:8b:51:dc:
2d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:DA:BF:9B:1D:19:5D:D9:5C:28:C2:FF:14:0D:AC:29:68:13:D5:08
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS203758.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.157.0/24
Signature Algorithm: sha256WithRSAEncryption
32:4d:a4:ad:cb:bb:eb:fa:47:cd:99:0f:59:c7:9e:58:d8:5b:
89:e5:6c:44:5a:e7:5a:e1:28:eb:a3:08:cd:c6:94:76:6c:d8:
e9:c3:93:72:66:9f:04:65:28:01:c4:17:a5:bb:03:64:2b:4b:
d7:7f:df:8c:b2:81:20:82:54:56:65:1a:b1:e8:85:c5:35:84:
ae:4f:ca:2f:69:79:a6:b8:e1:7b:e2:29:25:58:9d:b8:72:bd:
74:81:5f:18:a8:f6:58:53:eb:27:2f:43:a4:58:92:be:b4:34:
57:e8:40:f6:21:ba:67:9f:e0:dd:98:69:fb:98:c1:78:cc:58:
c7:f5:21:e3:16:e2:08:b4:fb:3c:99:37:af:8a:4e:4e:42:31:
00:1d:73:fd:3b:4d:93:5a:00:b8:a7:d1:31:9d:b9:06:21:67:
18:e0:cb:1d:7d:04:26:89:79:df:49:17:dc:f7:fb:7f:7b:3d:
21:03:51:d8:33:51:e2:21:ab:78:72:ca:ee:49:4a:17:60:4a:
96:9a:71:cb:fa:ad:2c:b5:39:af:cf:d6:21:f0:ed:3a:bf:cf:
87:51:9b:af:10:cb:0d:ad:37:f9:8c:30:94:d9:99:e5:a7:8b:
34:28:9f:c9:d8:ba:a2:92:18:a7:c5:52:27:67:02:2d:72:f2:
96:51:00:ab
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUE/QO0TKNvc7+JcuuSbpfy3jr3r4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi
MmQ2ZWQ5ZDAeFw0yNTA3MjkxNDQ5MTNaFw0yNjA3MjgxNDU0MTNaMDMxMTAvBgNV
BAMTKDVCREFCRjlCMUQxOTVERDk1QzI4QzJGRjE0MERBQzI5NjgxM0Q1MDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd/KEPmucxzSLvHSE10b7Uvxwv
e3VMv6Ot3nJ8dniUdt21VCWKhq6cboJJy8jumcYUSQYydlbp8NE9+b1KfiG3t8ED
/fNEIYf68qGXzLc7c/8mQUqGr44wy8I4NfolQw71REgpna2jw0UYf3v/zV9h8jC+
9fRu1b9gwLY2sVB10Sa7322zHe7FVCliOO1/v8BlScuFWEKUpQJG+O8S+Cp4VUzS
ZUMntGLqcuQJ+nwYy+Zt9+pdFEr8dCEnd3t3VYfO+p4tPUBO4eiy96LDpEtBbT03
wyJfN5fDqSK+oF2j2lHev8DEZBtNV7kEdl2/MCVjwQaNU603369f/4tR3C13AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUW9q/mx0ZXdlcKML/FA2sKWgT1QgwHwYDVR0j
BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi
ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM
VzdaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct
NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTMjAzNzU4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjWKd
MA0GCSqGSIb3DQEBCwUAA4IBAQAyTaSty7vr+kfNmQ9Zx55Y2FuJ5WxEWuda4Sjr
owjNxpR2bNjpw5NyZp8EZSgBxBeluwNkK0vXf9+MsoEgglRWZRqx6IXFNYSuT8ov
aXmmuOF74iklWJ24cr10gV8YqPZYU+snL0OkWJK+tDRX6ED2Ibpnn+DdmGn7mMF4
zFjH9SHjFuIItPs8mTevik5OQjEAHXP9O02TWgC4p9ExnbkGIWcY4MsdfQQmiXnf
SRfc9/t/ez0hA1HYM1HiIat4csruSUoXYEqWmnHL+q0stTmvz9Yh8O06v8+HUZuv
EMsNrTf5jDCU2Znlp4s0KJ/J2LqikhinxVInZwItcvKWUQCr
-----END CERTIFICATE-----
Generated at Mon Aug 4 07:38:36 2025 by rpki-client