Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS203757.roa
File: AS203757.roa (raw, json)
Hash identifier: 0agPVWVsUeunjjPHBJ+DcMLCJRNcygD31nPA/v9vM0U=
Subject key identifier: 09:05:83:2E:DD:07:41:B4:DD:BF:E2:50:AF:BE:B5:F0:02:92:F9:D6
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 7A0C0F2895D99920484927E46F1A004A95E275EF
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS203757.roa
Signing time: Fri 10 Apr 2026 01:18:48 +0000
ROA not before: Fri 10 Apr 2026 01:13:48 +0000
ROA not after: Fri 09 Apr 2027 01:18:48 +0000
asID: 203757
IP address blocks: 2a0f:85c1:d9f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:0c:0f:28:95:d9:99:20:48:49:27:e4:6f:1a:00:4a:95:e2:75:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Apr 10 01:13:48 2026 GMT
Not After : Apr 9 01:18:48 2027 GMT
Subject: CN=0905832EDD0741B4DDBFE250AFBEB5F00292F9D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8d:c2:3b:c9:fb:3b:89:f5:f1:29:65:13:ff:
d1:8c:29:bc:3d:a0:c1:6e:f9:02:94:7c:fc:31:80:
62:41:09:f2:fb:71:31:ad:07:1b:85:53:e4:f6:3f:
cc:99:6c:76:c7:96:50:c1:f3:4c:fb:61:60:a0:ec:
6c:b4:34:1f:7f:b3:6a:5c:f8:d4:9e:d8:97:d2:3d:
39:ef:07:a7:96:05:c9:d3:71:b1:86:f2:c1:cc:05:
b7:a5:02:02:24:85:82:24:c6:9a:c9:1c:7e:55:74:
8b:1b:59:54:52:f1:5f:07:25:fe:d4:ab:45:ad:ef:
af:b6:0d:6f:53:d4:5d:de:0a:ab:68:7b:b8:c5:b6:
37:82:88:a9:f2:40:eb:50:46:c9:dc:d1:4f:1c:1b:
47:3c:d2:35:c2:44:21:6a:16:77:5b:b1:d5:45:af:
29:94:50:1e:49:58:05:02:0f:92:5f:dd:f4:f5:2b:
49:c1:3f:42:1b:ce:bb:30:a4:05:c0:04:13:28:f5:
7b:64:88:bc:31:07:62:16:fd:39:b2:94:a1:a6:8e:
c2:0b:44:4c:45:11:6c:87:a4:16:b9:07:eb:f5:c7:
76:49:b5:b1:3f:09:46:7a:25:1e:9d:70:f1:b2:6b:
6c:17:cd:4f:7b:e4:1b:69:12:a4:3f:58:95:06:f4:
fa:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:05:83:2E:DD:07:41:B4:DD:BF:E2:50:AF:BE:B5:F0:02:92:F9:D6
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS203757.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:d9f::/48
Signature Algorithm: sha256WithRSAEncryption
85:ed:4d:68:fb:37:d6:95:5a:1b:69:a5:49:54:64:e1:c2:6b:
2e:62:5b:62:fd:03:4d:e2:fb:7a:6e:4d:e3:3f:da:55:88:a3:
59:a2:dc:9e:fc:da:aa:72:60:fd:96:65:fe:7f:df:44:f6:7c:
4b:f2:5a:ba:15:d6:fa:e3:45:7c:69:25:21:a8:7a:6d:4f:0e:
28:24:65:59:7d:72:03:30:ce:30:a7:a0:87:55:76:7b:d1:59:
6b:15:4b:37:9f:6f:e7:eb:a9:a1:c5:4a:e6:ef:a4:c5:f5:c5:
c9:58:d4:58:7c:1e:7f:a6:ed:96:8f:e9:84:c9:25:ac:5d:22:
d1:16:d5:e7:76:dd:bf:95:4d:d3:c9:da:47:76:ce:a4:75:93:
2a:4e:b3:93:03:e4:fd:38:a3:15:eb:a4:ee:57:99:16:24:2c:
9e:6a:16:56:c7:fa:70:10:c4:60:ac:e9:8f:19:30:33:21:ec:
a5:24:12:22:ce:3b:53:23:68:ca:53:21:96:ca:d8:7f:33:76:
d0:a5:c1:15:5b:c1:24:79:a7:00:79:89:bb:6a:ee:10:93:f6:
14:f7:b4:c5:73:f6:9c:a6:90:2e:e6:3c:65:d5:f9:25:5a:49:
8b:a8:33:04:42:60:9c:ff:17:53:29:fc:78:32:42:67:d9:e9:
fd:01:4b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:12:06 2026 by rpki-client