Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS203607.roa
File: AS203607.roa (raw, json)
Hash identifier: IF1dHo22/0z5W+ODMipkY//palSNrjdsk2fW4lXM5l4=
Subject key identifier: 31:D5:20:FD:0B:2B:7F:CC:F0:AE:AD:34:24:AC:A7:0E:08:CF:90:29
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 6D894CABE7846012E20525B5275EF6B9CB0BF938
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS203607.roa
Signing time: Thu 05 Nov 2026 17:49:57 +0000
ROA not before: Thu 05 Nov 2026 17:44:57 +0000
ROA not after: Thu 04 Nov 2027 17:49:57 +0000
asID: 203607
IP address blocks: 2a14:7580:ffe5::/48 maxlen: 48
2a14:7586:2000::/36 maxlen: 36
2a14:7586:3000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 05:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:89:4c:ab:e7:84:60:12:e2:05:25:b5:27:5e:f6:b9:cb:0b:f9:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Nov 5 17:44:57 2026 GMT
Not After : Nov 4 17:49:57 2027 GMT
Subject: CN=31D520FD0B2B7FCCF0AEAD3424ACA70E08CF9029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:42:d6:35:e6:21:e3:d2:bf:35:80:99:ba:6c:
80:5e:cc:2d:52:3e:ce:48:5f:fd:64:fb:84:5b:03:
9e:f1:41:0a:ac:fa:8e:b9:38:0e:36:4b:bc:71:3f:
49:a7:12:7e:f3:5e:c5:2e:5f:5a:51:26:84:4c:40:
8b:e7:7e:61:73:e4:0f:be:82:2e:5e:49:c3:9d:85:
1c:41:c1:2e:7f:48:df:34:6a:b8:c0:4f:35:2b:b6:
49:7d:ce:a5:5c:a0:69:42:7b:b8:a6:74:a7:34:7c:
4b:a2:7b:eb:ea:d4:07:11:f9:c7:95:19:96:e3:5b:
ce:8e:df:0a:8a:8a:df:cf:77:2f:fc:10:4e:5c:ab:
0a:17:16:e2:13:27:0f:91:c2:7c:49:8d:e6:ff:c5:
c1:39:60:ca:c4:3c:eb:a2:23:b5:03:08:3d:1a:6e:
e0:b7:7a:e2:41:8c:d6:46:2b:88:55:49:99:be:b7:
27:6b:14:97:6e:36:1b:f3:26:3d:4e:b4:b1:08:46:
8c:55:19:75:8c:4e:4d:24:8a:c2:21:62:f6:74:74:
33:ae:58:d1:73:23:73:10:8d:65:9a:10:e5:e1:04:
a9:77:33:a7:48:67:47:df:85:49:99:c4:6b:20:25:
42:69:ba:22:c5:57:7d:4d:3e:fe:df:7a:3a:0f:9e:
b3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D5:20:FD:0B:2B:7F:CC:F0:AE:AD:34:24:AC:A7:0E:08:CF:90:29
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS203607.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:ffe5::/48
2a14:7586:2000::/35
Signature Algorithm: sha256WithRSAEncryption
6f:88:c9:ad:1a:ee:83:57:45:aa:51:a0:a0:d9:4a:94:5c:c8:
0d:4d:57:42:84:47:9c:0d:e0:b4:84:c0:59:dc:22:21:63:7b:
14:39:39:df:92:0e:25:8b:7d:bd:a8:a9:62:b2:bc:63:43:07:
b3:12:d3:72:fe:9e:01:a5:b6:20:24:3c:1f:02:9d:67:0e:fa:
6e:6b:32:6c:08:e1:24:0c:ed:54:ee:ef:5e:12:d6:0a:3c:27:
0d:10:77:83:f2:f4:b2:ac:20:78:cf:de:12:0f:90:1a:06:7d:
9c:bf:3a:08:ee:ad:26:0c:60:d0:b1:31:aa:8f:d5:a9:78:6d:
99:71:8f:dc:9c:25:2c:bb:01:62:e4:35:af:cd:83:6b:32:09:
e2:ab:29:9f:2c:8f:d6:8c:0b:0f:16:bc:94:e5:58:db:f1:d3:
fd:db:a6:78:10:b9:b6:ff:6b:e0:78:3a:b4:ad:a6:ef:bb:d6:
89:c0:12:45:46:49:2a:85:38:b9:bd:58:50:07:32:b0:7e:6e:
8e:18:6c:38:7e:67:d9:10:92:4b:39:f6:61:ac:69:b0:b7:93:
89:db:ce:65:03:68:fe:6b:af:f3:94:79:5b:97:51:7c:f9:25:
db:4a:b1:fd:92:99:39:04:07:ea:3c:7d:64:2d:61:13:77:39:
50:d9:24:f3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Nov 7 15:06:19 2026 by rpki-client