Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS203106.roa
File: AS203106.roa (raw, json)
Hash identifier: IXPoBjuP9igBm9DJaA8dpooCLXOZuHvgK1mYiayawkE=
Subject key identifier: F2:60:32:64:5C:4A:87:EE:3C:75:44:93:1C:31:6D:25:08:9A:4A:18
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 1C674F349382E8D4A6E3D92212BC20115D533239
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS203106.roa
Signing time: Thu 04 Jun 2026 11:35:02 +0000
ROA not before: Thu 04 Jun 2026 11:30:02 +0000
ROA not after: Thu 03 Jun 2027 11:35:02 +0000
asID: 203106
IP address blocks: 188.221.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:67:4f:34:93:82:e8:d4:a6:e3:d9:22:12:bc:20:11:5d:53:32:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 4 11:30:02 2026 GMT
Not After : Jun 3 11:35:02 2027 GMT
Subject: CN=F26032645C4A87EE3C7544931C316D25089A4A18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:67:27:97:b3:b6:80:a8:df:81:45:23:e8:4b:
82:bf:82:08:07:ae:28:08:cd:b7:81:f1:c6:5a:bd:
eb:c4:ce:61:bb:e8:f5:11:2a:58:e7:34:3e:00:1b:
e3:0a:b1:a3:a8:8d:24:d1:6e:cc:fb:3b:2c:04:f9:
30:19:cb:b1:e2:af:75:b7:1d:34:66:58:f4:47:23:
e7:e9:a8:de:e7:4c:90:6b:97:ee:42:68:c0:41:ab:
73:3f:4d:87:bb:eb:5e:c0:4b:b3:b5:70:a7:b6:c6:
7c:5d:c1:a9:75:89:2d:3e:e8:68:93:72:55:f1:3c:
ab:1c:a8:ff:f9:27:f2:d0:6a:64:90:fe:78:db:ed:
31:49:ac:f6:6a:24:35:07:43:90:fa:63:90:55:8b:
7f:81:2b:7b:61:5a:32:80:f4:47:19:0c:65:20:5c:
7b:20:c2:ae:15:af:30:7b:00:5b:2e:d2:8b:68:72:
6b:aa:0a:64:cb:3d:fa:1f:0a:46:87:37:25:8f:f3:
67:6a:37:ab:25:da:5e:5c:fc:1d:95:74:5b:c4:09:
4b:90:fa:44:f4:49:92:ab:06:ab:7c:bf:1d:e8:46:
b4:5c:33:72:09:5a:f7:9f:6f:08:5f:64:32:22:af:
e2:e3:38:9e:35:e9:a6:bd:0f:b2:36:70:9d:5e:5b:
77:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:60:32:64:5C:4A:87:EE:3C:75:44:93:1C:31:6D:25:08:9A:4A:18
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS203106.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.221.208.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:87:b9:d0:84:8f:cc:07:06:c4:d2:de:8d:3c:3d:7e:fa:65:
eb:9b:51:bf:33:42:54:76:1f:34:cf:49:4c:bf:e1:10:07:a6:
cd:6e:28:a4:1b:3f:4a:f0:63:88:98:94:61:3f:f6:16:a0:a5:
0c:45:68:37:db:d2:17:8c:f2:b9:6e:3b:c9:7d:c2:81:21:68:
ce:10:7a:37:1e:1a:b6:a7:a5:7d:a1:99:8a:3e:97:f0:31:ae:
da:da:4d:c2:ce:ae:1a:d0:11:66:76:44:2f:74:9b:13:39:9d:
fa:d3:23:b8:60:c9:5d:72:54:c4:cd:f5:95:db:8c:45:a5:28:
ef:9b:44:50:4f:d6:53:21:73:34:c8:24:75:4d:9b:76:6b:6c:
fc:a7:88:14:52:a2:ae:31:ff:bf:91:52:4b:8b:99:d7:52:b0:
d7:ee:c5:52:3b:b7:a1:ad:f9:03:66:e9:a9:ba:2b:f4:cd:77:
42:7c:f7:e0:6a:8a:93:05:4e:7c:c7:d9:c7:eb:e2:d8:f7:23:
f1:50:f5:e2:61:94:e8:3b:39:c5:bf:fa:4a:87:6c:12:81:4f:
89:b3:1a:a0:46:49:ed:5e:af:bf:88:c0:8d:08:60:24:1d:c7:
ff:32:fa:8d:17:6b:a8:cc:a1:dd:e9:17:71:55:d0:d2:99:3b:
f9:3c:ab:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:37:29 2026 by rpki-client