Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS203971.roa
File: AS203971.roa (raw, json)
Hash identifier: kHEldDkG7aWA/++GLuRCZKPVp3W2jPWttIwkMo877CU=
Subject key identifier: 5F:1E:49:33:71:94:FD:B6:C6:38:F4:51:D9:19:1A:0C:DA:F4:38:C7
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 64FA5411723A70841DA3EDCCA24C11826C63E09B
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS203971.roa
Signing time: Thu 11 Jun 2026 13:56:14 +0000
ROA not before: Thu 11 Jun 2026 13:51:14 +0000
ROA not after: Thu 10 Jun 2027 13:56:14 +0000
asID: 203971
IP address blocks: 188.220.123.0/24 maxlen: 24
188.220.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:fa:54:11:72:3a:70:84:1d:a3:ed:cc:a2:4c:11:82:6c:63:e0:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 11 13:51:14 2026 GMT
Not After : Jun 10 13:56:14 2027 GMT
Subject: CN=5F1E49337194FDB6C638F451D9191A0CDAF438C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:19:41:07:17:f7:f9:7f:77:ad:81:c0:4e:a4:
53:ad:92:fe:62:76:e2:eb:80:70:d5:dd:c0:8f:81:
4f:d1:c5:03:9d:8d:d8:59:9b:e3:09:ed:85:44:74:
b4:db:5f:52:e6:bd:c2:d9:dd:e2:37:1b:b1:bb:e0:
88:c9:19:17:2d:1f:34:6c:67:c2:f2:9b:a3:09:f1:
22:99:59:22:55:e7:db:40:a7:14:0c:90:be:03:69:
db:5c:d3:12:3f:1e:27:d2:ce:69:37:da:18:af:9d:
5e:61:e4:ab:c4:af:b8:82:eb:c0:aa:2d:03:0c:26:
1d:f6:73:a9:d1:0d:76:f5:63:89:cf:a5:1f:a2:5f:
39:aa:49:59:99:10:dd:ad:8e:f1:a0:3e:cb:85:df:
b2:dc:0b:69:01:14:61:3c:87:68:ca:4d:e7:f2:14:
5f:6d:30:0b:ae:60:e9:dc:b9:2b:6a:fe:7c:ab:aa:
0d:4a:34:96:e5:ae:31:e9:42:27:ce:ce:38:27:a7:
58:29:51:64:e1:7c:bc:61:16:8f:0a:b4:ee:af:26:
98:72:95:00:7c:b2:81:2c:c2:c9:13:0e:f4:e7:f8:
6d:27:50:0c:ef:4a:bf:85:16:46:38:21:07:11:dc:
78:d0:9f:37:aa:fa:85:28:89:1e:b7:71:28:4d:d2:
68:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:1E:49:33:71:94:FD:B6:C6:38:F4:51:D9:19:1A:0C:DA:F4:38:C7
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS203971.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.220.123.0-188.220.124.255
Signature Algorithm: sha256WithRSAEncryption
62:b7:dc:ae:a9:4d:99:1d:d4:a9:42:a8:5c:0e:bf:c7:ae:3f:
3b:b8:fa:eb:d1:5c:63:25:66:29:69:ef:cf:0a:c1:21:2a:f4:
8f:e8:eb:20:00:ef:79:df:43:f1:d2:85:85:82:c2:1b:c6:a8:
6a:10:2e:98:44:69:ff:31:4a:c8:bd:21:4a:4a:9f:85:97:e1:
ae:52:41:1a:ff:a8:01:b0:98:89:cf:33:81:37:1c:48:f7:83:
8c:a4:53:25:1b:a9:2f:c6:e6:3d:4f:6a:1e:24:89:7f:aa:32:
07:27:a6:6d:4c:6f:64:94:43:51:35:6d:21:c6:59:f6:ea:b4:
56:81:be:e6:19:10:23:4a:08:89:b5:30:d4:91:f7:20:6c:34:
9f:c5:9e:93:25:f8:65:1a:c9:66:41:dd:26:75:d6:77:86:5e:
c7:07:b9:d9:40:a0:bc:08:cc:50:c2:02:b9:61:82:09:53:3e:
97:01:db:69:7a:13:24:bc:c2:81:11:e3:20:1d:84:c1:08:57:
84:1f:65:6d:4b:82:c4:a7:c6:99:6d:cb:ab:ee:b4:f5:eb:87:
28:32:ca:68:c2:20:6b:10:82:e3:2b:57:63:76:1a:1c:89:c6:
3c:82:9c:2a:4e:3a:10:5b:2d:32:8a:5d:b6:b0:3e:22:49:c0:
61:71:44:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 08:38:25 2026 by rpki-client