Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS203048.roa
File: AS203048.roa (raw, json)
Hash identifier: lNdkrZooJ2DMPXvV+ScJ73vDDVP69/MmpR5j+DnV8Tw=
Subject key identifier: B1:A5:12:C0:76:87:5A:CE:62:FE:EB:26:99:EE:31:AA:C5:52:E4:15
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 5166EF180CDDE9B8CAD3E5FE5E8F2ACE0024D8BE
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS203048.roa
Signing time: Mon 08 Jun 2026 19:39:47 +0000
ROA not before: Mon 08 Jun 2026 19:34:47 +0000
ROA not after: Mon 07 Jun 2027 19:39:47 +0000
asID: 203048
IP address blocks: 141.11.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:66:ef:18:0c:dd:e9:b8:ca:d3:e5:fe:5e:8f:2a:ce:00:24:d8:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jun 8 19:34:47 2026 GMT
Not After : Jun 7 19:39:47 2027 GMT
Subject: CN=B1A512C076875ACE62FEEB2699EE31AAC552E415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:35:7e:ad:68:bf:71:fe:5f:7d:44:e9:f0:e4:
ff:1d:a3:28:f7:d0:76:a7:93:aa:7f:ee:43:b6:b5:
5b:5b:9f:86:c8:76:0b:38:96:00:40:93:95:ae:96:
6e:9f:5d:13:e7:f2:ec:f7:b0:a4:07:ee:10:66:45:
e0:b2:9d:a6:e5:78:50:8c:a4:7c:0a:5f:cd:e6:9d:
39:d7:57:df:a7:df:c7:36:96:7a:80:56:5a:d0:bd:
f1:56:db:f2:96:15:35:57:b6:da:6e:b8:0c:7a:db:
26:c7:89:36:5c:2d:fa:bb:a3:fb:e0:e0:64:73:75:
1a:63:0b:16:87:5a:45:50:c3:48:db:01:a2:a9:69:
4b:f6:2b:0c:8d:0c:60:8b:88:f3:96:79:f8:c6:df:
20:71:aa:66:08:df:a2:45:8c:b7:d8:fe:20:34:28:
79:87:69:3a:3b:a8:32:c5:28:54:4b:cd:94:97:9a:
6f:5f:e7:e2:6f:16:68:fd:43:45:a0:6d:1e:05:9e:
a6:31:d3:98:5e:96:06:76:75:98:b8:e2:0d:ba:23:
53:69:c1:43:3f:4f:2e:5c:8f:e3:45:71:4d:a5:10:
96:14:be:8f:04:94:99:f6:99:e5:bd:ba:5e:38:13:
40:37:ec:10:b8:83:e7:97:b9:a5:03:c9:4d:b9:e2:
ce:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A5:12:C0:76:87:5A:CE:62:FE:EB:26:99:EE:31:AA:C5:52:E4:15
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS203048.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.193.0/24
Signature Algorithm: sha256WithRSAEncryption
96:ab:11:62:57:d7:fa:ac:b7:ad:8c:ab:da:58:42:2b:8c:84:
38:78:7d:36:b9:39:bd:b3:bd:0e:67:c7:87:b4:e9:e7:f1:b8:
44:c9:dd:d7:9d:62:16:3f:9d:50:a9:d1:60:08:c8:0a:22:2d:
6b:df:f0:22:a4:d2:46:1b:4f:31:d0:d4:1a:bb:25:98:21:b0:
6f:95:f1:14:f8:7b:9c:10:ec:e7:88:54:d9:77:ce:c0:22:39:
f9:b9:e5:57:18:0b:7d:cb:85:4f:45:92:26:51:e0:5a:00:06:
5f:a6:e5:c1:d6:3a:de:56:a5:c3:3b:51:1b:6c:51:2b:15:f0:
f5:ad:e0:ec:bf:f7:80:fb:2f:1c:25:8a:cb:78:2f:03:88:d8:
47:21:af:97:6c:62:24:9d:19:6f:f9:1e:48:42:e6:50:6b:01:
08:bd:dd:f8:25:fd:6d:79:67:e6:e4:31:80:e4:ef:b7:50:12:
86:15:66:39:0f:26:b6:af:54:e9:72:78:46:83:6c:62:6b:10:
93:2e:7a:c3:01:dc:e3:e3:3f:d2:49:9a:77:30:a0:a4:18:69:
5c:f4:f3:c5:66:e6:e6:62:43:48:4e:61:41:bd:5e:20:fc:63:
2d:fd:29:a6:e7:cb:21:81:90:ba:5d:2e:a6:d8:b9:ca:b3:79:
c9:e8:d8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:38:08 2026 by rpki-client