Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS203058.roa
File: AS203058.roa (raw, json)
Hash identifier: yYWDYE3nGBSd+2GTQ5x60AICbt7bAVxMCacbdY7ANRs=
Subject key identifier: 97:E0:1E:E8:25:EF:0F:B4:69:EA:E8:E2:27:E4:DD:C1:9B:C3:E8:2A
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 689FDAF7D719EA736DA94B84166097A9CB886B9E
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS203058.roa
Signing time: Thu 29 Jan 2026 09:55:36 +0000
ROA not before: Thu 29 Jan 2026 09:50:36 +0000
ROA not after: Thu 28 Jan 2027 09:55:36 +0000
asID: 203058
IP address blocks: 141.11.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 04:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:9f:da:f7:d7:19:ea:73:6d:a9:4b:84:16:60:97:a9:cb:88:6b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jan 29 09:50:36 2026 GMT
Not After : Jan 28 09:55:36 2027 GMT
Subject: CN=97E01EE825EF0FB469EAE8E227E4DDC19BC3E82A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fb:9e:85:55:87:78:b2:50:be:2c:37:32:7c:
19:98:66:cb:8b:6a:d8:07:aa:21:08:9a:94:87:5e:
f6:2f:07:06:c1:99:fd:48:ca:8b:a8:ae:77:66:61:
12:3b:c4:ef:72:af:f4:26:0c:7c:70:6f:11:aa:ab:
57:be:c4:1a:da:ca:38:12:56:86:09:a7:75:9f:f5:
c0:95:45:b0:d8:0b:0b:2e:07:9f:0e:12:7b:d4:b3:
38:8c:d8:52:dc:15:49:57:fa:bc:e2:87:0d:e4:a2:
7b:ad:07:2d:13:82:72:e2:4e:b5:bb:59:56:f4:4c:
d8:a0:03:70:f9:cc:af:8d:ba:bd:3d:28:a2:32:d0:
1d:0e:42:8d:2f:05:fd:56:2f:db:3c:30:63:5d:7b:
df:f7:a1:a2:04:56:cf:30:86:d7:65:2c:77:27:dc:
de:ab:84:c8:17:53:ef:39:f3:e7:bb:31:e9:81:6e:
ad:e0:69:fc:93:5f:c3:05:69:78:24:52:c7:9f:eb:
f2:b9:ca:3e:35:59:d3:ef:99:59:68:6d:da:05:04:
87:be:ed:4f:9c:ca:a8:91:9a:fe:f0:ef:ac:a2:31:
49:c8:8d:bf:f0:c7:3d:d7:54:7a:8a:bf:ce:fa:94:
69:bd:89:c8:f0:31:82:d9:39:cb:f7:2d:f4:1e:7d:
f0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E0:1E:E8:25:EF:0F:B4:69:EA:E8:E2:27:E4:DD:C1:9B:C3:E8:2A
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS203058.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.154.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:2e:0f:d4:dc:15:7f:ad:af:f5:a0:6a:d6:d5:70:18:aa:a0:
3e:05:a4:f7:e6:8a:81:58:d9:e0:85:60:9c:23:bd:bf:aa:9a:
fe:50:70:40:7c:24:4d:df:ab:30:c5:87:ff:b0:78:51:10:00:
37:68:a7:97:a6:85:5d:0e:df:51:40:5c:05:bd:73:85:ec:70:
d7:78:23:d0:95:3c:bc:5e:8b:63:2d:e9:0e:3e:47:74:58:ef:
08:5b:15:73:a2:b5:dd:43:f2:e3:ff:8d:08:4e:74:cf:ad:90:
45:bb:5c:2f:19:ab:b9:40:20:30:16:25:ab:03:1b:35:cc:b8:
c5:b2:2a:c4:9c:f5:d1:21:ac:0d:63:a2:b5:0e:dd:11:9e:65:
98:f9:84:c3:ae:22:6c:07:7f:f8:8e:e3:3f:5f:ce:c7:d2:76:
bf:4d:f4:e1:e5:09:ae:f8:35:d2:d6:bf:cd:e5:cd:07:70:d1:
00:9f:61:c7:dc:ef:3e:1b:be:0a:1b:1e:f0:2c:31:0b:ef:7e:
3f:19:d2:90:84:9a:1d:23:ee:d7:02:d1:e2:15:e2:b5:1c:70:
a3:90:e8:ad:44:03:cb:42:ac:a7:11:93:d6:a7:fe:dd:1b:7c:
60:97:72:8a:48:28:fb:dc:12:a4:bf:fc:63:10:3b:fe:cf:8e:
48:b5:ef:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:01:09 2026 by rpki-client