Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS203054.roa
File: AS203054.roa (raw, json)
Hash identifier: Co+zXc8wucPf1Vdr835/V/sP1ctbD4LPsPU4roUt+HA=
Subject key identifier: 2D:26:F5:6C:97:4D:F8:EF:11:7C:18:E8:C6:91:AA:47:03:C4:DA:B1
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 7643CFC685936831C07CDA7BAF866B2D563BCF0E
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS203054.roa
Signing time: Tue 09 Jun 2026 07:55:45 +0000
ROA not before: Tue 09 Jun 2026 07:50:45 +0000
ROA not after: Tue 08 Jun 2027 07:55:45 +0000
asID: 203054
IP address blocks: 143.20.202.0/24 maxlen: 24
143.20.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:39:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:43:cf:c6:85:93:68:31:c0:7c:da:7b:af:86:6b:2d:56:3b:cf:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Jun 9 07:50:45 2026 GMT
Not After : Jun 8 07:55:45 2027 GMT
Subject: CN=2D26F56C974DF8EF117C18E8C691AA4703C4DAB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ef:f0:fb:4a:13:67:6a:5b:6d:1a:77:f9:94:
35:06:2c:87:ad:b3:63:88:87:ee:d8:2d:7d:9f:dc:
c6:4b:2d:ef:ab:e8:2b:20:23:b8:2f:23:c9:b4:a2:
48:2f:61:37:c6:4e:4e:b9:cf:7b:d6:fe:82:e4:99:
30:48:14:8f:6b:e1:0e:fd:c6:4a:bc:16:05:44:23:
56:ed:c4:97:63:17:98:44:f6:f1:b1:d6:47:70:dd:
86:28:db:f1:dd:36:16:34:00:ff:e1:0b:7e:27:62:
d1:2d:11:d6:89:1b:cb:79:8b:97:49:13:ae:63:45:
a8:46:37:55:fe:20:0a:5b:73:46:be:6e:f9:e9:f5:
2a:e6:7b:e7:b0:2f:e3:a5:1b:82:54:37:bd:af:ed:
4f:eb:6d:3e:ae:50:75:44:bf:2e:21:8f:45:eb:d9:
53:ea:d2:ff:e4:ee:8b:b6:f7:fd:18:bd:7b:8f:91:
b2:a5:62:35:e5:8a:34:b6:fa:64:17:36:3d:54:cd:
23:af:73:08:96:f8:dc:35:f1:fb:37:07:3c:85:85:
93:24:af:c5:f6:18:1f:c5:bc:fa:14:ed:b3:65:b2:
f9:98:0c:67:a7:f0:79:5e:25:dc:70:93:4f:40:07:
08:20:9f:1c:c9:3a:c2:cc:2e:6a:db:54:6f:97:ea:
fe:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:26:F5:6C:97:4D:F8:EF:11:7C:18:E8:C6:91:AA:47:03:C4:DA:B1
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS203054.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.202.0/24
143.20.220.0/24
Signature Algorithm: sha256WithRSAEncryption
96:33:42:49:2f:b7:9e:ca:3b:77:91:e2:2a:ed:4a:ef:1d:7a:
08:8a:fc:6a:0e:17:24:ac:83:aa:02:ca:07:2b:1b:cf:f8:74:
84:7d:e8:c2:2e:c4:e0:83:cb:35:68:d5:4a:06:a7:cb:04:37:
6a:25:13:19:ff:37:1f:68:db:da:d8:6f:f1:52:dd:6d:62:bb:
15:34:1f:28:be:d6:ce:bb:21:7a:79:45:d0:45:4a:a1:4b:7e:
94:50:af:01:45:57:db:fd:fc:e4:7c:b6:55:90:00:f4:50:df:
5e:19:cf:c4:32:97:e7:8b:f7:9d:64:50:86:be:69:78:cd:5d:
dd:20:ad:bf:c0:4b:55:f3:5f:f1:a2:fb:1b:60:3e:79:4d:11:
67:b4:80:04:2c:21:6a:52:74:1f:b6:2e:f6:ce:2c:40:ac:67:
a8:fa:49:25:c4:8c:24:40:1f:72:52:75:1e:72:ff:f6:53:b6:
30:7f:d9:83:14:d4:92:5f:8b:34:06:95:41:1a:42:d3:77:a1:
bb:14:c0:eb:11:b4:26:fd:c1:8d:8d:43:e1:7a:06:0e:9f:cb:
0c:8e:c8:7c:ce:d0:f1:d4:c4:48:36:53:d4:31:f2:51:f2:c1:
46:67:23:17:ea:6a:81:61:c7:1e:f5:67:7f:da:62:c3:54:22:
ae:d6:8b:12
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUdkPPxoWTaDHAfNp7r4ZrLVY7zw4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk
ZWI5M2Q5ZDAeFw0yNjA2MDkwNzUwNDVaFw0yNzA2MDgwNzU1NDVaMDMxMTAvBgNV
BAMTKDJEMjZGNTZDOTc0REY4RUYxMTdDMThFOEM2OTFBQTQ3MDNDNERBQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM7/D7ShNnalttGnf5lDUGLIet
s2OIh+7YLX2f3MZLLe+r6CsgI7gvI8m0okgvYTfGTk65z3vW/oLkmTBIFI9r4Q79
xkq8FgVEI1btxJdjF5hE9vGx1kdw3YYo2/HdNhY0AP/hC34nYtEtEdaJG8t5i5dJ
E65jRahGN1X+IApbc0a+bvnp9Srme+ewL+OlG4JUN72v7U/rbT6uUHVEvy4hj0Xr
2VPq0v/k7ou29/0YvXuPkbKlYjXlijS2+mQXNj1UzSOvcwiW+Nw18fs3BzyFhZMk
r8X2GB/FvPoU7bNlsvmYDGen8HleJdxwk09ABwggnxzJOsLMLmrbVG+X6v4pAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQULSb1bJdN+O8RfBjoxpGqRwPE2rEwHwYDVR0j
BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2
MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2
NVBaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt
NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTMjAzMDU0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAjxTK
AwQAjxTcMA0GCSqGSIb3DQEBCwUAA4IBAQCWM0JJL7eeyjt3keIq7UrvHXoIivxq
DhckrIOqAsoHKxvP+HSEfejCLsTgg8s1aNVKBqfLBDdqJRMZ/zcfaNva2G/xUt1t
YrsVNB8ovtbOuyF6eUXQRUqhS36UUK8BRVfb/fzkfLZVkAD0UN9eGc/EMpfni/ed
ZFCGvml4zV3dIK2/wEtV81/xovsbYD55TRFntIAELCFqUnQfti72zixArGeo+kkl
xIwkQB9yUnUecv/2U7Ywf9mDFNSSX4s0BpVBGkLTd6G7FMDrEbQm/cGNjUPhegYO
n8sMjsh8ztDx1MRINlPUMfJR8sFGZyMX6mqBYcce9Wd/2mLDVCKu1osS
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:45:19 2026 by rpki-client