Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS203057.roa
File: AS203057.roa (raw, json)
Hash identifier: pzAHH6NvUQnXzyQvTQVyyxTapcFkfCmSxemW4Vh3B6I=
Subject key identifier: 48:D5:2D:90:BA:95:B4:A0:3D:ED:DB:70:2B:97:D4:D9:F3:55:07:9B
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 383A242604CD4875521C1A344E0C37EDC74DF082
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS203057.roa
Signing time: Wed 25 Feb 2026 03:30:59 +0000
ROA not before: Wed 25 Feb 2026 03:25:59 +0000
ROA not after: Wed 24 Feb 2027 03:30:59 +0000
asID: 203057
IP address blocks: 91.124.33.0/24 maxlen: 24
178.93.98.0/24 maxlen: 24
178.93.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:3a:24:26:04:cd:48:75:52:1c:1a:34:4e:0c:37:ed:c7:4d:f0:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Feb 25 03:25:59 2026 GMT
Not After : Feb 24 03:30:59 2027 GMT
Subject: CN=48D52D90BA95B4A03DEDDB702B97D4D9F355079B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d9:09:2b:2b:fd:bf:b5:a2:54:11:12:a9:79:
4b:46:8b:ed:db:09:72:07:a7:ed:0e:40:5e:ef:ed:
86:e6:ff:22:4b:35:ab:24:3f:46:06:bf:ff:2a:5d:
13:53:d7:f6:ec:42:8a:b9:95:b8:46:38:f7:6d:73:
62:c9:be:1c:3f:a9:bd:fa:53:26:65:5e:7a:d7:3e:
7c:9e:55:69:42:ad:fc:4c:2d:bd:68:42:74:fd:ec:
c7:f8:26:33:3a:2a:2d:b3:d7:ff:d3:5d:1d:e6:9d:
b8:ef:31:4a:0b:e4:18:02:19:88:96:a1:30:4c:e6:
7b:91:90:5a:0e:5f:f1:64:90:bd:b9:c0:f6:bd:b0:
e9:a5:ed:b4:63:1c:da:df:4c:3b:14:8c:bc:28:4a:
be:3e:ca:a6:90:8a:9e:f9:73:05:dc:6a:2a:e6:fd:
85:c4:77:03:6e:35:a3:74:42:d6:27:76:49:14:cb:
a0:65:d6:8e:65:ad:10:c0:1d:c6:3e:d4:99:75:29:
4a:a1:b6:5a:85:56:d3:8e:a7:9d:a5:df:9f:c1:58:
d4:18:a1:49:c5:55:85:11:6d:8a:e5:77:be:fd:68:
a4:f0:f8:99:b6:f4:f4:87:1d:06:b9:3e:3a:a5:90:
f1:75:eb:5d:51:76:0e:a2:60:35:d3:04:26:0c:01:
61:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D5:2D:90:BA:95:B4:A0:3D:ED:DB:70:2B:97:D4:D9:F3:55:07:9B
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS203057.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.33.0/24
178.93.98.0/24
178.93.237.0/24
Signature Algorithm: sha256WithRSAEncryption
49:61:88:d4:1e:c7:5c:a0:03:66:f3:e5:04:cb:8d:0e:6c:1f:
45:f6:cc:5d:c8:9c:b5:da:e1:a2:59:bf:f4:d9:7c:77:0a:9c:
71:b4:f5:32:66:d8:87:f7:e2:41:b7:e2:6f:5e:46:1b:1f:0d:
b8:48:8e:9b:e1:5d:37:57:1a:b1:18:f1:fc:30:eb:e5:c3:98:
4c:8d:8d:dc:d2:1c:40:6d:88:ae:6a:4d:2a:4a:82:29:46:4f:
61:a8:71:a1:24:cd:34:77:13:1b:29:fb:e1:18:6f:f1:c5:d0:
e0:cb:e5:ad:6a:97:7c:11:a5:66:80:6b:0e:3d:e5:04:85:47:
43:e8:a7:69:e5:37:85:87:80:20:f8:93:86:d0:1b:02:6e:2c:
5a:53:f3:1d:18:37:4c:36:ae:9d:7e:7d:23:4d:87:5c:d1:bc:
a4:3c:04:4f:0d:34:d7:9f:1b:01:bb:aa:74:35:5a:f8:4f:42:
7e:74:34:91:48:13:89:e2:4e:25:64:97:50:b6:34:73:5e:db:
7d:e6:17:7e:d5:c7:b5:64:52:c6:dd:16:ab:50:b0:b3:60:02:
2c:b9:f7:c4:e9:6d:e9:d5:04:e2:c4:72:82:6d:90:d1:93:e8:
b0:33:3f:75:17:d2:b5:6b:75:d5:cf:49:d6:3c:af:07:50:9c:
80:24:cd:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:38:00 2026 by rpki-client