Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203728.roa
File: AS203728.roa (raw, json)
Hash identifier: FpdiFDige5w4to08q2COnhDqo6hQU4MR0jL67QTONQQ=
Subject key identifier: EA:FA:EF:C6:1D:A4:4F:67:59:B2:DB:AB:B6:24:DA:56:56:0A:E9:0A
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 2DD6734B948D2833A8C733D8E436AF1FA95F3F67
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203728.roa
Signing time: Mon 14 Jul 2025 18:42:13 +0000
ROA not before: Mon 14 Jul 2025 18:37:13 +0000
ROA not after: Mon 13 Jul 2026 18:42:13 +0000
asID: 203728
IP address blocks: 82.21.8.0/24 maxlen: 24
82.25.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:56:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:d6:73:4b:94:8d:28:33:a8:c7:33:d8:e4:36:af:1f:a9:5f:3f:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 14 18:37:13 2025 GMT
Not After : Jul 13 18:42:13 2026 GMT
Subject: CN=EAFAEFC61DA44F6759B2DBABB624DA56560AE90A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:93:48:fc:17:6f:a9:2f:c8:d2:0e:fd:34:90:
00:2c:58:3b:b0:29:fd:0c:11:24:48:c8:a5:fa:df:
3d:90:5d:c8:0c:5b:7a:3b:cc:70:76:f5:3d:45:3c:
19:b0:99:5a:c6:b0:66:f5:19:1b:b8:e7:7b:63:d0:
e4:d9:a3:27:4a:f3:b4:4a:3c:70:ce:5b:ab:48:51:
f8:e4:b3:07:ce:89:75:1b:39:41:d2:75:63:6d:0b:
fa:b8:24:f1:33:ce:63:85:33:59:31:f9:e5:8f:ea:
77:f8:20:21:67:22:bc:25:8a:87:48:44:f9:81:11:
6a:76:89:61:49:f0:fd:6d:ec:2c:9b:9a:5c:3d:f7:
68:c5:7e:b0:6a:b1:c4:35:0a:f3:28:b9:ff:07:83:
7a:24:60:0d:59:28:68:6b:ce:c7:37:3d:b0:27:ac:
3f:6d:6e:d6:37:f1:87:ce:89:11:6d:36:4d:90:3f:
8b:2e:9b:ab:82:cb:86:31:b1:14:af:6f:28:1c:76:
db:d0:a9:e2:27:4d:5d:c3:2c:23:8d:f7:6b:32:7b:
79:ed:2a:83:ae:24:01:f0:2f:89:ad:3e:34:cf:2c:
25:9b:73:30:4a:ad:ce:e3:88:b0:9b:f9:7c:90:eb:
60:87:f8:f1:ca:27:15:f6:5b:ce:86:a3:4d:1b:44:
27:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:FA:EF:C6:1D:A4:4F:67:59:B2:DB:AB:B6:24:DA:56:56:0A:E9:0A
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203728.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.8.0/24
82.25.45.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:5e:4b:b1:50:17:35:fb:33:b6:20:84:a2:cf:6b:f5:10:4d:
96:ff:7b:ab:a1:15:07:c3:1f:34:37:43:e4:3d:3b:85:cd:21:
6b:b4:d6:8b:d2:11:3f:85:98:f3:53:95:05:a0:28:22:bf:a5:
94:67:52:77:60:d9:71:95:cc:86:f5:99:3d:43:da:1a:d1:65:
d8:f2:f3:4c:ac:42:56:be:31:ca:ef:e1:f0:7c:ed:9b:21:06:
9f:b4:4c:2c:06:d1:dc:77:8b:6c:98:54:e2:a6:98:a3:c7:85:
14:e6:51:6d:0c:e9:f1:be:a6:8d:28:b4:ac:c0:ee:53:6d:9b:
3a:32:40:25:30:38:b8:a8:fc:d2:18:9d:d2:18:db:de:47:c2:
3a:3d:ce:4d:31:1a:83:3f:e4:5f:b7:42:eb:4f:b1:e7:ef:ad:
d6:46:e4:fa:fe:62:1e:a5:d4:c4:d5:1a:d7:da:84:94:28:4c:
92:0b:c2:2e:b9:62:06:0a:09:66:ae:23:27:56:00:a3:2e:3f:
10:a7:78:fd:c3:a7:74:4b:69:2a:eb:06:20:60:f9:ef:b4:27:
1f:13:83:1c:6d:d3:4d:1e:18:6b:a4:68:8f:76:26:f4:18:ef:
9c:fb:28:b1:ef:6c:83:75:60:d1:32:58:ae:f3:15:f4:29:56:
a4:c1:5a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:52:27 2025 by rpki-client