Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203910.roa
File: AS203910.roa (raw, json)
Hash identifier: BGtegFh7yLRskf3AjNS8zloZFqqaL2JiM2QQiCGMvjQ=
Subject key identifier: AB:45:2A:E2:CA:5B:E2:8D:9A:3D:22:D0:CE:BA:97:54:2A:8B:55:CB
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1A5061FB8849AD44573A367957E60AD672A6AF7E
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203910.roa
Signing time: Tue 13 Oct 2026 19:49:36 +0000
ROA not before: Tue 13 Oct 2026 19:44:36 +0000
ROA not after: Tue 12 Oct 2027 19:49:36 +0000
asID: 203910
IP address blocks: 82.25.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:50:61:fb:88:49:ad:44:57:3a:36:79:57:e6:0a:d6:72:a6:af:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 13 19:44:36 2026 GMT
Not After : Oct 12 19:49:36 2027 GMT
Subject: CN=AB452AE2CA5BE28D9A3D22D0CEBA97542A8B55CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ae:f5:b1:4f:d6:e2:af:75:62:3b:2e:0a:bf:
50:01:fc:ee:39:59:be:c1:6c:40:22:b6:29:e9:7d:
b1:a0:25:32:e1:75:71:fb:03:35:c7:83:6a:61:72:
b3:b3:12:c1:41:b6:83:b0:7d:f5:35:7a:c7:10:04:
bd:68:e2:32:29:69:80:22:7d:30:55:09:b8:0b:9a:
4f:79:1a:6f:33:7d:2e:c6:dd:99:46:22:90:c2:7c:
ee:51:90:28:94:b8:66:7b:de:64:92:a5:1c:0c:9b:
2c:91:17:f8:06:e8:d6:1b:77:3f:3e:a9:8d:66:5a:
a5:ad:89:1d:1c:2a:a0:ff:8a:f2:e1:63:28:a2:bc:
8a:5c:49:4f:02:ee:80:6d:f1:d8:c2:23:7e:a4:df:
5e:7a:9d:26:97:74:9f:79:26:0e:c0:bc:9e:8a:d6:
49:30:30:40:e9:0c:36:73:ff:00:3a:5d:3e:fe:d8:
27:97:eb:cc:41:2f:3b:44:36:6c:95:7a:cc:d3:50:
c1:7f:07:44:64:d3:60:7f:6a:a0:49:bd:2a:4e:e6:
be:4a:1f:3c:ea:a1:2b:d4:88:82:3f:31:6a:89:a3:
a2:a2:6b:27:64:81:ff:d7:c8:05:2b:8b:5c:63:17:
d4:a7:3c:60:51:d3:df:97:e0:71:b6:40:2d:4f:67:
f8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:45:2A:E2:CA:5B:E2:8D:9A:3D:22:D0:CE:BA:97:54:2A:8B:55:CB
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203910.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.25.57.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:59:c7:99:26:82:74:e7:42:ea:4a:4f:43:a7:a3:fc:46:46:
18:29:56:e2:14:13:57:b8:89:40:04:de:fa:56:d7:ee:06:d9:
7d:11:a0:4a:c3:00:b5:a3:a0:12:59:1f:4b:d8:95:07:9f:b9:
5a:72:87:3e:38:c5:f6:c3:e6:c5:2f:d6:f2:d4:69:ce:f4:99:
72:8e:99:6b:f9:de:fc:fe:37:ba:83:a1:66:ab:27:07:75:26:
e4:f2:ce:e8:e3:23:2a:d7:9e:33:79:9a:ba:a5:70:99:52:59:
7f:45:37:b3:73:92:2d:e9:ce:d0:e8:f5:91:db:80:e4:ef:21:
0e:2b:eb:14:04:90:82:8a:0e:de:62:6c:a6:9c:50:d4:3a:10:
34:80:7a:b9:f1:26:ea:f1:b9:6d:58:27:55:ea:ee:14:6a:6f:
3f:75:86:db:a6:64:80:39:cc:de:08:a1:4b:09:7f:00:1e:4c:
75:5c:cc:ef:d2:0f:04:0d:94:f8:6f:77:cb:27:57:bb:eb:9b:
63:71:fa:f3:bc:af:72:6d:57:a6:48:a8:fd:02:0a:62:82:19:
4b:01:e4:4d:ae:07:6f:bc:21:13:6e:af:46:07:26:78:6d:fe:
6f:4e:b0:f9:6b:b4:cc:14:45:36:c9:99:6e:3b:38:8d:ef:cd:
80:4c:85:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 20:17:56 2026 by rpki-client