Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS203534.roa
File: AS203534.roa (raw, json)
Hash identifier: qek3vVBZ/wZxWZNwBv6ghf09IvXOqNi/KPX9hYa+Vcc=
Subject key identifier: AD:44:E8:36:32:29:37:F5:AD:27:16:3B:20:F0:9E:FB:97:0A:D0:66
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 25E38B34CCBC81BA00DD8398F9B6EC46A40E251C
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS203534.roa
Signing time: Tue 29 Sep 2026 08:41:36 +0000
ROA not before: Tue 29 Sep 2026 08:36:36 +0000
ROA not after: Tue 28 Sep 2027 08:41:36 +0000
asID: 203534
IP address blocks: 2a14:7583:ef46::/48 maxlen: 56
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:e3:8b:34:cc:bc:81:ba:00:dd:83:98:f9:b6:ec:46:a4:0e:25:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Sep 29 08:36:36 2026 GMT
Not After : Sep 28 08:41:36 2027 GMT
Subject: CN=AD44E836322937F5AD27163B20F09EFB970AD066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:64:68:09:df:10:33:a5:26:cd:e7:ad:7b:c9:
cc:8d:2c:4d:8f:8f:4d:a1:6d:ad:a4:47:29:00:f1:
6a:0f:4a:40:b8:d4:fd:64:dd:84:9b:68:69:fd:02:
53:31:6f:60:32:71:ab:02:b6:5f:d9:98:c1:19:9f:
10:44:0e:64:2c:25:93:91:bb:ed:a2:bc:5c:a5:a0:
58:b0:da:05:c4:5b:7e:f5:96:a7:60:8c:0c:d9:eb:
e1:94:fd:27:33:87:c3:61:7e:c5:d4:a9:ea:6f:1e:
e9:ec:57:d6:04:03:7f:e6:0f:d8:ea:9e:20:7c:c7:
56:11:5f:e3:b9:88:82:1f:60:7b:19:6e:2f:33:d8:
2a:1c:38:a1:60:b1:8c:81:b7:54:73:a6:0c:d4:59:
e6:25:45:b9:bb:1d:56:71:18:c7:3f:34:9e:b7:dc:
ad:0a:34:97:b0:06:01:05:3a:c5:e8:2d:cd:ae:0e:
0d:6e:b0:48:41:55:ae:21:7e:3e:e8:20:57:d4:55:
a6:97:05:ee:fd:6b:5f:69:29:3f:75:93:cc:ae:03:
55:4a:2d:63:53:f9:fd:cb:3e:ab:bc:3f:6a:b5:34:
25:7e:6a:0a:41:c1:a2:03:64:a5:66:e9:d8:e8:d2:
64:69:c1:37:76:57:16:22:91:d4:9f:6f:52:fb:ee:
63:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:44:E8:36:32:29:37:F5:AD:27:16:3B:20:F0:9E:FB:97:0A:D0:66
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS203534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:ef46::/48
Signature Algorithm: sha256WithRSAEncryption
42:5d:74:ff:22:c4:f3:8d:3c:89:a4:f0:fb:f5:29:1d:e3:fa:
6a:a4:ef:a8:8b:76:f6:80:ed:80:55:7a:b7:d2:ca:4c:c7:3d:
91:41:04:0a:05:38:da:26:b6:6b:2d:65:69:e4:7e:3b:b2:1d:
0b:87:a1:d6:26:f9:2c:c6:0c:a5:a0:4d:87:fe:d0:10:e1:39:
3a:df:5b:fa:ac:a6:05:fd:82:0d:c6:2f:64:40:38:75:41:93:
8e:d2:fb:8b:dd:64:5b:5d:b8:bc:94:00:9e:6e:e1:c0:80:ba:
14:ed:df:11:e3:96:23:c6:89:4f:2c:ce:82:00:13:44:09:70:
38:cc:0d:d8:53:02:b2:17:91:96:08:42:c3:41:80:ed:73:48:
30:68:a4:63:b0:82:a5:ce:60:39:1f:06:93:20:7d:1e:d6:52:
48:0b:7f:cd:0b:3a:62:15:ac:5a:09:46:bb:09:ad:b4:13:0e:
53:1a:e3:d4:2f:2b:60:3d:a0:7e:00:dd:91:30:22:1f:7f:c6:
4f:94:d2:c9:d6:cc:5e:b7:10:96:ad:4b:7e:e4:10:a1:dd:ce:
14:61:2e:c0:6a:40:61:6c:12:a6:65:be:56:50:1d:c2:45:0e:
2f:28:7e:ff:a9:c2:a5:ef:e2:8f:47:07:e1:ad:fa:38:c3:50:
ac:04:06:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 04:51:03 2026 by rpki-client