Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS203048.roa
File: AS203048.roa (raw, json)
Hash identifier: gYakzwI4nKzLt9LJ+XxztLPyPE+vI7ba0MsS/Z6w17A=
Subject key identifier: F9:FB:43:C1:76:AF:F2:E4:2E:8A:A8:37:CB:75:84:66:DF:3B:64:20
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 029500392D8791D17E66C1E434536A87A6AE04BD
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS203048.roa
Signing time: Sun 19 Apr 2026 06:58:45 +0000
ROA not before: Sun 19 Apr 2026 06:53:45 +0000
ROA not after: Sun 18 Apr 2027 06:58:45 +0000
asID: 203048
IP address blocks: 143.14.150.0/24 maxlen: 24
162.141.48.0/24 maxlen: 24
162.141.107.0/24 maxlen: 24
168.222.42.0/24 maxlen: 24
168.222.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 13:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:95:00:39:2d:87:91:d1:7e:66:c1:e4:34:53:6a:87:a6:ae:04:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 19 06:53:45 2026 GMT
Not After : Apr 18 06:58:45 2027 GMT
Subject: CN=F9FB43C176AFF2E42E8AA837CB758466DF3B6420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7c:f0:68:c4:ea:81:26:b7:58:5c:c3:9a:ef:
0f:38:6b:51:3c:e4:ef:aa:4a:dc:42:ac:06:02:2b:
4f:50:4b:2f:96:8b:d2:a4:59:09:84:8b:f3:42:91:
ad:fa:90:64:2f:6d:20:c2:64:91:1f:85:ab:95:04:
55:31:7d:80:fe:90:05:b3:8d:ca:3d:84:33:5d:17:
74:80:e2:b0:75:68:ef:79:e9:29:d2:c5:b2:7f:06:
24:18:4f:dc:5b:2a:e3:00:77:79:97:73:38:3b:1c:
51:ae:62:d1:9d:08:e9:0a:8e:a0:78:fc:27:ce:94:
d6:af:cd:02:38:e2:1e:22:16:8d:f1:a6:b5:a0:f3:
5f:5b:28:91:2b:f8:1e:ff:e1:55:6b:81:06:54:ec:
35:97:46:bc:74:b0:9b:52:85:c9:0e:99:52:77:bf:
27:90:b2:b5:0d:55:b5:41:f7:8b:d6:00:b7:7e:cb:
64:03:1f:35:e7:ab:82:77:4a:ee:b4:f7:53:6c:3a:
1d:0a:cc:44:58:f7:83:f8:b6:df:09:d4:62:98:aa:
76:8e:3f:9d:00:5c:3a:3b:fa:b6:d7:e2:0f:9b:61:
8b:65:48:1c:d8:10:06:86:d1:4c:d4:d9:c4:d2:04:
83:b1:2a:77:c3:80:68:1d:11:7e:59:e0:2f:ab:9f:
c6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:FB:43:C1:76:AF:F2:E4:2E:8A:A8:37:CB:75:84:66:DF:3B:64:20
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS203048.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.150.0/24
162.141.48.0/24
162.141.107.0/24
168.222.42.0/24
168.222.67.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:47:6a:9d:c6:5b:8a:f3:62:c1:90:5d:08:ae:9e:af:d4:de:
e6:41:6a:30:2f:c7:90:4a:59:b7:fe:41:07:16:8e:ed:0e:18:
0a:5c:a3:62:5b:37:22:d0:97:69:f3:ef:5f:51:ce:0c:28:92:
3b:43:1f:8c:e7:b3:84:53:ef:a1:cd:5a:90:7c:2d:b9:96:9f:
a5:46:34:03:1a:5c:c5:72:91:80:d9:9c:88:49:fe:37:f6:26:
3d:25:7c:2e:96:7a:f1:42:70:9c:7e:16:b9:bb:d1:b8:6c:00:
7d:5d:59:6d:bc:9e:97:f2:5e:79:d4:49:68:97:1f:7b:5b:25:
aa:88:3a:d4:3e:65:f4:b5:c9:cb:f2:9a:54:47:52:3f:0e:5a:
a2:81:2f:3c:b7:1a:ac:86:2a:72:a6:16:7f:1f:9d:3b:f6:5b:
65:cc:d9:77:b3:5d:f6:4d:48:b0:97:68:b7:13:de:5a:79:d1:
5e:7c:f4:f4:ff:62:63:ef:9e:5c:70:99:ea:26:a9:9a:0d:2b:
47:dc:29:16:76:37:78:4f:6e:8e:10:b5:db:bf:0f:af:da:15:
92:b5:a8:6a:ff:87:b0:a4:86:38:44:d7:f0:24:8e:b3:38:72:
95:93:70:ae:77:17:2f:c6:e9:37:82:49:76:09:4e:23:f0:59:
db:2e:fc:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 23:01:38 2026 by rpki-client