Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS203146.roa
File: AS203146.roa (raw, json)
Hash identifier: qZ3HVpcCEQaS6NF4AB5lf3Oy0JWhygdN31/3RU+a3nY=
Subject key identifier: B9:CE:85:AE:61:F8:6E:71:15:1E:C2:36:C6:A1:75:B4:F8:3A:10:C3
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 790E3F804485A8C8FB43DBD09763DEF1C080AA8D
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS203146.roa
Signing time: Sun 24 May 2026 02:27:16 +0000
ROA not before: Sun 24 May 2026 02:22:16 +0000
ROA not after: Sun 23 May 2027 02:27:16 +0000
asID: 203146
IP address blocks: 162.141.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 15:08:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:0e:3f:80:44:85:a8:c8:fb:43:db:d0:97:63:de:f1:c0:80:aa:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: May 24 02:22:16 2026 GMT
Not After : May 23 02:27:16 2027 GMT
Subject: CN=B9CE85AE61F86E71151EC236C6A175B4F83A10C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2b:5b:24:0b:87:46:f8:23:53:68:77:3b:0f:
2a:75:76:5a:9c:d4:fc:15:05:95:b8:96:32:57:e8:
75:d8:c8:37:59:b7:a2:33:a9:d9:94:3b:82:56:27:
10:cc:60:6c:70:41:19:1e:d8:5b:1b:b6:1a:a6:9a:
9f:ea:25:41:81:58:b6:b5:1e:e2:1a:be:c8:49:d5:
9d:80:43:36:4f:5f:3e:81:36:99:4f:51:a7:01:d2:
11:d9:d3:27:79:f1:83:96:d3:89:b2:a4:5a:a5:bb:
cb:7f:de:b5:a8:bc:a6:cf:06:cf:05:a4:1f:15:c2:
d5:95:ce:e4:3b:c5:1d:4e:b1:1a:5c:21:8c:75:6f:
fe:c5:fd:48:43:54:52:e8:4c:60:ad:8b:37:df:bd:
30:68:a9:10:c1:f4:92:8c:b7:88:5d:e4:f9:17:d5:
13:eb:45:db:3d:df:22:da:47:f4:06:f0:3f:c4:20:
d9:14:02:eb:42:c5:65:48:0e:29:eb:50:b7:44:31:
66:7d:60:12:78:0e:2c:9e:fc:b7:84:55:fb:2a:7a:
62:0d:3f:d7:21:95:2e:a7:f3:02:e2:8c:c6:61:51:
28:a1:6b:69:e4:2a:ee:55:5d:8f:1e:25:5b:72:a1:
f5:b2:41:62:d2:05:27:5a:4b:05:6b:b6:ed:c6:40:
f2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:CE:85:AE:61:F8:6E:71:15:1E:C2:36:C6:A1:75:B4:F8:3A:10:C3
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS203146.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.141.90.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:35:75:c1:84:f9:8a:8b:15:0b:01:e5:4d:60:7b:b6:c4:03:
c3:b6:3d:da:b2:a5:c7:37:e8:41:4e:f7:af:0c:12:12:0b:a6:
ee:d5:14:59:bf:f8:48:2c:be:71:a0:15:1c:42:2b:35:e0:d9:
7d:e6:e3:27:23:05:51:fc:e5:71:1a:64:2e:84:c4:43:c5:59:
f1:a5:5f:e9:f8:45:e0:bc:06:80:c1:05:b0:97:6f:96:e0:65:
8e:de:4a:60:85:7f:66:de:7a:98:b1:0a:60:bb:0b:ee:bb:03:
c3:ef:4f:e1:4c:98:1b:09:9a:c5:d4:a5:62:e0:61:28:cc:14:
ae:e2:25:82:85:4c:0f:9c:32:1b:28:84:be:9a:28:bf:76:87:
3a:a1:07:06:b2:25:53:2e:2b:d1:4d:c2:06:5d:72:45:aa:2a:
c7:48:f1:96:ef:e5:54:b1:25:7f:3d:1d:41:83:39:63:48:10:
3b:3e:67:eb:3c:75:d8:e1:ac:57:94:89:31:bb:78:17:da:3a:
f2:d9:11:bf:fd:1f:af:96:0b:36:26:55:34:7a:35:65:c7:cb:
3a:97:07:83:52:fa:0a:e2:25:96:e0:4d:d0:63:56:09:cb:b7:
40:a1:a0:59:13:d3:7e:c0:52:88:c1:29:b5:1a:78:87:58:71:
c3:13:0b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 01:15:22 2026 by rpki-client