Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS203380.roa
File: AS203380.roa (raw, json)
Hash identifier: O6moLP1JhBJ6Mj2lsG8c+AOnQs1p0048TbwxYLS6wMU=
Subject key identifier: 94:99:8B:6A:16:20:20:69:EF:3A:38:BC:A3:86:7A:82:2A:F8:F6:16
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 35E9BDC5A7A87212475EB9C5660E0E1D4909974E
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS203380.roa
Signing time: Mon 10 Aug 2026 20:32:06 +0000
ROA not before: Mon 10 Aug 2026 20:27:06 +0000
ROA not after: Mon 09 Aug 2027 20:32:06 +0000
asID: 203380
IP address blocks: 140.233.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 14:04:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:e9:bd:c5:a7:a8:72:12:47:5e:b9:c5:66:0e:0e:1d:49:09:97:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 10 20:27:06 2026 GMT
Not After : Aug 9 20:32:06 2027 GMT
Subject: CN=94998B6A16202069EF3A38BCA3867A822AF8F616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:73:5f:f3:2e:ff:55:54:0e:6f:56:28:60:bc:
ea:97:23:e5:83:22:49:66:43:c0:16:d5:1c:df:ba:
27:de:4e:50:f5:41:1c:09:1c:ce:c7:fd:c5:1e:24:
3b:a0:f3:ef:b8:0b:8c:dd:3d:a7:b0:b8:0f:66:0d:
16:6a:ad:ba:b8:04:73:54:a4:87:56:fe:45:af:2b:
f3:5f:3c:13:f3:ba:99:2b:fc:9d:bc:69:ef:54:2b:
a3:b0:2d:9c:cc:72:66:e2:0c:97:9d:5d:01:ae:ad:
bc:a3:04:a4:e9:a8:bb:af:f2:2a:22:ef:d5:ee:f0:
dc:57:41:29:cb:3c:53:82:69:f9:1b:2f:dd:b7:3c:
50:f8:bf:b7:33:a6:e4:4c:7c:f8:a7:4d:8b:5c:53:
67:00:d1:35:61:1d:ed:8e:f1:3a:46:9c:f5:2d:9a:
94:1d:44:df:aa:13:d8:aa:d5:99:db:c3:46:75:6d:
d8:f5:61:3a:27:4f:a2:70:0f:24:b0:48:20:39:28:
9d:6e:6d:41:0f:7e:25:01:7a:b4:1b:98:c1:de:27:
9c:13:9c:1a:65:55:77:4e:89:63:85:22:87:81:e1:
d3:37:b7:32:0b:39:9f:b2:55:eb:4f:49:8d:8d:6c:
d2:9e:d3:60:df:60:37:21:20:5a:7c:b3:a6:df:27:
eb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:99:8B:6A:16:20:20:69:EF:3A:38:BC:A3:86:7A:82:2A:F8:F6:16
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS203380.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.181.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:3e:89:6b:30:df:6d:0a:f4:15:53:72:9c:64:d4:9d:a1:64:
d6:ef:4c:bf:f5:51:06:5f:85:d4:77:2a:20:5b:f7:93:90:e5:
19:4a:b1:25:fc:f1:3d:8a:e1:6f:55:ad:ab:ae:db:57:bf:7f:
39:a8:03:9c:3b:11:da:6f:e0:5f:b1:f4:57:c7:0f:25:13:46:
f3:12:d7:a6:51:ae:a1:7e:99:ad:39:b2:53:62:6b:6f:c0:bf:
2a:8c:0c:44:9c:e0:e7:16:ed:5c:9d:84:0a:12:84:98:da:cc:
f5:d8:19:3e:1c:eb:83:24:b7:e5:1d:db:b9:ec:97:e1:a1:0b:
f7:3c:57:82:77:ef:1f:af:4f:34:df:89:60:39:52:10:de:7b:
6e:72:db:c3:0a:da:93:72:7c:2b:b3:98:c6:f1:3a:2c:50:bb:
26:85:30:16:62:78:bf:bc:6c:24:90:fd:9d:43:36:4c:2c:98:
dd:d5:c1:64:50:a7:02:bf:9a:13:5d:cb:16:3c:f1:e0:75:55:
20:b0:fa:88:60:b0:e4:77:e2:df:d8:0b:30:73:b1:ad:63:72:
ae:52:96:fa:d6:e6:98:fa:02:3d:5d:01:ae:13:9f:69:8c:5e:
68:83:62:33:07:5c:01:55:01:49:b0:84:58:16:12:03:f7:6f:
d2:b8:88:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 18:39:08 2026 by rpki-client