Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS203054.roa
File: AS203054.roa (raw, json)
Hash identifier: qCR5hcDA8rviEUmKV2FClxskw3ALMn63SR49c/Q2Hcc=
Subject key identifier: 29:D7:72:A5:6D:79:08:0C:41:C1:34:C8:47:31:06:3D:61:7C:59:7A
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 5740F4D6629C7FDB0E18174C6E9D89134B05F72C
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS203054.roa
Signing time: Sun 24 May 2026 07:39:18 +0000
ROA not before: Sun 24 May 2026 07:34:18 +0000
ROA not after: Sun 23 May 2027 07:39:18 +0000
asID: 203054
IP address blocks: 82.139.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 01:27:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:40:f4:d6:62:9c:7f:db:0e:18:17:4c:6e:9d:89:13:4b:05:f7:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: May 24 07:34:18 2026 GMT
Not After : May 23 07:39:18 2027 GMT
Subject: CN=29D772A56D79080C41C134C84731063D617C597A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:93:b7:cc:92:61:17:74:2d:b9:03:51:dd:0b:
b2:bf:d1:67:94:91:ff:ca:0f:7b:5f:58:e4:87:36:
66:85:28:9a:8c:ee:b9:aa:cb:fd:45:e4:f0:8c:f7:
43:6f:75:43:88:18:2b:74:ad:1b:15:b9:5d:33:38:
e8:fc:3a:a8:04:6b:6d:7e:14:94:81:79:75:5a:8d:
d6:00:74:e2:57:e9:ef:9b:a0:6e:73:fc:4b:23:11:
53:e0:f7:66:f1:73:e2:de:d4:ac:23:66:00:63:e8:
2e:1b:7f:88:da:a5:c0:9d:b6:c8:4a:64:10:24:f3:
74:cf:24:14:38:37:39:12:27:03:3f:ee:a3:af:71:
00:25:4c:34:c4:eb:6a:a8:ab:1a:fe:3b:66:ff:e3:
a7:9d:60:88:d2:e7:e8:ea:84:5e:76:9c:9f:1e:81:
0e:3d:ce:bf:0e:95:43:f4:d6:fa:01:c0:57:eb:1f:
16:f4:92:a8:d4:eb:1f:97:36:bf:85:ed:55:c6:b7:
1d:3b:cb:c3:08:3d:67:76:f1:80:69:8b:1a:4a:70:
85:c7:bd:ee:7f:0e:1a:16:b5:bc:83:f8:9c:4c:13:
71:c5:31:96:13:95:13:3f:b6:f7:21:50:ba:30:9f:
c4:02:34:d9:50:bf:49:85:0d:38:57:0f:c3:85:ed:
60:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D7:72:A5:6D:79:08:0C:41:C1:34:C8:47:31:06:3D:61:7C:59:7A
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS203054.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.139.245.0/24
Signature Algorithm: sha256WithRSAEncryption
18:ac:2d:73:bd:ee:90:3f:ae:90:7e:bd:a8:7b:4b:e1:6a:4d:
84:82:65:c2:47:7c:66:fd:fa:bf:a3:c6:c6:c5:28:fa:56:8b:
f3:32:10:96:ec:d7:d6:fc:fb:0c:fd:82:a9:e5:6c:e8:31:90:
f1:39:f9:57:52:1d:9f:1f:b9:37:b7:5f:34:76:b8:1e:d0:ca:
46:52:11:ba:77:16:64:da:c7:55:0c:a2:82:5c:96:0e:17:5b:
ff:34:45:9b:01:d7:98:5d:93:61:cd:25:89:6f:0e:a2:80:ed:
7f:39:fb:46:f8:fc:eb:14:b2:6d:0d:2f:7a:4c:a0:09:98:88:
a6:3b:fe:d4:51:8f:9f:1f:4f:b3:8f:24:2f:41:90:ae:85:0d:
11:ab:ca:90:61:f4:ce:eb:b4:bb:42:53:44:c7:49:1c:16:b3:
0a:45:2a:59:d3:52:ce:6d:3b:5c:44:2d:15:7a:2c:d6:4b:d3:
03:1b:1c:b5:80:f9:71:e4:04:f1:c4:ff:67:58:e0:98:51:0b:
17:bc:b0:4d:57:1a:7e:70:53:39:b7:2d:cb:bb:74:64:e9:33:
11:93:d8:1c:56:cf:ee:09:49:84:47:71:9b:89:a5:cf:fb:89:
62:0e:af:91:84:e3:6e:10:8e:f5:d6:e3:01:11:87:c3:dd:59:
a0:51:9c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:12:44 2026 by rpki-client