Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS203048.roa
File: AS203048.roa (raw, json)
Hash identifier: VtUgu0X1+eJZzae0Gjy9y5alFbo04P3U51k8LHmD4BM=
Subject key identifier: 21:BB:C2:EE:7C:85:3F:5A:CD:78:51:BB:E0:03:6F:B9:B9:30:2F:CE
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 7AEC2246F2BB944F369FB685F624187D6A91F8FB
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS203048.roa
Signing time: Wed 01 Apr 2026 14:51:57 +0000
ROA not before: Wed 01 Apr 2026 14:46:57 +0000
ROA not after: Wed 31 Mar 2027 14:51:57 +0000
asID: 203048
IP address blocks: 45.87.184.0/24 maxlen: 24
191.96.99.0/24 maxlen: 24
191.96.136.0/24 maxlen: 24
191.101.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Apr 2026 13:42:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:ec:22:46:f2:bb:94:4f:36:9f:b6:85:f6:24:18:7d:6a:91:f8:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Apr 1 14:46:57 2026 GMT
Not After : Mar 31 14:51:57 2027 GMT
Subject: CN=21BBC2EE7C853F5ACD7851BBE0036FB9B9302FCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f8:19:3d:24:63:96:8a:f9:65:22:d8:3d:e4:
cd:9f:d4:98:6d:36:ee:a9:a1:0f:ff:e8:56:b1:b4:
3f:0c:fd:6c:05:0e:86:f2:a9:e0:ec:c2:71:a2:c2:
4b:85:38:a4:ce:2d:de:69:bd:72:c9:2f:c7:96:3a:
02:b1:8a:1f:52:3f:aa:f5:cb:c9:18:8b:2a:24:c2:
be:46:5e:94:ff:bb:79:7a:0f:f0:0b:c6:76:c7:b2:
22:2e:99:db:f1:55:c1:fe:49:cd:0f:5f:4a:86:75:
61:65:e4:24:b1:cd:9e:b7:fb:76:4c:56:41:d7:35:
e8:76:da:f0:6a:aa:db:7e:a4:d2:a7:4e:91:72:a7:
26:31:16:b1:69:14:f0:19:fd:b1:c6:24:9e:98:8a:
bc:b5:99:01:4b:a9:28:b6:c4:4b:de:ef:9e:7a:ab:
a6:d0:fb:18:20:3b:3c:d3:e1:b4:c9:40:46:b9:a3:
fc:dd:8c:d0:f7:c7:a1:cc:8c:91:5e:5c:0a:30:34:
80:f4:72:18:e6:67:fe:c3:4b:d7:32:c7:0c:0c:74:
b3:b6:fe:f3:4d:7b:bb:26:3e:7c:a4:ed:af:3a:6d:
86:c3:ea:d8:c2:6f:04:06:7f:5a:0d:d3:9e:4a:8d:
33:c0:21:8c:8b:04:82:70:a0:fb:bc:a2:ca:a1:39:
f2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:BB:C2:EE:7C:85:3F:5A:CD:78:51:BB:E0:03:6F:B9:B9:30:2F:CE
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS203048.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.184.0/24
191.96.99.0/24
191.96.136.0/24
191.101.89.0/24
Signature Algorithm: sha256WithRSAEncryption
78:d7:dc:59:09:b7:f5:ab:b7:69:2b:39:39:d8:9c:da:cc:79:
10:a6:f4:da:e8:31:a1:c5:5c:b6:b5:3b:49:dc:dc:84:5e:77:
64:94:5a:a9:36:70:ae:9c:d1:d5:1e:52:05:60:0d:ad:9c:ce:
c7:cf:a0:3f:f1:7f:4f:39:55:45:93:f8:98:4e:e4:31:2a:5f:
97:e3:a3:76:3a:f6:a6:c5:01:90:e1:53:6e:50:0b:3b:20:b9:
b3:7a:24:a7:9c:dc:28:e2:67:34:ae:27:6c:f9:25:8e:b8:53:
bb:f1:0c:74:72:04:4f:60:2e:40:c8:43:5b:f3:27:ea:b6:34:
9e:c4:a9:41:72:f4:92:aa:2c:b3:06:d1:43:be:6e:5f:30:f7:
23:bc:20:ea:4d:4e:04:ad:86:ad:3d:8b:ad:d6:1e:51:5e:10:
e6:df:ac:cc:1f:c5:9a:6c:7e:55:36:d7:67:0e:e8:6e:33:48:
9e:23:07:67:ad:93:c0:c4:90:c0:6d:9e:ca:f2:12:3e:ba:ba:
7f:a2:89:53:a1:1e:6b:22:c6:5e:b9:eb:18:84:f7:ca:7e:6f:
cc:46:5c:26:c5:cf:21:71:a6:77:df:10:60:d1:75:5a:a9:26:
ce:3e:10:12:1e:24:f4:d3:d4:c3:5b:72:d6:0c:79:3b:8b:37:
04:01:34:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 01:28:32 2026 by rpki-client