Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS203545.roa
File: AS203545.roa (raw, json)
Hash identifier: TcSAi496LG1Qk2D2C/6B9OuhAXd9Stj7bkgQcJ/qZ/k=
Subject key identifier: D5:28:3B:01:14:9E:A4:84:43:3A:61:AA:8C:D7:2B:24:B4:49:32:18
Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial: 4337A838C0F933C242D09B8F9BE9E2A7BD1A9C92
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS203545.roa
Signing time: Wed 13 May 2026 09:52:27 +0000
ROA not before: Wed 13 May 2026 09:47:27 +0000
ROA not after: Wed 12 May 2027 09:52:27 +0000
asID: 203545
IP address blocks: 141.98.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:37:a8:38:c0:f9:33:c2:42:d0:9b:8f:9b:e9:e2:a7:bd:1a:9c:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Validity
Not Before: May 13 09:47:27 2026 GMT
Not After : May 12 09:52:27 2027 GMT
Subject: CN=D5283B01149EA484433A61AA8CD72B24B4493218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8a:1a:f0:c5:05:5a:0a:e2:a7:1d:0b:98:36:
9f:cf:88:83:6b:56:29:ee:30:a4:62:e9:08:cd:d1:
35:f1:2e:71:09:90:ee:ec:7a:d4:e3:b4:2f:48:c9:
73:0f:59:56:24:57:c6:e3:54:9d:64:6f:14:46:1f:
d3:38:68:a8:83:fd:80:84:a3:72:a6:a2:ad:e8:24:
05:5e:17:d7:37:46:42:f7:fa:04:4d:0c:03:9d:48:
32:31:a2:f0:40:79:a9:ae:02:47:4f:f1:ac:a8:2d:
d6:d4:cf:5a:8d:00:ba:4c:d5:67:61:59:65:52:b3:
43:c1:80:1e:e8:32:70:2c:27:5a:85:9d:d8:c3:f2:
3a:6c:10:b8:1d:d9:1f:68:f3:33:74:d3:3a:0d:c9:
21:e5:07:a7:12:89:ad:51:e1:4a:de:21:c4:6d:d5:
96:50:4c:f3:4b:ca:d7:98:45:32:c1:c3:23:a1:2f:
b8:cd:d5:1b:c7:83:75:15:48:b1:00:ed:05:2e:80:
72:19:b2:29:76:c6:89:ec:0f:7f:78:da:f4:9a:97:
65:ec:e8:60:7d:af:7c:40:b5:f0:22:a6:47:52:4d:
b7:43:e7:26:61:a0:22:ed:29:9c:f6:a4:ce:f8:3c:
0c:e4:9f:4f:e1:c5:b3:e8:ab:6b:38:87:fe:79:10:
00:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:28:3B:01:14:9E:A4:84:43:3A:61:AA:8C:D7:2B:24:B4:49:32:18
X509v3 Authority Key Identifier:
keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS203545.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.50.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:e9:21:e5:c4:f3:cb:1d:45:9c:16:13:fd:e2:05:22:4b:f6:
01:93:11:aa:76:ac:2b:39:b2:39:28:7f:c4:58:0a:1b:f4:e9:
a9:95:7d:35:ba:01:ad:20:ec:ba:8c:7a:44:65:ba:93:72:97:
c4:87:3c:9a:91:7b:a2:25:2a:ed:d2:f2:5f:71:49:c3:10:c6:
8e:83:94:dc:12:72:ed:04:b4:39:21:a2:99:2c:b4:ba:19:25:
51:e7:b4:d2:7b:d2:49:fa:28:fa:54:0c:9d:79:50:f9:7f:43:
03:89:37:46:cc:e2:f1:66:24:ed:fb:41:73:ef:15:b5:f8:37:
ea:1f:0c:a6:01:01:83:8e:88:24:e1:69:24:50:19:82:8e:45:
b6:f1:d3:db:35:e9:31:fe:78:df:c8:88:1a:c2:36:6e:75:4e:
ff:51:9c:e0:b1:58:b5:58:e1:77:97:32:73:e8:7f:24:5b:bb:
2c:16:e8:9b:ae:60:20:b2:46:d7:b4:31:9f:40:23:78:75:12:
ed:21:dc:ec:01:6c:bb:2f:76:29:d8:c7:4b:87:8c:9a:d7:36:
13:cb:60:4f:8b:75:68:3f:6c:20:27:07:03:9d:a6:7c:08:42:
e3:dd:ad:eb:b3:f8:f4:dc:41:14:ba:d6:99:43:ec:3d:b1:75:
3c:c6:92:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:25:23 2026 by rpki-client