Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS203771.roa
File: AS203771.roa (raw, json)
Hash identifier: sVxO0LGkdyZlPLrRae8xeO7WQFQgRtriGdP3hM4r1CU=
Subject key identifier: 84:70:3A:03:50:30:A6:A4:6E:EF:6C:5D:80:C0:58:FE:52:A7:FF:81
Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial: 145D73B4689951398C2986BC5F228AF54DDC4A08
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS203771.roa
Signing time: Wed 13 May 2026 09:52:23 +0000
ROA not before: Wed 13 May 2026 09:47:23 +0000
ROA not after: Wed 12 May 2027 09:52:23 +0000
asID: 203771
IP address blocks: 31.40.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:5d:73:b4:68:99:51:39:8c:29:86:bc:5f:22:8a:f5:4d:dc:4a:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Validity
Not Before: May 13 09:47:23 2026 GMT
Not After : May 12 09:52:23 2027 GMT
Subject: CN=84703A035030A6A46EEF6C5D80C058FE52A7FF81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:95:46:97:08:e5:8d:41:ee:ff:33:9a:cd:b2:
97:3b:56:3c:d3:e6:88:10:a6:a8:44:eb:a9:12:ed:
a6:bd:b9:c2:64:1a:32:76:e0:86:65:ca:42:3f:21:
be:ce:16:b9:26:14:0d:34:f2:58:c7:8e:e6:09:39:
2e:ca:52:eb:a1:c9:ce:1d:44:28:5c:5d:63:41:c1:
33:29:14:29:e3:42:1e:82:ba:35:99:31:9b:c5:20:
8a:24:36:4b:54:78:cf:f6:37:bf:a6:12:5a:2b:a9:
c6:44:78:de:3d:36:5f:99:62:af:d9:fa:ba:69:04:
8c:4f:a6:55:92:91:5c:3c:60:df:6e:cf:a0:7a:19:
4a:82:c2:8a:cf:58:39:41:c0:6a:ed:c6:9a:98:ef:
e3:8c:e4:55:72:ce:6e:c3:38:a5:25:95:90:b8:9b:
42:4c:5b:0a:df:f2:09:20:1f:ad:ef:c5:73:68:de:
38:04:2f:0e:2e:06:00:eb:64:3e:06:78:7c:09:7a:
d0:75:0f:2f:b4:bf:91:66:51:7f:18:44:e2:fc:83:
5f:27:fd:27:f8:4a:ed:55:4f:f3:01:84:83:02:bc:
d5:2c:2b:f7:e9:7d:ae:89:f3:14:41:c7:56:11:44:
7d:db:b5:a1:f8:d4:18:14:d2:af:38:68:d3:b2:7d:
1f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:70:3A:03:50:30:A6:A4:6E:EF:6C:5D:80:C0:58:FE:52:A7:FF:81
X509v3 Authority Key Identifier:
keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS203771.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.196.0/24
Signature Algorithm: sha256WithRSAEncryption
18:6f:f9:12:a7:59:48:75:90:98:18:99:0d:b8:c2:b2:d0:66:
c2:6e:8a:c4:30:7b:47:04:7e:31:60:41:7c:4a:40:c0:76:cc:
e3:6f:b9:14:d3:9c:95:ff:52:60:ae:c4:0c:58:92:1a:dd:8e:
09:07:18:fb:b4:a6:9d:ff:d2:96:1d:e7:18:01:74:8c:af:9c:
03:03:88:0e:af:ac:22:b5:8c:f9:5c:e2:f8:9a:b9:51:c9:37:
14:99:40:dd:8f:23:a3:27:aa:48:ab:bf:61:5e:59:20:ef:51:
39:fe:a6:37:3d:d1:e2:d8:42:1e:be:8f:b4:f5:b4:a4:28:1a:
58:c4:af:39:cb:2c:9e:2c:12:40:5e:08:49:0a:f7:79:e0:44:
d3:fe:ff:89:97:39:73:c6:c5:ff:92:15:c3:4f:93:a3:b7:a6:
62:d8:b3:ad:fd:96:f9:f3:7f:38:d6:4d:9b:26:e9:4f:a5:3e:
7f:08:84:3c:73:9e:6e:68:ba:9f:89:9e:1b:3a:bb:a8:fc:ab:
9f:19:9c:24:e8:28:fb:46:6b:d8:d3:1b:ce:4c:d1:01:2b:26:
5e:8b:9f:f7:ac:7f:87:b6:bb:fb:5e:58:aa:c2:81:52:51:89:
17:21:77:73:fa:1d:3c:b1:f9:16:bc:11:d9:e1:5e:b7:a9:9b:
b5:04:2c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:25:16 2026 by rpki-client