Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203061.roa
File: AS203061.roa (raw, json)
Hash identifier: Nc9PDrmIEJdxBL0EVhPhFGrN56Jtqe5Ju2GtBOO2Jss=
Subject key identifier: EE:1D:8A:B8:20:E1:71:57:08:6D:BE:CD:1F:ED:68:2C:5D:CE:9A:EB
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0A5B35A42F8110769102F10BA6B03E025CD82BC2
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203061.roa
Signing time: Thu 13 Aug 2026 13:49:28 +0000
ROA not before: Thu 13 Aug 2026 13:44:28 +0000
ROA not after: Thu 12 Aug 2027 13:49:28 +0000
asID: 203061
IP address blocks: 82.27.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:5b:35:a4:2f:81:10:76:91:02:f1:0b:a6:b0:3e:02:5c:d8:2b:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 13 13:44:28 2026 GMT
Not After : Aug 12 13:49:28 2027 GMT
Subject: CN=EE1D8AB820E17157086DBECD1FED682C5DCE9AEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b5:a6:c7:7a:84:a6:4c:18:f2:87:89:aa:92:
77:69:e0:af:2b:e7:47:2f:60:e9:7b:48:ee:58:25:
12:13:2f:c2:fd:1c:42:79:22:e8:4f:7e:16:35:72:
52:ed:6a:12:44:7d:7f:6d:3c:66:99:53:ba:d8:dd:
06:34:81:7d:15:5c:8d:f8:b3:6d:95:d7:db:89:86:
01:04:e7:9f:a5:65:41:b8:d7:3b:4b:69:3f:39:a7:
65:05:5c:79:01:ad:b1:43:df:2b:4c:6b:39:cb:7a:
d9:cb:66:44:e6:ff:ff:91:8d:7f:2b:eb:69:7e:db:
0a:48:c6:a8:bb:06:d1:17:ca:16:6e:d8:df:84:42:
d7:4a:41:0c:56:b8:76:a7:f6:53:2e:dc:f2:95:f7:
97:c8:4f:bd:60:4a:82:ae:77:44:63:1c:36:bd:9b:
8c:9c:97:18:d6:81:90:20:a9:61:29:dd:50:07:06:
56:83:32:63:5b:c2:f9:16:26:f1:41:b0:41:b5:81:
75:87:ff:d9:e9:d0:81:df:6b:9e:57:f2:17:b4:40:
a0:3e:77:d8:50:99:69:2a:46:d3:53:42:0b:72:6c:
61:23:ba:09:4c:52:da:2f:4b:90:d2:96:a7:08:e7:
4d:22:8e:e3:ba:ef:1e:33:12:f1:1e:36:23:35:bb:
1e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:1D:8A:B8:20:E1:71:57:08:6D:BE:CD:1F:ED:68:2C:5D:CE:9A:EB
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203061.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.27.227.0/24
Signature Algorithm: sha256WithRSAEncryption
09:ca:6d:32:40:b1:00:77:75:9f:f8:02:83:52:09:bb:76:9b:
12:0d:22:d2:44:62:c5:6d:42:ba:ec:99:4d:f4:52:13:cb:43:
8c:af:4e:a2:99:4b:a3:fc:9a:7e:f1:fe:27:52:5f:92:5d:e4:
ce:d4:ff:d1:4e:d2:a5:fb:2f:44:ba:af:f6:cd:a7:dd:12:6f:
4f:57:0e:d7:8a:ae:93:30:2c:67:31:ae:39:e4:7e:1f:7b:90:
8d:11:6c:96:0d:e4:7e:78:48:50:22:18:78:14:9b:c0:4f:4b:
d0:dc:71:de:7e:70:7c:c5:a3:50:ff:db:f3:3a:3c:0f:63:ce:
a4:17:df:97:69:c1:89:c6:42:59:2e:74:0a:26:54:73:5a:c4:
ad:72:30:61:cb:c1:dd:10:8b:35:09:bf:75:a9:22:e8:a2:4e:
9c:cc:f4:a5:5b:8e:cf:87:57:35:7d:47:2c:93:37:3a:b1:6b:
80:d8:97:8a:99:af:78:8c:40:95:45:c4:9d:25:c3:9f:b6:39:
81:3d:56:95:28:8d:b7:4c:40:e3:0a:89:fd:0b:1c:64:21:b5:
8b:63:cd:e1:e0:08:92:90:f6:26:ba:b4:5e:8e:96:65:9a:a8:
98:3b:00:76:51:88:91:e0:35:76:16:f4:b4:8b:47:93:f5:d9:
f3:b5:fa:b4
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUCls1pC+BEHaRAvELprA+AlzYK8IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA4MTMxMzQ0MjhaFw0yNzA4MTIxMzQ5MjhaMDMxMTAvBgNV
BAMTKEVFMUQ4QUI4MjBFMTcxNTcwODZEQkVDRDFGRUQ2ODJDNURDRTlBRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQtabHeoSmTBjyh4mqkndp4K8r
50cvYOl7SO5YJRITL8L9HEJ5IuhPfhY1clLtahJEfX9tPGaZU7rY3QY0gX0VXI34
s22V19uJhgEE55+lZUG41ztLaT85p2UFXHkBrbFD3ytMaznLetnLZkTm//+RjX8r
62l+2wpIxqi7BtEXyhZu2N+EQtdKQQxWuHan9lMu3PKV95fIT71gSoKud0RjHDa9
m4yclxjWgZAgqWEp3VAHBlaDMmNbwvkWJvFBsEG1gXWH/9np0IHfa55X8he0QKA+
d9hQmWkqRtNTQgtybGEjuglMUtovS5DSlqcI500ijuO67x4zEvEeNiM1ux73AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQU7h2KuCDhcVcIbb7NH+1oLF3OmuswHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjAzMDYxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUhvj
MA0GCSqGSIb3DQEBCwUAA4IBAQAJym0yQLEAd3Wf+AKDUgm7dpsSDSLSRGLFbUK6
7JlN9FITy0OMr06imUuj/Jp+8f4nUl+SXeTO1P/RTtKl+y9Euq/2zafdEm9PVw7X
iq6TMCxnMa455H4fe5CNEWyWDeR+eEhQIhh4FJvAT0vQ3HHefnB8xaNQ/9vzOjwP
Y86kF9+XacGJxkJZLnQKJlRzWsStcjBhy8HdEIs1Cb91qSLook6czPSlW47Ph1c1
fUcskzc6sWuA2JeKma94jECVRcSdJcOftjmBPVaVKI23TEDjCon9CxxkIbWLY83h
4AiSkPYmurRejpZlmqiYOwB2UYiR4DV2FvS0i0eT9dnztfq0
-----END CERTIFICATE-----
Generated at Tue Sep 1 01:18:17 2026 by rpki-client