Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203106.roa
File: AS203106.roa (raw, json)
Hash identifier: PIZQydbSKkPmgfGLpBaVkhrJSzeZtAe8NG0Flk5wNGg=
Subject key identifier: 9D:04:65:27:DB:2D:57:78:3A:D4:4B:42:80:4E:23:06:74:74:3F:E7
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 02F8AC76ADD36FA01E1C544F10299E1DCF069933
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203106.roa
Signing time: Tue 07 Apr 2026 14:53:03 +0000
ROA not before: Tue 07 Apr 2026 14:48:03 +0000
ROA not after: Tue 06 Apr 2027 14:53:03 +0000
asID: 203106
IP address blocks: 84.75.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Apr 2026 17:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:f8:ac:76:ad:d3:6f:a0:1e:1c:54:4f:10:29:9e:1d:cf:06:99:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 7 14:48:03 2026 GMT
Not After : Apr 6 14:53:03 2027 GMT
Subject: CN=9D046527DB2D57783AD44B42804E230674743FE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:12:a4:de:a9:f3:a8:04:78:81:75:23:22:f0:
7f:18:00:82:9b:79:e4:5b:45:74:6a:84:a2:ed:08:
64:90:8d:3f:49:cf:bf:51:40:fc:0c:72:b8:2c:13:
c6:36:1e:15:e0:e4:51:4c:80:bf:81:25:68:e3:ae:
da:ed:84:a1:43:9d:05:9b:62:25:d3:56:6e:cf:b6:
19:81:ca:9c:5b:54:a2:cc:2c:36:d3:74:bc:49:e7:
09:25:d0:6f:4f:02:96:4d:50:c4:1b:ea:05:91:b0:
a1:d7:13:66:7f:35:86:7a:c1:5f:4f:2e:c0:49:1a:
bc:6e:e9:b1:7c:34:a8:ee:c4:fd:2a:94:d5:7d:be:
23:f5:51:1c:45:76:be:42:ed:37:49:c6:f3:69:76:
7c:54:61:51:0a:04:a3:fb:1b:9f:af:38:72:ea:2e:
6e:ca:fa:b0:82:17:6f:5b:51:c2:71:cd:0a:b7:56:
49:45:28:24:89:f5:4c:6c:20:fa:c4:78:06:22:b2:
c6:d6:ea:41:0f:1b:25:15:aa:c1:47:49:59:a7:aa:
75:eb:e7:26:c6:49:2a:86:fb:c2:ce:1d:39:9c:95:
2e:06:99:c5:9f:3a:9c:56:98:5e:e8:d8:7c:54:16:
10:b1:b0:23:90:78:4b:a8:64:35:5c:af:be:42:0f:
dd:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:04:65:27:DB:2D:57:78:3A:D4:4B:42:80:4E:23:06:74:74:3F:E7
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203106.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.75.133.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:f2:6f:9e:d0:ac:88:5a:4f:ee:b7:65:2d:95:4f:eb:b7:7e:
d4:0a:7f:26:6a:4b:a7:e2:34:c0:09:e9:a0:0b:7a:cf:27:66:
8c:d5:63:5f:fb:57:b7:69:6c:79:1c:26:a3:6f:a8:99:5d:90:
a2:f9:3a:24:0f:88:46:6d:34:90:b3:71:54:3f:59:03:57:5a:
c0:08:fa:5e:66:7e:5e:b4:b3:32:cd:1a:ad:5a:21:69:39:a0:
87:da:24:1e:c2:4b:34:be:cd:f5:9d:be:8a:39:2b:0c:c2:cf:
9c:bd:c0:e5:8c:de:56:21:50:37:fb:4f:58:dc:17:7a:55:19:
68:5e:64:7e:c1:3b:77:09:33:9f:ff:4b:af:42:ce:95:a4:01:
31:74:07:63:d8:a9:36:ce:f4:6e:e7:60:43:7e:ec:72:a2:9f:
a6:a8:8c:2e:99:22:53:82:61:bf:d3:de:47:4d:46:3a:54:15:
a9:3a:07:4a:b0:8c:34:19:43:f7:f5:c6:4c:96:c0:4a:d5:cc:
c6:9b:e7:db:08:1f:a2:8d:8d:14:bd:38:f6:74:bc:5b:cf:3f:
33:43:26:99:e2:75:de:b3:12:c5:6b:39:85:d8:84:23:11:8d:
dc:0e:0d:dd:8f:58:6e:b7:42:cd:63:c6:c4:a9:c9:8e:f5:1b:
c5:a0:4b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 00:25:47 2026 by rpki-client