Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203156.roa
File: AS203156.roa (raw, json)
Hash identifier: 0aqLyAw427/UnnRSI2cqnZTdyj9bTgnBuBEI+QqIkCg=
Subject key identifier: 7F:B0:03:3D:2C:79:D4:26:0A:B4:19:C5:E0:21:94:DA:78:81:DD:2E
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 135CD516121BBFB772912D343EAD170D0D3AE44F
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203156.roa
Signing time: Wed 06 May 2026 18:07:23 +0000
ROA not before: Wed 06 May 2026 18:02:23 +0000
ROA not after: Wed 05 May 2027 18:07:23 +0000
asID: 203156
IP address blocks: 82.25.9.0/24 maxlen: 24
82.26.71.0/24 maxlen: 24
82.47.186.0/24 maxlen: 24
178.83.36.0/24 maxlen: 24
178.83.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 May 2026 16:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:5c:d5:16:12:1b:bf:b7:72:91:2d:34:3e:ad:17:0d:0d:3a:e4:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 6 18:02:23 2026 GMT
Not After : May 5 18:07:23 2027 GMT
Subject: CN=7FB0033D2C79D4260AB419C5E02194DA7881DD2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:59:77:e3:26:cb:64:ba:4a:db:b9:b1:75:8e:
f6:69:78:18:fe:d7:fd:21:a1:54:23:97:33:75:b1:
04:4d:e0:cb:99:88:39:33:58:02:87:73:d3:9d:62:
a0:c7:c1:1b:92:8a:12:5c:04:24:e4:32:e9:b9:89:
c0:9d:6f:0c:41:b3:b2:db:7b:56:3f:7e:7e:46:c0:
37:fb:b2:20:fd:2f:9a:8e:80:25:1a:19:37:6f:10:
37:bd:c4:c2:7d:8e:24:2d:cf:7b:26:90:7c:d9:83:
4f:ba:95:c7:e6:69:5a:a1:57:7c:bc:4a:b8:b0:d3:
2c:5a:e1:59:29:7c:23:ac:4c:fc:df:81:f4:38:24:
05:3a:02:c3:8d:97:4a:94:b7:14:36:05:3d:9a:36:
ca:9a:14:a6:12:ce:d4:b0:9f:f6:ad:26:cb:16:a7:
3c:a6:3c:92:aa:d1:f3:1e:b2:f7:76:db:ee:ea:7c:
49:53:50:c7:66:80:2c:0b:31:e7:57:3b:ef:83:03:
7f:0f:f3:75:3f:ef:a0:27:3c:e3:3f:1b:bd:2a:2f:
59:ce:4c:aa:81:e6:ae:a5:99:61:29:a5:2c:f3:90:
94:18:59:48:f7:8f:77:75:0d:d2:5c:13:8b:22:ce:
08:1a:fa:66:f6:56:0a:87:eb:a7:5c:1e:91:a0:11:
7b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B0:03:3D:2C:79:D4:26:0A:B4:19:C5:E0:21:94:DA:78:81:DD:2E
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203156.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.25.9.0/24
82.26.71.0/24
82.47.186.0/24
178.83.36.0/24
178.83.56.0/24
Signature Algorithm: sha256WithRSAEncryption
27:b2:92:c1:d7:ba:b9:91:93:22:a3:5e:a2:d6:84:96:3e:4c:
f2:7c:11:f7:fc:f5:d8:2e:ab:db:f3:73:98:8c:3f:14:ea:28:
3d:03:d6:41:76:93:3a:4d:98:2e:05:45:47:47:ed:97:1e:b3:
8c:37:8b:aa:d2:ca:01:85:ef:3d:b8:b8:17:23:b9:df:47:e4:
95:17:10:df:87:19:28:b8:7b:34:cc:46:5a:f8:4d:28:6f:84:
5c:62:92:90:aa:49:a5:fb:60:4d:2b:e3:23:69:66:95:a9:e4:
5d:96:d7:21:73:d3:ac:2d:1a:df:a1:6a:ce:22:4c:78:e1:4a:
61:ab:ff:e5:00:f6:5f:a9:5a:f8:a9:cf:9d:bb:3f:fe:de:89:
3f:0f:1b:a1:ae:f0:6a:4b:94:68:a0:5c:1b:dd:ba:a1:8e:d4:
65:95:cc:6c:b5:78:65:fd:b9:62:07:18:1f:a6:c9:a0:0d:70:
74:c1:69:f6:ce:39:48:fc:5d:35:b7:8e:4b:56:19:b8:a4:1a:
93:66:f5:ff:6a:5c:34:5c:ac:e8:22:97:94:9a:a4:a1:dd:f5:
a9:d7:ec:4c:77:d1:a9:12:4f:6e:bf:8d:8d:eb:4d:b0:75:b5:
31:c1:a6:cf:c1:cd:09:59:e7:d4:bc:e5:84:78:49:36:71:74:
c8:50:9d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 19:12:48 2026 by rpki-client