Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203446.roa
File: AS203446.roa (raw, json)
Hash identifier: Ah48VedAv9NvlBVEV3sl+WuB991vHkHTVAIRFpiCWuA=
Subject key identifier: D6:13:66:65:CF:06:E0:41:3C:8B:7B:0E:03:3F:07:B6:8B:A8:F9:E2
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 57C28ADAF6BB6D7F2E585F91D3E5E6EF1787830E
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203446.roa
Signing time: Tue 06 May 2025 14:31:29 +0000
ROA not before: Tue 06 May 2025 14:26:29 +0000
ROA not after: Tue 05 May 2026 14:31:29 +0000
asID: 203446
IP address blocks: 82.26.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:c2:8a:da:f6:bb:6d:7f:2e:58:5f:91:d3:e5:e6:ef:17:87:83:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 6 14:26:29 2025 GMT
Not After : May 5 14:31:29 2026 GMT
Subject: CN=D6136665CF06E0413C8B7B0E033F07B68BA8F9E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:57:84:64:8b:d3:96:1e:24:bd:46:a5:2b:14:
cf:5b:f1:48:b6:c3:1f:27:0b:17:6c:cc:21:46:c4:
98:a8:a6:d5:70:4f:0d:37:60:a8:61:3a:51:8d:58:
2b:43:46:77:36:77:95:f1:ee:2b:da:0a:f9:19:6b:
8e:14:26:93:cb:6c:4e:d8:f6:8d:75:e3:2b:51:69:
96:a9:40:29:73:12:ac:0a:09:c7:33:a4:6c:f0:1d:
a8:03:f9:ad:d2:75:e6:64:9c:71:9f:6d:94:f8:30:
20:62:6a:19:21:2a:ee:97:46:fb:9a:a6:2a:31:4e:
17:51:b8:30:98:a4:f2:8a:31:21:8d:cf:9f:10:e9:
ad:78:96:81:26:9d:05:43:f1:7d:8e:5a:5f:5a:12:
fd:d5:ce:65:ca:8a:3b:5f:4e:0b:82:4c:7c:14:59:
bb:a1:33:9f:f2:fe:27:d9:ab:5a:50:e1:3a:97:8d:
ad:65:f5:59:3f:b3:f0:7b:6a:66:08:20:db:7f:cd:
4d:36:01:57:db:02:d0:e8:03:43:52:bd:3a:75:cc:
cf:6e:19:e6:35:fc:18:e7:94:45:47:2d:41:35:5b:
42:27:ee:22:6c:01:3f:ca:09:b6:b9:4a:b4:5d:db:
2c:b1:66:55:33:5b:32:00:e4:86:6c:07:f1:60:d4:
df:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:13:66:65:CF:06:E0:41:3C:8B:7B:0E:03:3F:07:B6:8B:A8:F9:E2
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203446.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.26.169.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:fc:c9:28:0a:6b:e6:fc:18:0c:f5:ed:23:28:b1:0b:7a:ef:
b6:4a:22:60:1e:cf:9d:45:5b:b9:05:bd:09:20:39:53:fe:12:
28:76:db:0d:01:66:af:ee:71:c0:fb:11:48:8d:0f:c2:72:a8:
d2:5f:fb:c0:62:63:29:71:78:a6:70:c7:09:38:ac:5d:d5:1e:
0a:29:dd:04:dc:0a:10:1c:41:88:df:a9:e8:14:dc:4a:5f:90:
df:e6:2d:a9:ff:c9:9a:e2:41:b4:2a:82:bb:27:43:ae:9f:bd:
ce:3c:df:9d:08:38:6d:74:ab:9d:8f:6d:fe:ec:5d:7a:80:8a:
d8:20:2c:be:40:59:50:43:ee:f0:c1:49:81:83:c6:ec:21:63:
68:d5:7e:e9:e4:ee:3b:b0:8e:39:cf:5d:9e:e4:33:f3:76:49:
e9:09:92:16:e7:38:ac:fa:5a:4e:2e:52:7a:0a:72:8e:69:c6:
96:b4:6b:6a:4f:0d:6d:21:ec:f8:37:09:d1:52:2e:d9:c4:40:
a8:6a:94:a9:83:c9:57:45:63:cb:d5:a9:33:eb:ed:9f:a3:25:
09:8f:c6:30:e6:a7:f9:40:bc:24:16:b5:15:58:cf:59:1f:0d:
4f:c3:6c:70:6a:bf:10:5e:86:d4:13:2d:55:49:01:c0:e9:cd:
2f:ba:cb:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 21:54:13 2025 by rpki-client