Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203446.roa
File: AS203446.roa (raw, json)
Hash identifier: GMFEZrfmtByF5pxQA6wDV96W4GMAYUr9mJygQr+i39g=
Subject key identifier: E2:2D:C4:D4:A6:8D:3C:0B:6E:4B:93:BA:61:18:9D:DD:C5:44:C9:31
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 05707AAE8E04D8D527C99B5B58729CBD95B16985
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203446.roa
Signing time: Sat 16 May 2026 15:39:43 +0000
ROA not before: Sat 16 May 2026 15:34:43 +0000
ROA not after: Sat 15 May 2027 15:39:43 +0000
asID: 203446
IP address blocks: 82.29.103.0/24 maxlen: 24
82.47.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:70:7a:ae:8e:04:d8:d5:27:c9:9b:5b:58:72:9c:bd:95:b1:69:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 16 15:34:43 2026 GMT
Not After : May 15 15:39:43 2027 GMT
Subject: CN=E22DC4D4A68D3C0B6E4B93BA61189DDDC544C931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f2:0e:28:65:e7:37:c8:59:d9:0d:de:5e:d1:
89:50:80:27:60:f7:d6:b0:c1:0e:78:84:8f:eb:7c:
2c:2b:bb:97:7e:a6:36:33:db:c9:4b:98:41:df:b6:
d1:40:c2:ed:d8:4b:5c:6d:3d:e9:bd:47:8b:6b:bf:
af:ac:b3:b8:1e:6f:4d:ac:3c:5b:12:63:6d:74:a6:
8f:35:a9:c7:47:0f:78:c8:c2:af:9e:55:13:bd:47:
30:28:16:69:df:5a:c2:6f:92:04:33:57:5b:09:bf:
42:b3:e2:fe:f4:39:7c:a3:73:ec:13:68:a5:2c:1d:
ad:ab:99:0c:08:85:86:3d:07:04:a7:16:cd:09:86:
c6:51:d2:cb:00:e3:85:bc:68:26:90:c2:51:d8:65:
dd:2b:dd:4e:95:ad:a5:ea:2a:52:6a:ee:81:aa:0e:
6e:66:ec:f7:50:3c:cb:9b:f8:95:14:c9:d1:26:fc:
94:d6:75:f8:d5:be:29:c9:20:c3:c5:57:3a:e4:f4:
92:04:bb:ba:0e:5e:43:44:d2:0d:1d:40:48:e5:34:
7d:2e:5f:96:da:b7:3d:1b:5b:d6:c7:37:79:cd:82:
99:0d:1e:aa:eb:79:93:f1:7c:81:21:3c:94:2f:70:
5d:94:4b:fa:78:4d:ec:8e:6a:87:a8:f6:6a:dc:8b:
fc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:2D:C4:D4:A6:8D:3C:0B:6E:4B:93:BA:61:18:9D:DD:C5:44:C9:31
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203446.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.29.103.0/24
82.47.19.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:92:70:76:62:9b:4c:14:7d:f5:a7:3f:4b:43:ee:a8:5a:d5:
61:6b:de:08:07:b1:75:56:10:56:61:11:cb:c6:a0:7e:fc:02:
14:0f:24:01:f9:99:52:fb:2b:55:92:7c:4a:a5:12:f4:99:00:
59:7e:e0:f2:d0:c1:b3:18:bb:70:c3:f8:4a:1d:06:06:8b:4d:
de:b4:ed:c4:31:e0:bf:65:70:58:dc:31:16:c0:49:4a:54:57:
0d:7c:4f:35:5a:fe:d5:08:7e:cd:4a:35:c9:d6:45:db:a8:fd:
0e:1e:c9:74:da:2d:78:b4:04:cf:ec:ba:7b:52:21:fc:1b:15:
65:9b:26:d8:92:78:1f:de:2d:ce:82:2b:03:2a:7c:05:66:aa:
9e:76:cb:87:ed:37:4e:d7:58:f5:b0:3e:84:87:3a:0a:fc:18:
01:69:7e:d7:08:e5:6a:f6:5a:ce:8b:f9:9f:11:a2:40:30:e1:
ba:24:29:d2:3d:8a:ec:c4:8e:a2:65:ea:33:a9:47:cf:aa:8a:
23:42:c5:ad:5d:86:58:03:ff:61:e0:20:ed:7c:ed:87:74:1e:
0c:d5:09:f6:92:f4:be:55:8d:04:d2:86:0b:ee:1c:44:d6:bb:
e8:13:a0:91:0e:86:6e:85:e2:e6:96:16:84:59:22:a0:27:57:
e9:db:48:26
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUBXB6ro4E2NUnyZtbWHKcvZWxaYUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA1MTYxNTM0NDNaFw0yNzA1MTUxNTM5NDNaMDMxMTAvBgNV
BAMTKEUyMkRDNEQ0QTY4RDNDMEI2RTRCOTNCQTYxMTg5REREQzU0NEM5MzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW8g4oZec3yFnZDd5e0YlQgCdg
99awwQ54hI/rfCwru5d+pjYz28lLmEHfttFAwu3YS1xtPem9R4trv6+ss7geb02s
PFsSY210po81qcdHD3jIwq+eVRO9RzAoFmnfWsJvkgQzV1sJv0Kz4v70OXyjc+wT
aKUsHa2rmQwIhYY9BwSnFs0JhsZR0ssA44W8aCaQwlHYZd0r3U6VraXqKlJq7oGq
Dm5m7PdQPMub+JUUydEm/JTWdfjVvinJIMPFVzrk9JIEu7oOXkNE0g0dQEjlNH0u
X5batz0bW9bHN3nNgpkNHqrreZPxfIEhPJQvcF2US/p4TeyOaoeo9mrci/zdAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQU4i3E1KaNPAtuS5O6YRid3cVEyTEwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjAzNDQ2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUh1n
AwQAUi8TMA0GCSqGSIb3DQEBCwUAA4IBAQCNknB2YptMFH31pz9LQ+6oWtVha94I
B7F1VhBWYRHLxqB+/AIUDyQB+ZlS+ytVknxKpRL0mQBZfuDy0MGzGLtww/hKHQYG
i03etO3EMeC/ZXBY3DEWwElKVFcNfE81Wv7VCH7NSjXJ1kXbqP0OHsl02i14tATP
7Lp7UiH8GxVlmybYkngf3i3OgisDKnwFZqqedsuH7TdO11j1sD6EhzoK/BgBaX7X
COVq9lrOi/mfEaJAMOG6JCnSPYrsxI6iZeozqUfPqoojQsWtXYZYA/9h4CDtfO2H
dB4M1Qn2kvS+VY0E0oYL7hxE1rvoE6CRDoZuheLmlhaEWSKgJ1fp20gm
-----END CERTIFICATE-----
Generated at Sat Jun 6 10:50:24 2026 by rpki-client