Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203446.roa
File: AS203446.roa (raw, json)
Hash identifier: sTXADOeYsJs0CyvBdxRmebKfpEGLziQ32uppvdXiC9s=
Subject key identifier: C9:63:14:C7:2C:5D:E1:4E:E8:01:DF:A6:B2:DE:2F:F9:4F:6C:2F:52
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 48C7C79F275A3C8A009C4C59E03A287D5BA46303
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203446.roa
Signing time: Thu 16 Jul 2026 15:40:40 +0000
ROA not before: Thu 16 Jul 2026 15:35:40 +0000
ROA not after: Thu 15 Jul 2027 15:40:40 +0000
asID: 203446
IP address blocks: 82.47.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:c7:c7:9f:27:5a:3c:8a:00:9c:4c:59:e0:3a:28:7d:5b:a4:63:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 16 15:35:40 2026 GMT
Not After : Jul 15 15:40:40 2027 GMT
Subject: CN=C96314C72C5DE14EE801DFA6B2DE2FF94F6C2F52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:26:e8:94:0f:fb:1a:fe:1a:a5:67:ac:e2:30:
a7:a1:8e:36:f9:e8:86:4c:35:0a:ce:44:97:bf:a9:
a7:71:33:ef:aa:f6:6c:67:01:59:eb:45:6e:44:8d:
68:96:a1:8e:7c:c5:93:db:ea:1d:e5:3a:07:c1:47:
40:dc:8b:46:6d:a1:78:54:27:cb:7c:4e:20:65:60:
c4:70:3f:2c:b5:28:ee:2c:4a:78:0f:1f:73:c2:6d:
3c:49:23:69:34:e4:19:41:d2:97:fd:d6:af:2a:b8:
d8:59:55:8c:ce:9e:c5:cb:c9:96:44:e8:40:cd:46:
a2:e7:f1:d4:f4:7e:cf:cd:8a:bc:c0:49:f5:f3:2a:
b9:cd:ce:f2:ad:47:26:a6:99:d6:12:dc:8a:50:18:
46:11:f6:01:9c:90:41:ee:c5:99:4c:7e:29:84:fe:
e2:37:da:fa:04:9d:e7:13:74:a2:db:08:1a:38:23:
9d:96:3b:da:f0:a4:7e:06:5d:72:34:d4:55:62:2f:
d9:f3:7c:14:cd:fa:75:b6:2a:5e:f1:1b:16:9e:bc:
71:64:a3:ea:0e:35:65:3e:72:15:d6:a0:d3:41:2b:
49:61:6b:2b:e8:90:d8:2e:30:7b:3e:5e:bb:1d:a7:
6b:2b:1c:7b:a3:23:f8:10:b7:b3:27:f9:3b:7f:3f:
8c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:63:14:C7:2C:5D:E1:4E:E8:01:DF:A6:B2:DE:2F:F9:4F:6C:2F:52
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203446.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.47.19.0/24
Signature Algorithm: sha256WithRSAEncryption
01:e5:1a:c7:dd:83:23:2f:a8:76:2c:a6:19:eb:c1:8f:b2:14:
5b:3d:70:bb:c3:7e:f7:02:70:56:f8:26:81:dc:62:18:ed:bc:
28:e8:c6:bd:8d:18:e7:9c:d0:ed:f3:2d:74:6b:c9:88:aa:b0:
57:a5:b3:1a:7a:2d:e7:55:65:6b:7c:01:25:b7:ad:37:74:2f:
b8:36:e6:ac:29:b1:f6:61:7b:9b:f1:51:81:65:1a:8b:82:d9:
5e:07:c3:c2:99:e8:b4:22:74:f7:85:11:18:df:a5:47:32:04:
4a:83:89:d1:53:7f:9b:40:dd:e0:0b:28:9d:e3:7c:e7:f1:4a:
77:59:0f:83:c0:ae:b6:eb:93:7f:80:f8:f7:56:45:cc:da:4a:
93:6b:34:63:fd:ed:f8:85:ca:bb:82:8b:63:1a:91:4c:f4:13:
40:7d:71:80:e3:cc:b0:33:85:96:f7:dd:ef:63:68:c4:95:34:
a0:81:e7:ba:f7:e4:7e:13:80:62:5b:c6:c4:3b:0e:88:3c:9b:
6f:89:ff:2c:eb:f7:1a:5f:1c:52:2b:ea:7d:9b:bc:10:07:7c:
6e:00:f8:49:87:52:b9:3e:5e:34:b6:5d:c5:61:c0:3a:0c:26:
7b:f4:15:db:b2:ce:be:59:b7:a2:8b:b9:20:80:78:02:53:7c:
1d:12:33:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:17:03 2026 by rpki-client