Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203669.roa
File: AS203669.roa (raw, json)
Hash identifier: U7ZQEXxArNUQOW2ZRRVMzQctaY646d4CrWc89UBX6YQ=
Subject key identifier: 08:65:D9:CA:F8:2B:B9:F7:B4:7B:09:D2:44:02:17:5E:26:86:60:8B
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 43E69F668440FFDCD838DE8E30E89BA6C4A37D45
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203669.roa
Signing time: Thu 21 May 2026 17:51:12 +0000
ROA not before: Thu 21 May 2026 17:46:12 +0000
ROA not after: Thu 20 May 2027 17:51:12 +0000
asID: 203669
IP address blocks: 2a13:9500:17f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:e6:9f:66:84:40:ff:dc:d8:38:de:8e:30:e8:9b:a6:c4:a3:7d:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 21 17:46:12 2026 GMT
Not After : May 20 17:51:12 2027 GMT
Subject: CN=0865D9CAF82BB9F7B47B09D24402175E2686608B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6a:f7:95:31:19:8d:1e:05:aa:0e:ed:bd:16:
ca:90:50:29:0d:c0:bf:bc:39:74:1c:ba:3a:98:cb:
ed:b5:9c:cf:ff:0b:18:c1:57:66:c5:8c:bb:d7:3c:
88:4e:d8:b6:f8:4c:3d:46:aa:65:b3:78:86:4d:48:
a6:d9:83:b7:ed:b5:c4:af:c7:c3:51:fb:4e:8b:69:
5e:74:62:cd:08:86:98:c5:49:b9:8c:05:f0:36:5b:
ce:c3:d9:4f:10:d6:5f:13:00:02:2c:e2:b8:ee:cb:
84:6f:68:f8:93:53:f4:2a:ea:9e:e5:cc:36:93:35:
05:06:e6:15:2a:4b:d9:16:41:5a:bc:04:ba:b2:ea:
ee:ed:8b:45:7a:cc:b6:fa:3e:fd:55:4c:b5:e7:12:
5c:55:6e:44:32:35:1d:e2:92:c6:3e:1e:6c:15:00:
e9:6c:2b:2b:d0:80:30:d5:4f:be:ce:94:77:72:b7:
d3:0a:47:d4:67:35:23:8c:c3:a2:45:c8:2e:50:2a:
f7:fc:42:46:95:db:0d:79:a2:27:27:a3:bd:c5:3e:
94:c8:93:16:ef:0d:e2:df:3f:21:42:24:fc:3a:5c:
10:3f:ec:7f:7f:51:0f:05:a6:c2:c7:a9:49:e8:39:
43:19:2d:d1:66:5e:2e:69:bc:f9:0d:52:2e:03:d6:
44:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:65:D9:CA:F8:2B:B9:F7:B4:7B:09:D2:44:02:17:5E:26:86:60:8B
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203669.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:17f::/48
Signature Algorithm: sha256WithRSAEncryption
a2:d0:40:12:e8:74:11:ca:30:92:cd:ac:de:11:13:7c:92:36:
56:9a:68:dd:c8:b1:33:ca:70:df:91:a1:8a:55:e0:1c:93:83:
c5:d8:2e:ea:ae:2c:97:0a:8c:3a:8c:40:df:99:6c:14:06:7b:
e8:9a:d2:d9:de:2f:64:6f:29:d2:e2:71:a0:a0:0b:57:a4:35:
27:08:0c:5e:2b:17:4b:e0:48:4e:fe:ed:5e:c9:06:8a:a4:b2:
3b:0b:71:d2:86:3b:ea:fc:18:e8:8b:45:b8:b8:b7:04:be:66:
c8:70:9c:8c:d2:43:a6:37:f1:5c:6c:54:77:ad:77:cb:39:b2:
e0:c9:eb:3a:b3:25:08:df:7a:dc:93:fb:25:01:b2:76:98:1c:
56:33:69:94:cf:fa:f9:5a:55:3f:7e:1f:c7:1d:2e:db:52:89:
a8:ac:66:24:09:44:2b:7d:8b:07:be:3d:6b:c9:e2:55:b3:9e:
fa:9c:c3:39:2b:44:66:9c:1e:37:5b:59:0c:33:ea:12:57:42:
2f:fe:46:f3:be:fd:c8:69:43:0c:bc:55:c8:87:bc:74:4f:c7:
c6:c8:48:22:58:84:f1:7f:ed:f6:ff:d3:35:49:de:5d:93:b2:
80:8f:21:cc:a3:68:1e:80:55:4b:1f:f7:d5:1c:25:5b:c5:1d:
bf:bd:7c:54
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUQ+afZoRA/9zYON6OMOibpsSjfUUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA1MjExNzQ2MTJaFw0yNzA1MjAxNzUxMTJaMDMxMTAvBgNV
BAMTKDA4NjVEOUNBRjgyQkI5RjdCNDdCMDlEMjQ0MDIxNzVFMjY4NjYwOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsaveVMRmNHgWqDu29FsqQUCkN
wL+8OXQcujqYy+21nM//CxjBV2bFjLvXPIhO2Lb4TD1GqmWzeIZNSKbZg7fttcSv
x8NR+06LaV50Ys0IhpjFSbmMBfA2W87D2U8Q1l8TAAIs4rjuy4RvaPiTU/Qq6p7l
zDaTNQUG5hUqS9kWQVq8BLqy6u7ti0V6zLb6Pv1VTLXnElxVbkQyNR3iksY+HmwV
AOlsKyvQgDDVT77OlHdyt9MKR9RnNSOMw6JFyC5QKvf8QkaV2w15oicno73FPpTI
kxbvDeLfPyFCJPw6XBA/7H9/UQ8FpsLHqUnoOUMZLdFmXi5pvPkNUi4D1kTxAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUCGXZyvgrufe0ewnSRAIXXiaGYIswHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjAzNjY5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhOV
AAF/MA0GCSqGSIb3DQEBCwUAA4IBAQCi0EAS6HQRyjCSzazeERN8kjZWmmjdyLEz
ynDfkaGKVeAck4PF2C7qriyXCow6jEDfmWwUBnvomtLZ3i9kbynS4nGgoAtXpDUn
CAxeKxdL4EhO/u1eyQaKpLI7C3HShjvq/Bjoi0W4uLcEvmbIcJyM0kOmN/FcbFR3
rXfLObLgyes6syUI33rck/slAbJ2mBxWM2mUz/r5WlU/fh/HHS7bUomorGYkCUQr
fYsHvj1ryeJVs576nMM5K0RmnB43W1kMM+oSV0Iv/kbzvv3IaUMMvFXIh7x0T8fG
yEgiWITxf+32/9M1Sd5dk7KAjyHMo2gegFVLH/fVHCVbxR2/vXxU
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:10:30 2026 by rpki-client