Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203758.roa
File: AS203758.roa (raw, json)
Hash identifier: xUjMAwfBTXuaymBZ282C7P6bxN3khm9KpD2w8tqBgAc=
Subject key identifier: 7F:12:8B:70:A1:0A:AD:EA:78:3B:BA:01:C9:B4:AE:21:EE:B1:40:01
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 779FA646035BF6BC19070EF939080809343623EB
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203758.roa
Signing time: Fri 17 Jul 2026 15:22:38 +0000
ROA not before: Fri 17 Jul 2026 15:17:38 +0000
ROA not after: Fri 16 Jul 2027 15:22:38 +0000
asID: 203758
IP address blocks: 82.38.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:9f:a6:46:03:5b:f6:bc:19:07:0e:f9:39:08:08:09:34:36:23:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 17 15:17:38 2026 GMT
Not After : Jul 16 15:22:38 2027 GMT
Subject: CN=7F128B70A10AADEA783BBA01C9B4AE21EEB14001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:73:db:2f:91:6e:10:5d:e7:7d:af:0a:3e:f8:
69:e2:fc:36:22:09:34:10:93:a7:ba:a6:f4:8f:9e:
4b:07:9e:07:e2:56:72:a3:c6:b7:6c:46:72:6b:6b:
02:93:8f:15:a1:c0:20:86:0c:52:f4:4c:03:20:fe:
7e:ed:03:cf:df:39:19:66:0e:8b:c1:72:ed:f8:e4:
7f:e2:b5:63:16:85:bd:78:d0:aa:da:c4:e7:7f:1e:
6b:32:0e:b7:fc:0b:ff:a7:42:3d:5b:64:55:43:bd:
c9:15:79:97:f7:c3:f7:2d:6e:8a:23:b0:49:7c:65:
6b:95:4f:0e:b1:32:06:55:4a:2f:9a:46:18:b2:21:
14:90:e5:6f:56:be:03:ea:16:c8:8d:2d:ec:9b:c9:
c1:18:8d:e2:9c:84:37:60:26:b0:84:45:09:c9:b9:
9f:4e:5e:66:fa:6a:3f:68:54:71:18:9f:53:38:6e:
d8:7e:e1:83:74:ad:10:91:38:66:7d:eb:6c:d2:56:
b5:ce:ad:bc:84:bf:57:29:42:1d:22:8d:ad:f7:bc:
73:ba:40:4d:59:c9:3d:57:3c:d0:81:ce:36:50:3e:
7c:9e:3d:b4:74:45:f9:f2:74:44:74:ae:ba:09:32:
b6:d8:db:34:88:11:8f:69:28:11:fa:d8:1c:dc:19:
23:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:12:8B:70:A1:0A:AD:EA:78:3B:BA:01:C9:B4:AE:21:EE:B1:40:01
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203758.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.38.2.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:f3:59:25:89:ba:fd:34:1c:00:ef:b2:3b:82:66:47:6c:79:
f0:67:b2:e4:72:8f:14:cd:65:b1:d2:47:b0:0c:fc:ba:d3:cd:
1f:5f:1e:83:d5:f8:de:66:f8:62:f3:5b:fd:28:6f:8c:eb:d2:
ea:cc:d3:c9:5f:55:2b:0d:08:90:e9:9b:6a:9e:33:0a:8e:24:
66:b2:64:da:db:5a:8d:fb:2b:36:d3:2b:7d:9d:fd:9c:86:34:
55:46:5d:a9:cc:d8:d8:c1:36:97:8f:96:e2:59:79:89:71:b9:
f3:1e:c4:35:bb:f1:99:b5:2d:97:bc:f7:ea:9a:bf:75:e7:b9:
7f:c3:f3:6a:47:99:4e:0d:4d:80:65:d0:8b:a7:8c:5f:68:60:
5b:c3:c1:17:86:e6:35:79:ad:66:af:71:20:c3:a5:ab:ee:bb:
d1:59:ad:b1:67:3a:2c:bd:ca:7a:5a:a1:1e:e6:fe:b6:85:b8:
68:64:4b:56:63:4f:67:42:d5:f1:f5:47:53:0d:7c:12:b3:12:
81:e5:d3:98:af:17:9e:81:be:b3:e1:80:4e:25:c9:98:d9:41:
00:8a:21:1b:eb:fc:08:9a:02:d2:e3:52:0d:d2:68:2e:73:82:
57:ff:5e:09:a0:0f:4c:eb:6e:dc:a9:1f:77:d9:18:e4:06:8b:
61:37:cd:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:08:27 2026 by rpki-client