Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS203020.roa
File: AS203020.roa (raw, json)
Hash identifier: s2k+WCB0AcbwWVdWlZPqGzN8DbnE/tJvwIMydpQzmXI=
Subject key identifier: 7E:B5:E9:3F:10:D8:2A:90:46:08:C3:44:0E:24:30:66:97:AD:34:AA
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 3C96ADDAC6F7B78069BFBF557B8A82D866702E70
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS203020.roa
Signing time: Fri 09 Oct 2026 12:21:59 +0000
ROA not before: Fri 09 Oct 2026 12:16:59 +0000
ROA not after: Fri 08 Oct 2027 12:21:59 +0000
asID: 203020
IP address blocks: 2.57.176.0/22 maxlen: 24
45.140.236.0/22 maxlen: 24
193.0.234.0/23 maxlen: 24
193.161.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:96:ad:da:c6:f7:b7:80:69:bf:bf:55:7b:8a:82:d8:66:70:2e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Oct 9 12:16:59 2026 GMT
Not After : Oct 8 12:21:59 2027 GMT
Subject: CN=7EB5E93F10D82A904608C3440E24306697AD34AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0f:18:3d:38:b4:9d:00:31:4c:86:f4:cf:76:
02:76:38:08:4a:a6:72:f5:6e:f9:a1:b5:10:85:60:
6c:61:56:53:9c:d0:93:e0:79:dd:13:85:6e:93:2a:
92:49:bc:24:81:41:9b:91:06:c5:58:6f:8e:ac:e1:
b7:00:c2:c7:96:25:9c:52:1f:51:08:76:7f:ab:ea:
61:8b:95:ec:95:0a:44:01:9c:29:de:7b:61:f8:9e:
34:b4:da:81:95:19:12:ce:30:01:c8:a7:9b:6a:7e:
fe:ee:d5:42:fa:1d:b1:f2:d5:10:8d:fb:8f:db:26:
e4:e8:e8:9b:ae:c9:e7:f7:e5:ce:96:80:ba:81:ad:
d3:96:32:a8:29:47:96:17:75:d4:48:9c:21:54:c1:
f2:9d:a7:f9:fc:06:6e:8c:d9:5b:32:58:8b:93:dc:
d5:1a:4e:08:63:30:be:f9:cb:63:e1:05:7c:79:57:
45:17:86:8e:2f:1b:2c:2a:76:0b:2b:e9:09:72:ee:
d2:8c:cc:90:0b:d2:b2:94:38:58:9d:b1:45:32:e3:
05:66:ad:6c:33:86:66:d3:d5:29:d3:b2:60:33:fa:
68:16:62:5b:ca:84:ed:2d:55:39:12:7f:e0:6c:d1:
49:e7:5f:e7:3a:57:1e:86:ba:a4:a3:1d:02:1a:3a:
60:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B5:E9:3F:10:D8:2A:90:46:08:C3:44:0E:24:30:66:97:AD:34:AA
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS203020.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.176.0/22
45.140.236.0/22
193.0.234.0/23
193.161.206.0/24
Signature Algorithm: sha256WithRSAEncryption
19:18:5e:47:21:8d:d2:71:c3:a1:bc:b5:64:a7:58:f2:eb:92:
42:92:74:92:13:41:48:09:00:85:52:5b:00:6d:ea:79:a5:2b:
3f:a0:a2:e0:17:55:23:b3:46:9c:9a:b1:0a:aa:83:04:0c:67:
f1:8e:db:73:21:5e:ec:f0:ab:25:7f:8a:bc:d0:b6:69:8b:ba:
e8:b4:de:c2:38:b9:8e:06:51:b7:8f:33:4a:7a:d6:2a:cc:00:
8c:89:3b:0f:6a:53:22:41:64:90:3d:f9:04:ad:ea:69:90:6c:
fc:92:b2:3f:dc:b3:08:1c:43:d9:ab:ab:db:38:00:a7:99:29:
c4:3b:b7:f3:59:b0:f0:c4:bf:9d:3d:e2:a3:e5:54:52:84:4f:
f0:1b:d9:f9:90:d8:c0:cd:70:17:4b:ce:c2:8d:46:a0:67:6c:
06:75:f5:70:f8:09:98:95:6b:18:cd:c9:88:3a:48:68:80:53:
2b:cb:3c:13:df:7d:6c:b9:1d:89:15:8d:db:98:36:5c:04:2e:
0e:61:7d:50:99:21:16:10:ba:a1:81:37:b2:88:29:31:51:9e:
2c:89:97:a7:cf:00:d1:ab:a2:a3:3f:2c:e7:f7:e1:48:67:7e:
fe:2d:c8:f6:19:a9:a0:d8:70:66:e3:b9:a6:f2:ed:2b:29:d7:
8b:89:f6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 05:49:15 2026 by rpki-client