Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS203758.roa
File: AS203758.roa (raw, json)
Hash identifier: OTwdnub4Wx1WSMMqP32B6KWggeJuWGbYQKLccddoOMc=
Subject key identifier: 11:BF:D0:8E:69:57:96:31:EE:61:05:9B:88:79:8B:48:4F:C8:84:4F
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 54ED3D8E70256D7E3272A950206822730F09BD89
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS203758.roa
Signing time: Tue 30 Jun 2026 15:48:49 +0000
ROA not before: Tue 30 Jun 2026 15:43:49 +0000
ROA not after: Tue 29 Jun 2027 15:48:49 +0000
asID: 203758
IP address blocks: 141.98.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:ed:3d:8e:70:25:6d:7e:32:72:a9:50:20:68:22:73:0f:09:bd:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jun 30 15:43:49 2026 GMT
Not After : Jun 29 15:48:49 2027 GMT
Subject: CN=11BFD08E69579631EE61059B88798B484FC8844F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:40:1f:88:fb:72:83:1f:17:8d:cc:5c:1f:19:
64:13:ed:d4:53:e7:17:66:04:aa:22:dc:e9:90:b9:
36:bf:3f:3d:2a:b0:63:54:c3:c9:9d:95:0c:dd:48:
7b:10:55:f6:30:d3:28:a8:11:30:ac:c3:2f:2b:af:
23:ab:d1:34:88:ad:ea:26:99:71:d5:0b:2a:ed:15:
bc:62:58:7f:68:6c:bb:83:50:e3:0a:9b:02:83:24:
1d:3a:a1:f3:04:b2:73:d2:9e:2a:7d:c4:2d:22:0f:
bf:ba:58:8d:f9:ba:7a:5c:87:ca:74:1c:d6:fd:76:
3a:71:b5:c5:c1:a3:03:80:31:e8:d9:83:e0:dd:58:
7f:2a:fd:80:31:74:79:ba:6c:20:34:a6:79:01:7c:
24:f7:60:82:ac:c1:bd:65:2f:7e:a0:3f:cf:8a:21:
cc:03:0b:6e:41:e1:5c:75:66:29:55:f1:66:d4:7a:
c8:1c:a5:15:4a:e4:7d:18:12:35:74:e2:3d:b1:fd:
4d:4f:3e:70:cf:87:7f:35:3e:2f:9e:12:6c:1a:8a:
da:57:ef:1f:27:08:10:3f:0c:6e:f2:44:f4:05:ae:
3b:43:e7:ff:68:26:b8:b5:59:fe:89:18:ae:1d:f1:
f4:c9:42:7e:1e:22:b9:39:b2:57:80:12:c4:53:b4:
37:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:BF:D0:8E:69:57:96:31:EE:61:05:9B:88:79:8B:48:4F:C8:84:4F
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS203758.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.157.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:f9:c7:f0:18:7b:e3:42:c1:8d:f3:b5:f4:a6:8a:a4:e9:9b:
e7:00:05:1b:0d:27:49:b9:cf:f4:aa:c8:b4:86:6a:ba:e6:52:
17:d8:1f:77:f2:84:88:17:82:7f:5e:7b:a3:99:f9:fd:1d:b3:
03:28:4d:a7:8e:58:11:2e:14:59:ab:30:8d:76:72:0f:e6:43:
b3:86:cf:a8:f1:b8:8c:bd:fe:5f:ac:76:a8:c1:cc:71:22:5c:
75:7e:bc:b4:dc:07:ef:b3:47:10:52:57:12:b6:e5:79:62:0e:
81:98:23:67:bd:37:ad:f5:76:1c:c3:e7:7b:f2:c3:3c:80:7c:
c1:2e:ff:5d:f8:0c:79:eb:36:02:dc:a2:1b:25:12:f0:d2:05:
19:f2:12:15:3c:ab:51:0d:98:41:2d:2c:d7:f2:eb:4d:b4:9c:
dd:51:68:fb:fd:2d:c0:ac:5a:ad:8a:7a:e6:27:e3:94:50:ae:
c1:da:d4:03:cb:8a:32:ee:7c:55:67:39:51:ed:13:a2:e8:2f:
e7:d4:e4:ca:e0:b9:29:3b:dc:72:9c:f2:da:5d:ae:cb:69:76:
52:8c:b8:d3:ad:8a:1b:6c:05:3c:0f:a7:28:f7:07:d3:5d:71:
71:04:80:1f:10:6e:67:61:73:e0:f3:46:37:fe:4a:c9:49:01:
b6:d4:3d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:41:45 2026 by rpki-client