Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS207043.roa
File: AS207043.roa (raw, json)
Hash identifier: HPzvMajA+YrDE6yaZG68qNTRshIUiT1G0G+l+OnvPKo=
Subject key identifier: 54:48:6B:4D:2A:E8:7C:65:1A:73:D6:EB:F1:11:CF:63:77:03:E6:EF
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 48808C8E16F52B661DB3CE1E902177C5B0EB3C01
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS207043.roa
Signing time: Sat 16 May 2026 23:47:14 +0000
ROA not before: Sat 16 May 2026 23:42:14 +0000
ROA not after: Sat 15 May 2027 23:47:14 +0000
asID: 207043
IP address blocks: 193.111.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 06:29:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:80:8c:8e:16:f5:2b:66:1d:b3:ce:1e:90:21:77:c5:b0:eb:3c:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: May 16 23:42:14 2026 GMT
Not After : May 15 23:47:14 2027 GMT
Subject: CN=54486B4D2AE87C651A73D6EBF111CF637703E6EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:84:88:52:b4:29:18:0b:6e:df:16:1c:76:14:
ce:8e:dd:7c:9a:92:e0:c5:93:91:4a:34:36:ec:84:
ab:48:83:97:85:f8:be:20:78:30:92:72:d7:c2:c9:
7c:d3:26:e2:08:ae:53:b5:89:95:44:3a:4a:65:28:
68:8e:e2:f8:a4:4f:6e:6b:21:f4:24:d2:ba:29:dd:
d4:dc:3e:e7:6e:c1:c2:2c:ca:57:08:ad:d6:17:72:
80:45:cb:4a:f7:8b:07:ed:69:f6:bf:75:6c:dd:fd:
cd:16:46:54:53:29:d6:42:78:56:ef:1f:43:13:9e:
ae:28:46:74:22:a1:42:fc:61:b1:98:cf:78:cc:ef:
e5:ec:c3:f9:24:27:3c:5a:58:6a:10:b9:45:b8:8b:
24:f4:c6:af:62:77:15:50:aa:30:59:d6:24:1b:86:
15:80:39:9f:04:a9:ff:01:3f:d7:81:12:4f:78:cb:
07:12:99:6f:0d:cb:b2:9e:93:23:76:48:b2:91:3b:
31:1f:71:af:10:28:a7:f5:b4:4a:c9:6b:d3:28:49:
53:e8:64:13:28:da:2f:66:60:8a:28:b5:7e:02:7f:
13:49:bb:6f:cc:f3:c3:53:28:71:ce:e8:81:64:e9:
6e:3b:96:0a:9b:7f:d5:71:ef:68:87:34:a1:d2:d4:
6b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:48:6B:4D:2A:E8:7C:65:1A:73:D6:EB:F1:11:CF:63:77:03:E6:EF
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS207043.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.117.0/24
Signature Algorithm: sha256WithRSAEncryption
52:d0:58:47:56:27:4d:72:c3:ee:49:6e:34:69:6c:f2:76:e8:
68:fd:67:93:a8:cc:7f:de:6b:45:39:28:bb:65:52:70:fe:bd:
43:d9:b0:95:de:6d:43:1b:41:91:1c:c8:70:8a:35:95:a1:2d:
6d:f5:40:e3:41:2a:09:a4:fc:6f:8c:03:33:a7:dd:f3:a8:4e:
27:76:8f:a8:07:a6:5e:cb:31:24:7f:3d:d1:66:61:0f:3a:04:
04:55:57:17:6c:8f:a6:aa:9f:24:2d:32:72:f3:03:32:55:9a:
4d:fa:26:d9:0b:1f:d6:95:94:a5:f2:27:48:b6:e7:60:80:d7:
69:cc:d3:21:bc:c7:ca:96:99:3b:17:8c:38:88:da:dd:1f:f0:
c7:b1:f8:7f:4c:8e:e2:75:90:fa:11:13:21:d1:89:c2:e6:7f:
73:03:66:08:6e:45:d9:04:ed:85:9f:6e:45:7c:1f:97:a0:23:
24:1d:0d:ab:cf:5e:0e:a4:82:6e:10:e4:d7:03:ce:06:65:e5:
6c:02:dc:c6:1f:4b:2b:3a:8d:1f:36:ae:9c:08:e4:1c:47:3e:
61:d9:3d:80:2a:5c:b1:8f:2f:a7:e6:27:dc:0c:14:84:d8:79:
dc:5e:ac:b4:b2:27:50:04:c2:f6:cc:2f:7f:5c:b7:50:c1:0a:
2c:b8:30:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:01:41 2026 by rpki-client