Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS203923.roa
File: AS203923.roa (raw, json)
Hash identifier: ntcX2Ja+NPKxEZjyYMW40j4BvX0fOl7ariJDG5GICfs=
Subject key identifier: AD:41:26:6F:92:8B:0C:E8:5A:FA:32:9D:D0:1A:B2:0A:D3:8E:0B:54
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 06DEA977F6D7AB1076C1CACCD9FEA14F7C7045B8
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS203923.roa
Signing time: Wed 19 Aug 2026 09:18:06 +0000
ROA not before: Wed 19 Aug 2026 09:13:06 +0000
ROA not after: Wed 18 Aug 2027 09:18:06 +0000
asID: 203923
IP address blocks: 2a14:7580:a01::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:42:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:de:a9:77:f6:d7:ab:10:76:c1:ca:cc:d9:fe:a1:4f:7c:70:45:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Aug 19 09:13:06 2026 GMT
Not After : Aug 18 09:18:06 2027 GMT
Subject: CN=AD41266F928B0CE85AFA329DD01AB20AD38E0B54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f7:51:69:e9:a7:6c:6d:4c:85:b2:88:43:6e:
76:e9:6a:67:ea:23:8b:28:35:9d:dc:27:c0:c7:cc:
cf:bc:89:53:0c:52:41:4b:f8:ac:98:ea:5e:e7:01:
89:88:6a:29:d1:35:21:6f:5a:ad:0c:0a:0c:ea:5c:
44:b0:78:53:60:45:a8:4b:a5:6f:ab:93:2e:34:fa:
d3:ac:97:20:9c:3a:1a:22:c4:2c:cd:a6:4d:11:22:
47:bc:ea:b9:fb:c7:00:99:21:e5:b7:e9:da:97:fd:
06:77:f7:7f:93:e2:12:e1:65:fe:1e:e1:38:fb:37:
25:11:77:2e:da:ef:fc:b6:7f:c8:77:b0:39:cc:28:
9c:9d:87:37:cb:fa:b8:ba:e2:08:a7:ad:31:3d:3b:
5f:40:a7:d0:69:b1:a2:0e:26:20:88:17:db:b1:8f:
df:e7:ac:04:73:33:05:74:01:5d:0b:9f:39:dd:2c:
e2:d5:c4:22:fd:6f:0e:6d:64:2a:42:e5:4a:da:dc:
2e:d6:5b:70:3f:ce:59:db:18:36:47:93:a2:22:16:
d1:d9:14:91:44:55:49:c0:2b:c1:88:d1:ae:3e:d2:
9c:5b:7b:74:4e:9c:6b:e2:21:6f:9a:fb:05:2a:3d:
22:4a:a8:2f:69:7b:10:cf:05:f2:1a:52:3f:52:3e:
80:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:41:26:6F:92:8B:0C:E8:5A:FA:32:9D:D0:1A:B2:0A:D3:8E:0B:54
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS203923.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:a01::/48
Signature Algorithm: sha256WithRSAEncryption
2c:d9:f6:5e:42:ae:bb:73:54:fd:70:63:de:d6:89:03:b9:d4:
01:42:80:7c:97:50:54:fc:cb:b4:72:6c:d2:15:5d:97:08:60:
58:f6:a9:27:04:6f:1e:23:e2:a7:87:8e:98:1d:13:ef:6a:9e:
94:b9:56:21:ad:90:30:8b:bd:a0:d6:d1:9b:1e:a8:6b:f0:3f:
26:cd:a6:8d:0b:23:75:50:28:06:f7:19:a2:d6:e1:a9:30:2b:
d1:63:6a:0c:12:73:91:bb:a5:6b:a6:40:8d:25:c6:33:ee:c4:
d8:5e:15:b3:81:34:80:85:32:5f:7c:6d:1d:68:93:bb:9a:08:
71:8c:b8:1f:eb:ef:a9:9b:81:da:64:c6:19:94:fb:0f:02:ec:
e4:76:9b:4b:bc:81:a8:78:d6:75:99:f7:8c:aa:7f:09:dd:c7:
6e:38:45:44:59:29:42:f7:38:5e:43:76:6d:6a:81:1d:d7:2b:
0d:06:ff:e3:25:cb:15:ae:a5:ed:87:af:59:41:20:7f:86:da:
43:14:a5:5b:cc:8c:f2:a1:af:56:c9:ee:1f:55:54:40:5a:d0:
fa:81:29:2e:ac:d3:e1:9a:cf:f6:1d:e4:10:49:89:87:4c:d6:
07:1e:c6:38:88:2d:13:4c:6c:e1:0e:3d:fc:18:69:02:4d:d1:
68:06:9f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 17:43:25 2026 by rpki-client