Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS203446.roa
File: AS203446.roa (raw, json)
Hash identifier: XuscWz5ZTtkyteKfxQpns+Zw7nEiMWA06mTAODPOo2I=
Subject key identifier: 03:C7:A3:EE:8E:EA:E5:6D:B1:96:E7:BE:79:DF:F0:7D:5C:45:0D:D5
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 4FB4DAA53CF95925DFADC2EA60D37E0E0A9C373A
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS203446.roa
Signing time: Wed 19 Aug 2026 11:31:41 +0000
ROA not before: Wed 19 Aug 2026 11:26:41 +0000
ROA not after: Wed 18 Aug 2027 11:31:41 +0000
asID: 203446
IP address blocks: 51.241.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:b4:da:a5:3c:f9:59:25:df:ad:c2:ea:60:d3:7e:0e:0a:9c:37:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 19 11:26:41 2026 GMT
Not After : Aug 18 11:31:41 2027 GMT
Subject: CN=03C7A3EE8EEAE56DB196E7BE79DFF07D5C450DD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:62:17:b8:d4:66:6d:9a:a7:27:00:aa:8a:2c:
87:b6:0c:3e:cd:a7:dc:3f:a0:87:a3:5c:e7:a5:85:
bf:48:c4:e8:1b:7a:9f:1f:81:c9:b4:3e:7c:49:43:
84:db:7b:4b:8e:39:02:f7:3f:60:a7:f6:a8:aa:91:
1a:66:aa:5d:60:30:ae:c3:22:b7:06:f1:b6:15:b0:
09:d7:81:c6:35:ed:02:8b:43:7d:bc:2a:1c:c2:29:
0b:10:6e:b2:67:bf:02:3b:d8:4b:45:0f:78:12:dc:
14:09:5f:f9:9b:ea:1b:66:71:cf:55:eb:e1:22:82:
2e:39:c7:95:04:b3:0c:53:60:8b:78:d5:94:7a:aa:
cc:21:35:02:76:5f:cb:5c:6a:3f:a3:82:32:67:54:
41:ea:d3:c4:8a:94:8e:f9:4d:8f:8c:88:08:3b:42:
be:4d:4a:59:82:f8:fc:1e:60:c8:35:b5:26:06:49:
33:ad:d8:0e:9c:99:c9:55:6a:bb:58:de:43:95:37:
e7:66:16:a3:8d:0f:e0:9a:b7:26:e0:07:b0:6e:94:
02:44:47:1f:f0:1f:0d:4d:d9:a8:13:66:9a:72:17:
c3:05:14:01:d8:4b:c8:0f:ee:19:a4:91:ef:d6:4d:
c9:fa:dd:c7:92:96:7b:eb:bb:fc:c5:3b:fb:c8:70:
ec:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C7:A3:EE:8E:EA:E5:6D:B1:96:E7:BE:79:DF:F0:7D:5C:45:0D:D5
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS203446.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.241.141.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:95:c4:88:3e:40:f7:36:41:4f:33:a4:e4:fb:f2:b4:3e:e6:
d1:1e:74:0b:0c:4f:1c:3d:5d:5d:d9:1e:b9:f8:3a:50:9d:ef:
aa:16:ca:75:79:53:b8:90:36:51:a8:90:43:46:53:fe:99:e3:
c6:30:70:25:30:05:6b:59:a6:ec:7b:39:54:06:f0:54:e1:6b:
35:35:ca:d5:d3:03:5c:85:80:13:4f:54:d3:0e:30:06:b9:6c:
95:10:3e:be:fe:32:8a:f4:d9:71:b0:98:a9:0c:b4:8f:40:7c:
54:41:de:d0:0c:d2:88:ab:77:2f:1e:6a:66:58:22:78:86:cb:
65:4c:bd:8b:a3:19:e2:87:9f:61:59:c8:68:3f:86:1d:50:c9:
41:29:2f:c8:32:cb:3d:34:d4:f6:aa:be:29:60:0e:4e:e0:de:
67:df:e3:5c:19:ab:76:4f:2f:fb:0d:87:2a:1f:78:c3:1a:72:
90:b6:54:5a:bc:52:73:aa:af:91:89:11:59:ef:36:b4:d6:51:
8c:51:09:0f:88:0d:53:bc:50:b6:66:ec:61:9a:53:35:35:7e:
db:fd:2f:4d:26:a0:35:4e:0e:61:ae:0f:01:8d:85:e4:5e:a9:
40:27:cc:3c:25:3a:e7:b9:fb:48:f7:92:d5:50:a0:58:ea:ff:
58:0d:ed:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 08:28:48 2026 by rpki-client