Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS203971.roa
File: AS203971.roa (raw, json)
Hash identifier: 8QyVHJNfHWLDhjnfF9mv5RfbpoUzcoBQ2J6E5ofqXi4=
Subject key identifier: 02:04:97:A6:A3:C3:09:41:02:33:9B:2E:62:51:B1:53:BD:B5:D3:68
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 7FA5BA095DAEF0CE28653431D833466454541BFF
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS203971.roa
Signing time: Thu 18 Jun 2026 08:49:26 +0000
ROA not before: Thu 18 Jun 2026 08:44:26 +0000
ROA not after: Thu 17 Jun 2027 08:49:26 +0000
asID: 203971
IP address blocks: 188.220.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 09:43:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:a5:ba:09:5d:ae:f0:ce:28:65:34:31:d8:33:46:64:54:54:1b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 18 08:44:26 2026 GMT
Not After : Jun 17 08:49:26 2027 GMT
Subject: CN=020497A6A3C3094102339B2E6251B153BDB5D368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d8:dc:40:f0:15:db:cc:80:e1:25:92:44:92:
e4:7b:a3:4b:97:ed:22:3b:dc:4a:49:e7:16:7d:38:
22:42:1e:98:7c:26:02:bf:0c:fb:cf:8b:c6:b9:39:
0e:92:8e:03:a8:6f:77:9f:88:b6:d2:a9:97:db:04:
92:8a:17:bc:6a:19:5b:fb:0c:77:21:2d:e4:7f:a3:
7f:24:00:e7:e7:0b:e7:86:61:e5:c5:b1:3c:ce:23:
26:c4:d3:3f:3a:7b:cb:8a:06:24:cb:4c:d1:55:c9:
7c:b8:11:28:d3:a4:8d:75:0e:50:70:e1:52:91:68:
12:d9:94:63:28:18:90:ed:81:00:1b:a1:c0:e6:5d:
1f:1b:fc:6b:80:4c:a9:73:e3:6c:9d:ed:c6:53:c6:
a4:0d:93:f7:ee:0e:16:95:5b:71:bf:5a:a4:b2:b7:
4e:8a:df:90:8a:97:ee:5f:a4:55:d0:ee:18:40:a7:
cc:35:5f:2e:57:e8:b7:eb:da:ba:f8:dc:7f:89:02:
d9:63:28:a4:20:10:78:c4:f1:48:d9:33:ac:24:50:
90:1a:19:bb:3a:7c:27:c0:82:48:97:54:e7:af:d7:
29:ef:26:dc:45:2b:96:ef:78:49:f0:1b:f9:8f:45:
fd:ba:e5:70:51:a7:4c:43:d0:29:13:1c:e4:72:6b:
c8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:04:97:A6:A3:C3:09:41:02:33:9B:2E:62:51:B1:53:BD:B5:D3:68
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS203971.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.220.124.0/24
Signature Algorithm: sha256WithRSAEncryption
14:b0:99:c6:62:08:a8:de:13:b0:c5:34:a3:13:23:fd:78:51:
9b:c0:1f:d2:c6:dc:de:af:ce:7e:99:dc:e5:c8:d7:e3:83:79:
1d:aa:b7:9e:26:cd:0b:6f:27:8b:34:37:a6:6e:bc:e0:72:20:
99:50:66:87:c0:08:76:e6:ee:80:28:4e:f9:a2:50:de:35:b4:
f5:cc:ba:61:6a:64:7d:85:ef:64:2d:c3:39:02:8f:68:1e:55:
19:d5:de:c8:c1:56:90:be:59:01:ee:9d:02:21:95:61:74:bb:
c6:e8:07:99:e8:de:aa:af:cc:43:5c:b1:00:03:b5:03:af:00:
3d:92:43:5a:be:e8:93:d2:5d:6f:82:82:e2:13:41:64:cc:b6:
50:2a:96:3c:42:85:22:31:dc:ae:53:a9:2c:d8:1c:ea:f8:1f:
82:d6:61:19:c1:f0:05:49:3f:a4:68:cc:6e:67:56:86:78:de:
82:ef:75:44:04:ce:d4:ec:65:ab:b8:4f:1a:14:5b:25:f1:b8:
f7:a3:03:5e:cd:3a:52:76:a0:87:bc:c3:d2:ec:1e:43:32:71:
aa:30:a3:fd:45:4b:ab:3c:7b:4a:17:e0:7e:a0:77:ac:98:47:
57:6f:f4:02:60:d7:04:63:90:a5:85:48:d5:bf:5b:de:ab:d4:
5c:51:4f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 18:42:56 2026 by rpki-client