Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS203975.roa
File: AS203975.roa (raw, json)
Hash identifier: jXTYvt/g2/O1rdMe8N/MzeYViIcmpQc+vdWBNGrFYq8=
Subject key identifier: F2:E2:FA:FE:D2:3F:69:34:4B:5D:EA:5D:7F:D0:D9:CD:6B:40:6B:56
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 6FE731D8A0DD34DEA79B376F852AEF415726A5D9
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS203975.roa
Signing time: Sun 05 Jul 2026 19:06:09 +0000
ROA not before: Sun 05 Jul 2026 19:01:09 +0000
ROA not after: Sun 04 Jul 2027 19:06:09 +0000
asID: 203975
IP address blocks: 188.221.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 09:43:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:e7:31:d8:a0:dd:34:de:a7:9b:37:6f:85:2a:ef:41:57:26:a5:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jul 5 19:01:09 2026 GMT
Not After : Jul 4 19:06:09 2027 GMT
Subject: CN=F2E2FAFED23F69344B5DEA5D7FD0D9CD6B406B56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:95:87:5c:59:6b:4c:36:88:bb:0e:7c:66:bd:
6b:5f:30:69:a2:f3:a3:d8:ca:60:e8:b8:d1:6c:c8:
a0:98:28:23:33:22:b5:92:d4:1e:a1:d5:bd:e1:5a:
f2:b2:15:3b:db:e1:7a:d8:cb:fc:de:ba:72:9e:a5:
88:e6:6e:7f:86:7a:e8:4f:4b:3e:f6:ed:89:03:c1:
c0:b4:28:4f:5b:7f:4c:d1:6a:6c:cb:6b:60:5e:ea:
6a:20:1b:04:8c:fd:91:59:b0:dc:de:52:77:8d:d5:
b0:2d:06:60:1a:ce:03:d4:ec:5b:6b:71:8a:a7:73:
8c:ec:87:cc:30:88:40:c9:a8:25:2e:36:1c:f9:2c:
9f:db:c8:b5:0c:e0:6b:5f:85:f8:30:d4:a7:54:98:
4d:46:06:b1:d5:c7:22:bc:4e:75:25:8a:cd:f2:1b:
11:a2:8f:50:96:22:d9:9d:a9:7c:ff:ad:a8:45:58:
5b:93:ca:20:55:38:ef:94:88:b2:0a:c0:d4:36:09:
a8:8b:7d:38:b1:04:ba:6e:05:5c:37:5d:f5:d2:6d:
23:66:76:71:a1:47:18:81:fc:2e:f2:82:2f:dc:7d:
fa:d4:3e:3c:26:82:42:cf:4c:85:0e:dd:ab:75:1a:
b7:66:1a:12:75:52:0f:42:ef:8b:fc:17:0b:1c:4f:
67:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E2:FA:FE:D2:3F:69:34:4B:5D:EA:5D:7F:D0:D9:CD:6B:40:6B:56
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS203975.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.221.20.0/24
Signature Algorithm: sha256WithRSAEncryption
09:d9:2e:15:06:26:0e:6e:34:fa:94:96:4d:b2:c9:43:c4:9d:
1c:5e:e0:f8:0d:f2:a2:29:2f:fa:2d:5a:55:e7:c0:d8:00:73:
c6:d7:b4:a9:c2:3c:81:12:5e:c6:bc:53:b9:e3:a4:94:4b:6f:
f9:36:cf:08:3e:04:6e:31:20:04:7f:4e:cb:d7:e4:0a:5a:3a:
62:18:d0:ac:b7:94:c0:11:b8:f8:ca:8a:38:76:46:25:d8:4a:
e8:04:a8:e0:39:d2:55:73:8e:1f:04:1c:d4:1d:ed:55:ae:9e:
46:aa:62:e5:62:3a:24:c8:f0:9f:97:4f:6f:96:46:1d:41:c5:
df:e2:19:04:25:90:19:3e:77:d5:a5:d0:c6:85:3e:77:ab:6b:
90:62:36:34:a5:47:0a:67:6a:9e:05:f7:a0:55:f3:12:2b:c9:
a2:a8:4d:a0:50:18:5d:ad:9c:31:f4:f1:7e:a7:6a:4d:83:93:
65:9a:33:55:83:60:45:b8:94:69:50:ec:ef:b7:c4:f8:8f:af:
61:86:68:ed:2a:23:99:a3:82:56:cd:57:46:42:81:92:3a:8d:
ae:cd:e6:6e:6b:82:3e:69:39:65:06:d0:2b:3b:20:63:da:08:
3e:6d:86:27:c4:0b:8c:fc:8a:ab:3e:17:04:1d:18:1b:b8:cf:
9f:d3:97:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 18:43:21 2026 by rpki-client