Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS203048.roa
File: AS203048.roa (raw, json)
Hash identifier: cFQh/BPggisvzGUjmIi0vqVMa2q27n2Py+NVe7vlPxc=
Subject key identifier: BC:C5:0E:5D:15:B4:B5:25:77:C9:F6:A8:63:30:CA:13:A9:BA:B8:FD
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 66B3B02876D8EA1FE6C185C4F233046D89323E08
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS203048.roa
Signing time: Wed 08 Jul 2026 19:39:33 +0000
ROA not before: Wed 08 Jul 2026 19:34:33 +0000
ROA not after: Wed 07 Jul 2027 19:39:33 +0000
asID: 203048
IP address blocks: 141.11.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 09:43:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:b3:b0:28:76:d8:ea:1f:e6:c1:85:c4:f2:33:04:6d:89:32:3e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jul 8 19:34:33 2026 GMT
Not After : Jul 7 19:39:33 2027 GMT
Subject: CN=BCC50E5D15B4B52577C9F6A86330CA13A9BAB8FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f1:46:87:db:b2:af:ef:34:07:3a:85:48:8f:
14:7c:62:8e:e8:29:21:98:15:92:fd:4c:d5:c8:68:
1f:84:8e:ba:3d:25:e6:af:9e:a0:b7:45:6c:03:33:
b5:52:17:52:df:72:27:a7:b3:de:e6:ba:4d:81:c8:
c8:fc:b8:94:a0:ea:4a:1c:4a:47:bd:0b:d0:27:30:
65:42:94:dd:07:d5:41:aa:85:f1:19:a3:a0:74:27:
34:dd:12:1d:6f:ff:64:9f:ad:90:ba:3f:f8:01:59:
8c:32:bf:22:7c:1c:4c:54:f8:1f:dd:d7:c5:00:06:
f6:20:85:81:04:4c:2e:8d:22:a3:c1:fd:49:f3:63:
77:92:74:77:93:bb:69:cb:ee:ec:f0:de:d7:1c:de:
ae:4e:2a:87:ee:58:5b:55:82:34:3c:be:10:c0:c5:
93:6d:8c:2d:66:06:9e:89:e6:12:9c:4a:92:1b:32:
fe:59:13:fc:b9:6d:4e:91:72:ce:b0:88:b7:6f:25:
41:6b:e9:44:99:c5:a9:39:c8:97:e6:c4:b8:8c:31:
0f:95:ad:0b:aa:0a:99:72:08:a5:57:a1:f8:a0:b0:
31:4e:8c:86:6e:cc:17:f6:2d:fe:39:46:eb:71:ff:
94:96:5f:8e:8e:94:80:c2:08:88:57:41:1e:d9:4f:
51:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C5:0E:5D:15:B4:B5:25:77:C9:F6:A8:63:30:CA:13:A9:BA:B8:FD
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS203048.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.175.0/24
Signature Algorithm: sha256WithRSAEncryption
93:71:18:47:4a:4e:f8:8c:c2:4e:00:58:f3:d0:75:ce:66:f9:
0a:6b:94:85:56:bb:7c:01:32:4e:c5:0a:37:47:b1:36:48:86:
93:ef:c2:c7:57:bc:ec:9e:b8:fe:3e:de:f0:e9:1c:4c:c2:f1:
6f:d7:ef:74:aa:68:06:70:24:aa:65:10:73:56:f4:a5:82:16:
51:e4:7b:2e:8a:c1:87:3e:1c:3e:04:5b:22:6a:17:d3:58:55:
aa:01:bb:68:f8:c5:28:5a:28:90:c2:07:77:67:77:05:58:ef:
b2:21:ae:c1:c6:30:77:2e:cd:85:50:09:a5:81:c6:b4:93:52:
97:4f:45:0f:ae:f2:36:38:99:bc:c1:66:62:f1:b0:f9:a7:97:
d5:fb:b6:e3:cd:3e:8f:1b:e5:f0:4f:10:db:9d:1d:97:40:ba:
7a:aa:ce:40:93:4c:c5:ee:30:a6:db:0d:b4:9f:48:ef:4f:33:
f8:48:32:2f:4f:8a:31:f2:dc:fd:76:0c:f6:b9:79:72:00:b8:
45:c9:c0:f7:5b:25:e9:03:09:e6:68:0e:c2:0c:63:91:b3:eb:
43:c9:c2:0f:7e:78:ef:bb:ab:a8:be:20:e8:0e:e5:c4:7d:d9:
17:49:a2:f8:42:0f:91:f8:5d:8a:04:b6:51:71:8c:e2:bf:85:
45:0b:f9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 01:10:34 2026 by rpki-client