Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS203058.roa
File: AS203058.roa (raw, json)
Hash identifier: /9KHTb1hU+ZONE4AlSmgVTpDo22g3bPCk9U7CW2bwp4=
Subject key identifier: 73:DF:1A:C2:3A:AC:B7:0E:61:F0:65:4B:F1:3B:38:F6:CB:19:8A:0E
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 0D09B64B18AF57EF0922284561BC9F4F999B7CBC
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS203058.roa
Signing time: Wed 19 Aug 2026 09:35:22 +0000
ROA not before: Wed 19 Aug 2026 09:30:22 +0000
ROA not after: Wed 18 Aug 2027 09:35:22 +0000
asID: 203058
IP address blocks: 141.11.154.0/24 maxlen: 24
141.11.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 12:33:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:09:b6:4b:18:af:57:ef:09:22:28:45:61:bc:9f:4f:99:9b:7c:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Aug 19 09:30:22 2026 GMT
Not After : Aug 18 09:35:22 2027 GMT
Subject: CN=73DF1AC23AACB70E61F0654BF13B38F6CB198A0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8c:11:81:10:e4:de:9b:29:45:1c:be:9e:81:
ca:bb:07:fe:92:fd:dd:3c:2b:92:d7:b8:b3:a2:a1:
7f:69:0f:4e:0e:bd:a9:d2:e8:e4:c1:27:3d:bf:e4:
49:6b:2f:59:4f:42:61:63:b1:11:6a:7a:b1:aa:2c:
0f:38:28:63:2a:11:a1:3e:30:dd:0d:07:a5:8a:da:
01:15:87:ce:f6:8e:60:18:f1:fb:c8:70:1b:e4:70:
d7:38:10:7b:2b:8c:6c:81:9b:a2:30:66:d5:98:23:
d9:e9:c9:60:8b:e9:db:a3:b2:4b:21:ca:ff:e7:aa:
b6:d6:9a:b7:0c:42:96:3a:29:3c:6c:0e:7a:75:4a:
78:eb:66:60:84:49:87:f2:d0:b1:f8:fa:62:ce:e9:
8b:b7:51:27:9e:a7:a3:45:de:0a:69:aa:24:d6:15:
58:49:45:b6:74:b8:5d:54:50:5b:46:32:85:42:46:
e0:2a:26:09:50:53:88:33:5b:85:f0:c6:a4:a1:b3:
68:d6:57:97:64:9c:32:d4:a9:c1:11:8c:bd:b0:12:
73:32:31:8d:90:b0:09:ef:c8:3d:b3:b6:2e:70:d3:
03:c9:38:63:71:da:40:bb:47:f1:1e:fc:2c:54:b2:
65:7a:7d:93:c3:eb:54:88:49:83:3b:08:12:90:8c:
1e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:DF:1A:C2:3A:AC:B7:0E:61:F0:65:4B:F1:3B:38:F6:CB:19:8A:0E
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS203058.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.154.0/24
141.11.156.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:0a:11:52:35:be:68:a2:04:cc:24:1b:ef:04:4f:8e:b5:ee:
a2:17:49:48:1a:60:4a:fa:b4:4f:ff:2e:93:9f:1d:71:6c:68:
c3:4e:87:ff:5e:b4:28:72:b0:1d:61:fc:f0:c0:46:70:9d:df:
da:7d:d5:10:c5:50:32:ea:48:4d:0d:1d:93:ff:82:98:ce:20:
c8:55:1e:94:e6:ae:85:bf:49:7a:56:c8:16:02:60:0c:d1:fa:
ce:93:e6:47:e6:16:d3:36:06:71:66:05:c1:6b:15:5b:4e:9f:
5a:a5:c5:00:8a:60:e7:99:a8:50:4c:16:38:c1:60:6e:38:5b:
70:e9:db:0c:80:5c:32:d1:d7:bd:03:35:ec:90:77:0a:a2:fe:
6d:01:25:fe:3a:38:48:d0:df:d5:2e:0c:46:68:d1:ab:1a:d8:
e3:be:a1:18:2d:62:74:c5:2b:8a:f2:8b:ac:48:9f:d4:33:e9:
97:4e:1e:d9:91:7c:66:f5:22:c9:46:03:8a:a2:ad:73:1f:72:
23:65:07:a3:f2:5e:05:7a:a1:be:cf:14:6b:06:20:ec:ec:d3:
56:60:f3:d8:fa:72:06:4f:58:ad:95:a7:59:c3:d4:fb:ec:f8:
6f:68:30:ff:9d:e5:90:9c:a1:82:95:32:bf:f5:c7:ab:b2:c3:
8e:10:23:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:27:14 2026 by rpki-client