Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS203923.roa
File: AS203923.roa (raw, json)
Hash identifier: X1p9NnuaFp6xohnSWz9+CoEguKrDAqnWnNKL2D1AlK4=
Subject key identifier: 35:DF:55:F6:72:25:4A:F6:C5:F7:72:DE:B7:B1:2E:8A:3D:C4:74:C4
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 5755DCC2A18AD81A9800F60B31FDE48057F63CAB
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS203923.roa
Signing time: Tue 06 Oct 2026 00:05:39 +0000
ROA not before: Tue 06 Oct 2026 00:00:39 +0000
ROA not after: Tue 05 Oct 2027 00:05:39 +0000
asID: 203923
IP address blocks: 141.11.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 03:23:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:55:dc:c2:a1:8a:d8:1a:98:00:f6:0b:31:fd:e4:80:57:f6:3c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Oct 6 00:00:39 2026 GMT
Not After : Oct 5 00:05:39 2027 GMT
Subject: CN=35DF55F672254AF6C5F772DEB7B12E8A3DC474C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e0:83:1a:7e:52:2b:b5:41:32:25:03:e6:83:
6f:6b:f5:90:54:b1:68:0d:38:f5:6b:44:16:46:6b:
58:ce:4c:e3:a7:e4:48:f8:c1:3d:1c:0d:cb:d7:1d:
93:3e:24:91:b7:5f:c6:02:a5:ae:3a:45:0d:85:27:
69:13:4b:6e:c2:d2:b9:31:af:1c:0e:50:9b:a4:55:
9c:fa:73:43:62:f5:f3:4c:30:a6:a9:42:45:d7:ae:
3c:39:9c:cf:2f:c2:d1:a6:b9:fa:e0:1e:1e:d9:69:
55:d8:cd:c7:4d:77:83:54:1d:62:2d:b1:36:4d:2a:
66:7b:19:e8:8e:4f:01:6f:da:c4:3a:23:a7:4e:c9:
91:fd:02:b5:e1:22:e7:6b:ea:fb:be:bf:8d:0f:2f:
e0:b1:80:6f:25:f6:cc:4f:40:9d:35:d3:b1:7a:c6:
d9:db:50:ba:2e:0e:bc:98:05:73:04:01:07:39:38:
7b:02:1d:7a:3b:1c:7a:92:2c:c9:01:7a:48:95:3a:
cd:dd:3a:27:1e:96:cc:e8:ea:26:48:54:9d:21:d0:
4b:e6:84:1a:04:55:21:a7:7d:90:8a:12:d2:a2:b8:
7d:c3:00:4d:d0:27:48:76:2f:25:48:1e:19:97:e6:
b8:7c:2c:b0:24:ae:b3:f9:26:b4:9c:84:9d:c5:f6:
7f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:DF:55:F6:72:25:4A:F6:C5:F7:72:DE:B7:B1:2E:8A:3D:C4:74:C4
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS203923.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.193.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:12:69:5d:63:76:06:31:06:49:c2:2c:03:63:37:cd:3b:83:
dd:77:4b:1c:59:a6:b7:cb:35:e0:18:7c:d7:9c:fc:fb:74:40:
25:15:d4:1f:e5:ea:a8:fd:84:a2:9d:33:14:c4:80:9a:90:81:
17:05:67:9c:ba:f6:0f:05:00:8b:9d:a0:71:88:94:ab:c1:cb:
b9:22:ce:cd:f5:42:ce:cb:4b:34:ab:c7:10:09:ae:0c:3f:eb:
48:b1:59:1c:e8:58:bc:01:43:c8:99:37:0c:18:36:9e:46:93:
17:ad:bf:3e:58:f7:10:2f:30:d6:6d:3a:f4:b0:ae:6f:ac:e6:
63:b7:34:ad:7c:64:31:da:ef:47:ba:de:a2:32:68:38:92:39:
37:22:2a:53:5b:96:4f:92:96:28:5b:32:ed:06:fc:25:62:c0:
e4:69:0f:69:1c:73:4e:b2:8b:1b:42:58:0e:30:b2:15:07:84:
7f:56:a2:dc:76:e2:11:e5:ea:86:a5:fe:ef:69:e6:b0:80:b6:
8a:f5:ea:e7:db:e6:8e:a2:a2:2b:33:d0:b4:36:fd:5b:d1:36:
1e:0e:14:50:fa:f8:69:38:39:c8:92:e9:42:00:58:bb:73:ae:
4b:1f:30:07:c4:07:74:89:25:e4:6d:db:c3:c0:57:24:6a:8b:
8c:94:db:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 13:56:16 2026 by rpki-client