Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS203997.roa
File: AS203997.roa (raw, json)
Hash identifier: 6N0PT0UgH2IusEb5cMz9Xr6be+A/gQU9oRiN1yw9P/4=
Subject key identifier: 89:5E:DC:AF:03:3A:62:4B:DC:54:A9:B0:81:4E:B7:29:D3:4C:27:DB
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 0C46D0BB69731D92883E7E42A3AA6C7F0920F5AC
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS203997.roa
Signing time: Mon 12 Oct 2026 19:10:31 +0000
ROA not before: Mon 12 Oct 2026 19:05:31 +0000
ROA not after: Mon 11 Oct 2027 19:10:31 +0000
asID: 203997
IP address blocks: 141.11.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:46:d0:bb:69:73:1d:92:88:3e:7e:42:a3:aa:6c:7f:09:20:f5:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Oct 12 19:05:31 2026 GMT
Not After : Oct 11 19:10:31 2027 GMT
Subject: CN=895EDCAF033A624BDC54A9B0814EB729D34C27DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a7:98:19:1c:b1:d3:9c:50:17:ce:71:0b:a0:
76:14:1b:d7:0f:ce:49:25:21:43:c4:25:31:a2:94:
86:ff:41:6f:34:17:b6:2f:87:40:34:c4:3e:8b:c7:
5b:c0:cb:74:a9:24:14:f3:8d:36:18:d2:9e:48:46:
66:cb:93:57:d5:f2:14:06:6e:d2:80:b8:37:52:9a:
5d:57:b0:81:7e:40:e4:5b:cd:2d:4a:aa:fa:46:6c:
56:1c:d1:cd:8c:c9:10:f2:93:42:09:8c:96:e4:66:
a8:80:39:18:ee:7f:6a:fc:45:1b:ed:1a:d6:a2:1a:
dc:67:44:45:86:2c:74:e6:19:1b:34:35:ac:58:6b:
be:06:41:c1:97:a9:4a:0f:d7:7a:20:a3:b1:07:b9:
22:eb:23:dc:4a:26:30:36:f2:62:9f:fe:c8:ca:a4:
85:b7:bc:26:c7:cc:d5:77:49:1a:7d:2a:27:4a:bc:
bc:33:eb:90:3a:a7:a6:19:e4:2f:de:54:9d:b3:53:
94:5d:bf:6c:f6:64:c2:8b:96:79:26:eb:50:db:ac:
85:93:a2:ec:a8:35:ae:54:f4:d3:5b:4d:c5:7f:9c:
17:38:bb:0f:c2:d3:b3:23:36:e2:3f:1d:fa:c5:4d:
72:ea:ae:95:86:f9:96:65:d1:b6:bc:9d:69:4c:df:
a2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:5E:DC:AF:03:3A:62:4B:DC:54:A9:B0:81:4E:B7:29:D3:4C:27:DB
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS203997.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.60.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:7b:4b:ce:32:09:82:b5:63:67:cc:1d:1e:ae:7f:e3:ce:7e:
65:ad:b1:31:6d:47:ce:a4:8e:cc:f2:95:0f:34:0e:c2:c8:74:
f2:14:19:15:86:42:5a:32:d4:a7:11:44:98:37:94:84:ae:61:
84:89:40:ed:d5:c5:52:2c:e8:c3:13:48:73:b1:34:cf:86:7c:
57:7a:5b:8b:e4:4d:3f:1c:05:bc:5d:73:03:75:ac:bb:75:25:
18:81:ad:be:48:ce:13:71:c9:37:98:0f:75:ea:4c:5f:28:9d:
80:4a:ce:67:64:f9:f2:ae:57:15:11:e2:6a:23:d4:6b:34:55:
8b:a0:4b:84:af:7e:61:02:67:3f:13:c7:b1:d6:5c:80:16:05:
e0:b0:b5:d5:59:af:54:6e:5d:c5:27:01:d9:d2:5e:ba:70:50:
86:04:a7:6b:93:ba:6e:f9:59:dc:cf:d7:5b:96:81:02:0d:5c:
f9:d8:c7:a1:13:b5:13:dd:35:e8:08:a6:4d:e6:ea:a8:44:a5:
d6:eb:c0:84:bf:83:28:4a:0b:14:25:02:62:95:97:62:4c:3f:
f3:e3:73:94:68:05:ac:37:1f:ff:af:56:56:f7:0e:57:6d:9c:
c3:c9:5f:7c:e4:06:ab:bc:ab:c6:db:16:a1:38:45:bd:ea:09:
7c:32:ae:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:20:20 2026 by rpki-client