Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS203149.roa
File: AS203149.roa (raw, json)
Hash identifier: 9Udbz4sEi1iBtA+4JyVHQMYDT8lDV9bfQkgKu/kJols=
Subject key identifier: 5F:4D:49:AD:F3:A8:8A:9A:32:98:C3:4F:B3:E5:39:B7:C0:A6:F0:EE
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 31558A0EBDA08F7B86EA3426B983A9150F259E24
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS203149.roa
Signing time: Thu 02 Apr 2026 10:28:41 +0000
ROA not before: Thu 02 Apr 2026 10:23:41 +0000
ROA not after: Thu 01 Apr 2027 10:28:41 +0000
asID: 203149
IP address blocks: 178.95.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 Apr 2026 14:19:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:55:8a:0e:bd:a0:8f:7b:86:ea:34:26:b9:83:a9:15:0f:25:9e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Apr 2 10:23:41 2026 GMT
Not After : Apr 1 10:28:41 2027 GMT
Subject: CN=5F4D49ADF3A88A9A3298C34FB3E539B7C0A6F0EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:da:2a:7f:50:99:73:dc:16:2d:b7:05:e1:b9:
cf:00:77:72:cf:a5:26:b3:83:b7:b8:04:56:98:3b:
ff:7a:c7:53:5a:2e:b2:33:4d:d3:03:54:44:d6:af:
15:8d:5b:fd:49:16:f3:cc:8b:cb:67:f5:18:ec:57:
35:21:8e:08:8b:19:c7:96:c7:46:2b:6f:a7:21:9b:
cf:4e:0d:5b:f8:6a:d7:b7:6f:80:72:b5:35:98:66:
ac:81:0e:9f:46:4e:e7:ae:90:8f:4a:7b:51:d4:28:
3b:53:d8:6a:4e:79:38:78:41:7b:05:41:d3:91:e2:
7e:de:8e:f6:33:b5:cb:41:5a:52:0b:a5:17:29:ae:
04:76:ed:4c:64:72:0b:a3:fa:c2:cd:4c:9b:a4:41:
8c:c6:f5:52:56:2c:c7:46:a4:3e:d5:fe:7a:ab:2d:
d9:df:cd:fb:ac:60:4e:ba:ce:f4:cb:c1:56:26:d7:
e0:67:ce:30:44:34:5a:4c:af:b5:f9:31:b6:8e:b8:
e5:97:35:5d:2b:da:36:65:bd:ad:b1:1b:46:b3:e9:
22:ea:5f:83:43:66:e7:1f:b4:57:9d:9c:e7:be:c3:
e6:a6:e5:d0:16:d4:c0:3a:a9:53:20:91:8a:b4:ab:
0b:e8:40:f6:b4:c1:f7:04:35:9e:c1:e2:82:1e:71:
a3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:4D:49:AD:F3:A8:8A:9A:32:98:C3:4F:B3:E5:39:B7:C0:A6:F0:EE
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS203149.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.95.185.0/24
Signature Algorithm: sha256WithRSAEncryption
65:20:12:f2:07:c8:c4:15:ae:d3:4e:c1:1d:25:e8:db:6e:b5:
6a:65:2c:7b:a0:dd:80:16:3c:3d:56:33:b9:08:27:06:bc:a0:
0f:01:61:e4:4c:52:3f:02:49:ce:ae:c5:61:31:20:f9:90:dc:
54:27:55:42:ec:93:29:33:ce:a0:04:03:f0:2e:49:5d:f3:06:
a6:1b:57:1d:67:48:6a:61:56:2c:de:1f:5e:6c:a2:cd:3e:4b:
7c:12:c7:e7:72:90:46:74:9a:59:b5:e6:b1:68:fe:29:02:c4:
a0:8a:64:e6:87:73:b4:c4:84:fc:13:34:7f:3c:7d:38:83:39:
cd:4d:d0:b6:58:2c:6a:3c:28:5f:9b:88:a0:60:20:59:02:ef:
0f:14:fe:b7:34:93:4b:72:d6:6c:6f:b7:7d:dd:e1:c1:3c:39:
cc:93:83:cb:f3:fd:d7:a5:b9:ad:2b:5b:dc:d7:a8:57:51:bd:
da:c7:c2:f0:73:2a:ce:01:37:43:1a:17:45:81:04:4e:d0:f0:
2c:13:82:72:fa:b5:91:67:4b:9c:b6:9c:ab:32:83:c0:1c:bb:
dd:f7:4a:b6:28:fc:42:40:45:17:33:f6:2d:4d:c5:bd:0c:4a:
fe:6a:ee:9f:e1:d1:ff:ab:50:b6:49:8f:12:ec:b4:b9:09:60:
66:be:02:b3
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUMVWKDr2gj3uG6jQmuYOpFQ8lniQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjA0MDIxMDIzNDFaFw0yNzA0MDExMDI4NDFaMDMxMTAvBgNV
BAMTKDVGNEQ0OUFERjNBODhBOUEzMjk4QzM0RkIzRTUzOUI3QzBBNkYwRUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo2ip/UJlz3BYttwXhuc8Ad3LP
pSazg7e4BFaYO/96x1NaLrIzTdMDVETWrxWNW/1JFvPMi8tn9RjsVzUhjgiLGceW
x0Yrb6chm89ODVv4ate3b4BytTWYZqyBDp9GTueukI9Ke1HUKDtT2GpOeTh4QXsF
QdOR4n7ejvYztctBWlILpRcprgR27Uxkcguj+sLNTJukQYzG9VJWLMdGpD7V/nqr
LdnfzfusYE66zvTLwVYm1+BnzjBENFpMr7X5MbaOuOWXNV0r2jZlva2xG0az6SLq
X4NDZucftFednOe+w+am5dAW1MA6qVMgkYq0qwvoQPa0wfcENZ7B4oIecaMXAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUX01JrfOoipoymMNPs+U5t8Cm8O4wHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjAzMTQ5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsl+5
MA0GCSqGSIb3DQEBCwUAA4IBAQBlIBLyB8jEFa7TTsEdJejbbrVqZSx7oN2AFjw9
VjO5CCcGvKAPAWHkTFI/AknOrsVhMSD5kNxUJ1VC7JMpM86gBAPwLkld8wamG1cd
Z0hqYVYs3h9ebKLNPkt8EsfncpBGdJpZteaxaP4pAsSgimTmh3O0xIT8EzR/PH04
gznNTdC2WCxqPChfm4igYCBZAu8PFP63NJNLctZsb7d93eHBPDnMk4PL8/3Xpbmt
K1vc16hXUb3ax8LwcyrOATdDGhdFgQRO0PAsE4Jy+rWRZ0uctpyrMoPAHLvd90q2
KPxCQEUXM/YtTcW9DEr+au6f4dH/q1C2SY8S7LS5CWBmvgKz
-----END CERTIFICATE-----
Generated at Thu Apr 2 18:26:11 2026 by rpki-client