Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS203363.roa
File:                     AS203363.roa (raw, json)
Hash identifier:          tBHfbyd6tKuB8Y4sXiPIl3NxO0FzIelMKl+B1oi0EuM=
Subject key identifier:   FB:7D:FC:10:6A:10:74:03:29:79:99:93:9F:35:72:1C:C6:C8:F2:30
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       33CB15F4C31231A32D4AD6D01F3DBB3218E28774
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS203363.roa
Signing time:             Fri 23 Oct 2026 08:40:39 +0000
ROA not before:           Fri 23 Oct 2026 08:35:39 +0000
ROA not after:            Fri 22 Oct 2027 08:40:39 +0000
asID:                     203363
IP address blocks:        178.93.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 23:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:cb:15:f4:c3:12:31:a3:2d:4a:d6:d0:1f:3d:bb:32:18:e2:87:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Oct 23 08:35:39 2026 GMT
            Not After : Oct 22 08:40:39 2027 GMT
        Subject: CN=FB7DFC106A107403297999939F35721CC6C8F230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:65:77:1b:70:24:49:8a:35:16:a3:2a:6f:a9:
                    a9:f0:20:f9:b2:94:e1:5f:d6:a5:e1:16:01:3a:2c:
                    25:12:6d:e1:33:bc:4a:a5:f5:30:6b:08:ec:67:36:
                    72:2d:ec:25:f2:3b:8b:70:27:4f:0e:3c:8a:99:c2:
                    b5:6c:fe:6c:55:a2:f4:e7:cd:fd:40:b9:d1:fc:7b:
                    73:98:34:ac:d8:39:09:43:17:29:f1:02:f7:e3:e1:
                    8f:ed:8f:36:9b:b6:0a:56:ed:43:de:6e:1b:f9:82:
                    1c:ea:32:90:18:15:d9:77:cd:30:6a:16:06:02:19:
                    ac:6a:1d:90:75:2b:5d:72:98:7c:2c:33:64:ed:6e:
                    9d:fd:20:36:fb:f3:17:47:06:a8:99:1c:ab:08:b1:
                    8a:94:ec:08:a8:bb:16:8a:5f:f5:a8:81:11:bd:fb:
                    0e:39:64:c0:9d:62:f9:67:54:ed:af:32:12:7e:2c:
                    c0:21:7b:59:75:cd:3f:da:68:19:ce:7e:8c:32:49:
                    bd:1a:72:8e:26:f9:02:5c:1c:31:3c:91:b6:76:d3:
                    67:32:ff:2c:56:ef:33:f2:05:39:c9:3b:6c:bd:7b:
                    fd:aa:ff:67:d1:fe:92:6e:5f:e0:0e:c3:da:d2:4b:
                    0c:e7:37:e8:93:99:a2:bf:fb:d1:90:5b:87:6c:b8:
                    e0:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:7D:FC:10:6A:10:74:03:29:79:99:93:9F:35:72:1C:C6:C8:F2:30
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS203363.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.93.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:8b:de:5f:83:be:a8:9c:47:e5:8f:f9:34:29:55:12:53:fc:
         68:66:7e:14:1d:77:50:78:db:c2:87:4a:6f:3f:ce:c6:da:cd:
         40:ca:64:88:b9:10:18:9b:5d:86:14:44:a6:a4:ed:82:35:de:
         e1:9d:f3:bd:45:03:65:9c:d3:80:dc:d1:c4:b2:3e:e8:10:de:
         d3:72:f6:b1:44:69:06:30:54:46:15:d0:8b:04:66:4e:d3:31:
         c0:cf:0d:17:75:3f:aa:61:af:52:13:a1:42:3a:71:f4:cf:f4:
         1c:cf:e6:60:aa:a6:8b:35:e6:a6:9e:91:58:fe:ef:ed:01:27:
         01:6b:c8:d0:61:28:81:d4:75:2a:9a:cf:fa:3e:d1:68:a5:de:
         6d:50:49:81:fc:4f:10:16:9f:b6:51:a5:2d:0c:3f:a0:d2:c2:
         de:d3:06:1d:ed:0b:0c:5c:b1:ed:89:0c:4b:14:dc:e2:c9:07:
         04:74:58:fd:f5:6a:5e:37:59:3f:ce:b7:87:e7:c2:85:d0:06:
         94:52:0c:f7:d2:6f:5a:32:82:10:9e:5f:e4:98:09:bd:80:fa:
         33:68:e1:17:32:08:73:08:10:64:ec:02:8f:c8:fd:8d:89:df:
         de:f8:0d:42:f8:84:a4:e4:d9:da:5a:6a:78:9f:28:67:1e:ca:
         d8:89:c5:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:46:32 2026 by rpki-client