Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS203363.roa
File: AS203363.roa (raw, json)
Hash identifier: 0suFFAkFAZpJI/i6ne96BBvZEveDMyRyVKWK8QfI/r0=
Subject key identifier: 80:2D:34:D2:90:5B:9F:1D:4A:24:17:50:2C:2B:34:37:CE:FD:0C:93
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 5B680B5D3750528DA9D401433C11BFBAB471B820
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS203363.roa
Signing time: Sat 25 Jul 2026 08:11:29 +0000
ROA not before: Sat 25 Jul 2026 08:06:29 +0000
ROA not after: Sat 24 Jul 2027 08:11:29 +0000
asID: 203363
IP address blocks: 178.93.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Jul 2026 11:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:68:0b:5d:37:50:52:8d:a9:d4:01:43:3c:11:bf:ba:b4:71:b8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jul 25 08:06:29 2026 GMT
Not After : Jul 24 08:11:29 2027 GMT
Subject: CN=802D34D2905B9F1D4A2417502C2B3437CEFD0C93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:49:be:d9:78:6c:92:79:00:47:96:3b:5e:1d:
2d:28:f0:01:67:0e:66:55:1a:d0:1e:f7:74:90:11:
9f:d7:26:a6:33:8e:4d:1f:64:89:f0:da:44:05:5e:
79:c2:94:e1:07:d9:33:73:37:1e:cd:71:c3:27:26:
51:ea:a4:c6:63:08:42:17:08:ee:a6:cf:fd:b3:1b:
cd:73:56:47:f9:01:aa:51:20:56:e1:ef:90:8b:6b:
40:62:24:ee:37:51:d2:fe:a0:6b:09:2f:4f:7d:be:
49:b0:e7:69:ec:97:19:3f:a9:14:9b:01:a3:06:92:
5b:ad:97:1f:0c:47:62:10:c9:27:e9:3e:4e:ce:bc:
58:97:5e:8a:54:7e:29:60:dd:12:30:be:2d:2a:dd:
56:1e:2c:1b:43:99:05:6c:78:a1:e9:7e:57:6e:82:
b5:50:d3:41:6d:05:99:75:39:5d:8d:6d:71:3b:16:
5f:2b:85:77:a5:0c:a9:90:fb:75:1e:9b:ec:04:ba:
81:e6:70:64:b8:1a:cf:00:80:54:21:fb:02:a0:f6:
75:32:64:78:95:0a:82:91:36:a3:4b:0b:73:81:e2:
04:51:75:27:83:d2:f5:16:e3:c1:90:78:97:5b:5c:
a2:c6:53:89:5b:8b:78:a5:63:1b:82:8e:6c:13:cb:
72:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:2D:34:D2:90:5B:9F:1D:4A:24:17:50:2C:2B:34:37:CE:FD:0C:93
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS203363.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.93.148.0/24
Signature Algorithm: sha256WithRSAEncryption
84:5c:91:f1:a2:77:71:3d:21:2f:16:02:30:81:7b:3c:62:6a:
1c:82:92:be:fb:5e:fa:1e:b9:2b:16:cf:4e:df:47:1b:3b:10:
48:67:6f:e3:3b:fe:c2:c5:8f:41:7f:21:7c:3c:0c:1d:8e:56:
99:de:c9:f9:3c:b7:e7:b2:21:af:1d:5e:c0:dc:84:08:4a:85:
f1:26:ef:7d:51:c0:72:00:5b:d4:b9:14:7a:68:05:29:5d:f4:
e5:c0:ec:d1:c6:61:43:e3:25:66:8c:88:66:e1:01:5e:d5:3d:
34:ab:d6:4d:6e:4b:a8:a4:4a:de:11:24:f6:39:49:d2:64:6d:
4c:19:30:fe:cf:86:2d:b5:5a:2d:57:c9:a9:7f:05:b6:0f:1a:
4f:49:4e:0a:9f:c7:0f:c6:d5:69:04:65:6e:c8:34:4c:9f:29:
4d:60:f1:0d:7c:88:8c:4b:82:89:30:bb:6b:d6:0f:bf:be:07:
cc:d1:3a:8d:55:87:5f:f8:99:f2:ec:8e:33:47:91:0b:42:33:
60:0b:11:56:83:a0:6e:df:73:ed:91:42:2e:f0:ce:e1:cc:61:
55:7b:57:ea:8a:e0:8c:57:3b:b0:91:ff:85:b2:c6:58:f7:a1:
3a:89:4b:25:77:45:16:ab:4e:7f:e2:c5:08:64:70:73:63:b7:
ef:83:6c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 21:05:46 2026 by rpki-client