Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS203545.roa
File: AS203545.roa (raw, json)
Hash identifier: Di4Wu/3w/RUVI6l2nfXzQyFsDrF7bWTyHXvMoDAtfW4=
Subject key identifier: 16:F3:F4:19:07:2E:92:69:B4:77:10:00:1E:49:83:77:85:5C:64:E2
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 0B1C6CA44C2A6F5D68BCD16D4684D2BB9D3629C8
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS203545.roa
Signing time: Mon 27 Apr 2026 00:04:20 +0000
ROA not before: Sun 26 Apr 2026 23:59:20 +0000
ROA not after: Mon 26 Apr 2027 00:04:20 +0000
asID: 203545
IP address blocks: 92.112.71.0/24 maxlen: 24
95.135.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:1c:6c:a4:4c:2a:6f:5d:68:bc:d1:6d:46:84:d2:bb:9d:36:29:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Apr 26 23:59:20 2026 GMT
Not After : Apr 26 00:04:20 2027 GMT
Subject: CN=16F3F419072E9269B47710001E498377855C64E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:49:6a:0a:a2:2c:a9:57:13:96:9e:aa:ef:62:
0b:1c:00:bd:b0:0e:03:48:c8:16:f8:7a:a4:ca:dd:
a4:9b:65:44:2c:e5:85:ed:cd:10:27:73:b0:b1:62:
f0:66:42:cc:e3:fb:88:14:50:5f:8c:ac:f8:a9:d6:
b5:28:c9:ca:dc:27:92:79:8f:2a:5d:f0:06:1c:c7:
0c:95:d5:97:da:38:a3:9c:b4:48:fe:1f:1c:08:b1:
61:34:e5:07:21:4a:52:02:c4:6a:55:12:9e:99:8d:
d1:be:40:52:5c:c1:d9:35:fd:3e:71:0b:9e:7c:9f:
c7:3c:6a:38:4b:02:a3:a7:39:d9:62:a5:4b:ba:b6:
b3:a8:cd:b7:ed:b3:44:f5:d0:01:bc:c7:7e:25:fc:
d6:67:62:e1:3c:79:23:1a:f5:fe:e5:7e:df:8c:2f:
40:d5:61:e6:d6:9e:6e:ad:11:bf:f3:36:bb:89:25:
41:8a:5a:8f:36:9d:79:bf:a2:69:bc:e0:73:c6:44:
60:10:25:77:a4:c0:d0:dc:05:fb:e2:15:7f:84:bc:
72:84:71:23:56:a3:6d:e3:84:72:4a:2c:db:d8:b0:
70:8d:ea:1e:9c:9d:f8:6d:ad:e9:22:ca:ff:65:33:
ed:47:d0:ce:cf:7b:4e:76:17:bb:da:db:27:6a:78:
49:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F3:F4:19:07:2E:92:69:B4:77:10:00:1E:49:83:77:85:5C:64:E2
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS203545.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.112.71.0/24
95.135.228.0/24
Signature Algorithm: sha256WithRSAEncryption
17:fd:0b:c8:6d:47:fb:d0:c3:2f:90:d4:cd:eb:60:90:d0:de:
7d:2c:7a:a1:73:43:f5:a1:f4:11:e3:c9:92:3d:4c:ae:ea:45:
b4:79:c1:53:80:fe:4f:57:47:8f:b4:0f:a6:eb:78:10:97:9e:
a1:61:8e:4e:04:22:78:6d:af:2c:34:98:87:50:23:af:12:6a:
f6:d4:6f:ea:26:cb:b5:c3:a4:f5:13:7b:ad:c5:66:53:22:94:
80:52:c8:25:81:f1:55:f6:10:76:1c:c9:d0:b8:1f:84:04:07:
04:1f:56:64:a8:c8:f7:f6:11:5c:ba:5b:2e:ce:57:a8:fc:e6:
e8:0b:92:32:d7:96:91:42:3a:42:df:80:51:6b:bb:8a:93:91:
b2:d0:30:4e:ca:6f:94:17:20:b0:b5:05:7a:e1:6f:e0:30:02:
dc:0d:ae:20:74:43:3a:f7:93:76:e1:89:13:89:cd:06:b3:f4:
15:23:97:44:7a:57:f1:03:4e:ab:04:65:be:4b:07:9a:7d:44:
3a:f7:c5:06:f5:94:fb:db:e2:c5:06:54:79:f0:b7:67:2f:7a:
5f:2a:2d:ca:b0:0b:67:8d:20:a9:09:3a:83:ce:48:b6:3f:c8:
13:91:80:96:5f:8c:d3:98:c5:0f:11:33:49:e6:3d:7b:7d:fd:
1a:80:d9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 06:26:58 2026 by rpki-client