Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS203771.roa
File: AS203771.roa (raw, json)
Hash identifier: U7Iz6KXljW54Xr51/Vdz0Nnuhyux3O4ETCkl4xwdlxI=
Subject key identifier: EA:82:C5:C7:CA:2A:DC:84:FF:70:DF:04:7A:15:8B:06:4B:08:D0:34
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 52B102775D3B91CFA5C8CECE9E4F5BED9E9FCFAC
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS203771.roa
Signing time: Sat 14 Feb 2026 08:51:27 +0000
ROA not before: Sat 14 Feb 2026 08:46:27 +0000
ROA not after: Sat 13 Feb 2027 08:51:27 +0000
asID: 203771
IP address blocks: 91.124.37.0/24 maxlen: 24
92.112.71.0/24 maxlen: 24
95.135.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 24 Feb 2026 15:38:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:b1:02:77:5d:3b:91:cf:a5:c8:ce:ce:9e:4f:5b:ed:9e:9f:cf:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Feb 14 08:46:27 2026 GMT
Not After : Feb 13 08:51:27 2027 GMT
Subject: CN=EA82C5C7CA2ADC84FF70DF047A158B064B08D034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:69:c8:47:9b:fe:72:3d:8f:da:01:86:d3:8b:
73:f5:d0:58:e9:cf:1d:57:75:50:7c:49:bc:61:ca:
52:5f:70:59:b5:21:57:91:4d:47:cf:1b:3f:f3:70:
e4:ff:12:ce:1d:13:18:fb:c7:cc:06:ec:2e:79:09:
4d:72:c3:a9:39:35:98:52:f6:54:ee:21:8e:02:2b:
3c:31:8d:0f:a0:95:64:51:06:02:8a:d3:3f:fa:74:
56:ca:85:f8:ff:c9:71:2e:41:dd:02:78:f4:65:9c:
32:a0:6d:22:95:6b:22:82:3e:82:10:9e:8b:63:aa:
44:f0:62:c5:3a:d8:98:6a:e7:bb:db:7f:48:07:65:
8c:8c:90:13:68:91:45:7a:de:eb:75:dc:bb:e2:08:
d9:d5:1e:9c:d0:9e:9a:8f:b6:77:78:3a:8b:69:a9:
c9:9e:6b:0d:ae:3f:e0:34:c3:f9:03:9b:2c:bd:09:
58:85:51:8c:37:e0:2f:68:0a:97:f8:52:52:25:41:
0f:93:a0:70:f9:e0:3d:4e:5c:7b:9b:a4:d8:43:84:
b0:2e:d0:43:ef:ef:17:14:ea:47:98:d3:6c:11:5c:
f1:4e:84:8d:fc:57:1c:d2:84:d0:e0:ac:41:e2:1e:
a9:a2:bb:74:15:b6:58:4c:e2:bf:90:4d:03:14:ab:
99:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:82:C5:C7:CA:2A:DC:84:FF:70:DF:04:7A:15:8B:06:4B:08:D0:34
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS203771.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.37.0/24
92.112.71.0/24
95.135.228.0/24
Signature Algorithm: sha256WithRSAEncryption
56:c3:81:30:28:57:85:42:5d:83:7f:8c:b8:18:8f:2c:4d:3f:
4a:09:2f:2b:a5:51:91:cc:7e:1f:01:da:dd:52:6b:0b:e8:01:
22:36:1f:2b:b6:7f:b3:0d:0f:c3:72:65:d3:51:62:74:03:6e:
10:23:73:43:00:8a:76:d7:c7:4c:51:06:b5:bd:ff:6f:0e:e2:
aa:20:df:07:05:50:0a:e4:d0:34:16:fc:c8:35:c4:d4:e3:86:
0a:7b:4b:8b:e6:20:49:3f:a4:cc:35:df:53:db:83:a0:be:44:
aa:d1:a8:6c:90:26:59:cc:95:fd:e3:74:e9:8e:0e:09:da:12:
63:13:32:2f:92:71:f8:ef:9c:4b:8f:3a:ea:b0:99:49:0b:2d:
78:58:9d:9f:87:d0:bc:84:fd:ba:3b:a5:59:64:9f:de:7d:23:
0f:cf:44:db:b2:05:65:0e:6f:1e:02:9b:3c:70:fc:59:3c:38:
38:cf:f3:83:8b:ff:44:d4:71:91:fb:f3:b0:13:07:61:ec:3b:
77:e3:4e:08:72:92:aa:6b:2b:79:20:f1:8b:17:5a:c1:5a:89:
28:57:64:8f:8e:34:f4:c7:ab:b0:d3:1a:e8:1b:10:b3:78:33:
51:a0:22:79:64:27:9d:2f:2e:12:0b:4c:79:c3:02:0a:bf:1c:
13:c0:49:9d
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIUUrECd107kc+lyM7Onk9b7Z6fz6wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjAyMTQwODQ2MjdaFw0yNzAyMTMwODUxMjdaMDMxMTAvBgNV
BAMTKEVBODJDNUM3Q0EyQURDODRGRjcwREYwNDdBMTU4QjA2NEIwOEQwMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnachHm/5yPY/aAYbTi3P10Fjp
zx1XdVB8SbxhylJfcFm1IVeRTUfPGz/zcOT/Es4dExj7x8wG7C55CU1yw6k5NZhS
9lTuIY4CKzwxjQ+glWRRBgKK0z/6dFbKhfj/yXEuQd0CePRlnDKgbSKVayKCPoIQ
notjqkTwYsU62Jhq57vbf0gHZYyMkBNokUV63ut13LviCNnVHpzQnpqPtnd4Ootp
qcmeaw2uP+A0w/kDmyy9CViFUYw34C9oCpf4UlIlQQ+ToHD54D1OXHubpNhDhLAu
0EPv7xcU6keY02wRXPFOhI38VxzShNDgrEHiHqmiu3QVtlhM4r+QTQMUq5k/AgMB
AAGjggIWMIICEjAdBgNVHQ4EFgQU6oLFx8oq3IT/cN8EehWLBksI0DQwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjAzNzcxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW3wl
AwQAXHBHAwQAX4fkMA0GCSqGSIb3DQEBCwUAA4IBAQBWw4EwKFeFQl2Df4y4GI8s
TT9KCS8rpVGRzH4fAdrdUmsL6AEiNh8rtn+zDQ/DcmXTUWJ0A24QI3NDAIp218dM
UQa1vf9vDuKqIN8HBVAK5NA0FvzINcTU44YKe0uL5iBJP6TMNd9T24OgvkSq0ahs
kCZZzJX943Tpjg4J2hJjEzIvknH475xLjzrqsJlJCy14WJ2fh9C8hP26O6VZZJ/e
fSMPz0TbsgVlDm8eAps8cPxZPDg4z/ODi/9E1HGR+/OwEwdh7Dt3404IcpKqayt5
IPGLF1rBWokoV2SPjjT0x6uw0xroGxCzeDNRoCJ5ZCedLy4SC0x5wwIKvxwTwEmd
-----END CERTIFICATE-----
Generated at Mon Feb 23 21:51:43 2026 by rpki-client