Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS203997.roa
File: AS203997.roa (raw, json)
Hash identifier: GBWlSNMTOdrSEYnZrHaHwj5ySUnKvo5gdT1QZKT3Pnk=
Subject key identifier: C7:30:BE:0B:44:9D:A4:7F:C6:D6:83:BF:87:7F:64:6A:17:5E:F3:6A
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 6665E7852E4A6C7F91B715EBF0DEBB345EA3777A
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS203997.roa
Signing time: Wed 07 Oct 2026 09:27:50 +0000
ROA not before: Wed 07 Oct 2026 09:22:50 +0000
ROA not after: Wed 06 Oct 2027 09:27:50 +0000
asID: 203997
IP address blocks: 178.95.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 22:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:65:e7:85:2e:4a:6c:7f:91:b7:15:eb:f0:de:bb:34:5e:a3:77:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 7 09:22:50 2026 GMT
Not After : Oct 6 09:27:50 2027 GMT
Subject: CN=C730BE0B449DA47FC6D683BF877F646A175EF36A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b0:7a:6a:9b:a3:47:55:df:e1:d2:10:ac:ae:
f8:df:0f:d4:7e:65:16:24:f1:38:b2:87:ed:bc:eb:
ee:53:4a:2a:6f:1c:ac:46:94:ce:d3:78:ae:04:0c:
43:3a:81:f7:8e:87:fc:d9:f7:3c:d6:2d:d0:47:aa:
c5:6c:ec:cc:ce:01:ae:a8:8b:98:c7:70:d3:c2:67:
a4:6e:53:6a:3e:17:a5:83:ee:9a:55:61:80:0d:31:
c4:69:13:00:9d:29:eb:09:0e:45:6e:9b:4c:ea:24:
d2:f1:9e:d7:19:4c:5c:64:85:5d:dd:40:ff:02:5b:
60:49:a8:d3:72:1d:03:22:ff:cf:ee:34:d3:9a:c0:
7b:e8:d2:ad:f3:a8:e7:89:ef:ec:e4:ee:34:e5:99:
d3:65:e0:0e:63:a3:3c:1a:29:bb:59:57:96:a2:50:
e7:7a:17:18:c5:54:85:a6:04:1b:77:8c:3a:de:74:
fe:1a:20:f2:7d:04:48:97:94:e0:ff:73:f6:89:2c:
bd:6a:20:b4:5f:42:10:63:3b:60:c6:ea:27:94:eb:
0d:8d:fa:75:5a:b7:1a:f2:9f:2a:6b:58:cf:ee:4f:
07:43:45:75:d8:93:85:ca:8c:54:9b:71:c1:5d:5a:
ea:5d:b3:4f:8b:b5:d1:b9:3f:ef:89:fb:c7:df:c5:
08:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:30:BE:0B:44:9D:A4:7F:C6:D6:83:BF:87:7F:64:6A:17:5E:F3:6A
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS203997.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.95.202.0/24
Signature Algorithm: sha256WithRSAEncryption
83:76:c5:5d:48:7a:a9:a9:2c:c6:21:4d:a9:51:72:7e:2d:cb:
44:77:f4:fa:7f:fc:ab:c5:4d:56:15:29:7d:2c:58:ee:ac:b0:
e6:4d:35:5e:db:86:7b:5d:c6:42:49:62:0f:00:39:c0:1e:7a:
8b:0f:2a:2e:64:91:bb:fe:c2:d5:41:eb:2e:1a:42:ca:5e:87:
32:89:c5:e4:81:0c:89:40:78:72:68:1e:29:47:33:0a:80:98:
58:13:fb:79:2f:ea:08:de:32:35:03:1d:66:b3:4d:43:b1:d1:
73:a8:a3:b6:04:04:2d:6c:ee:60:a3:d2:0b:f0:17:36:93:2b:
e8:99:48:0f:e4:d4:11:f8:81:f1:b8:00:18:57:e2:b5:f2:d5:
8c:f4:c7:e2:a7:1d:03:7c:7a:79:a0:34:9b:90:bf:dc:6e:df:
74:26:0b:3b:86:f6:cd:a4:22:9c:27:47:cf:c3:a0:3b:59:77:
fc:a0:1b:b5:54:63:23:dd:99:48:ac:6e:32:51:e5:b8:b9:5a:
b3:6d:fa:4c:d0:1f:95:40:7c:67:af:14:e0:cc:e1:60:13:14:
b5:2d:f9:71:69:08:3f:c6:d4:1d:4d:3b:78:48:88:23:1a:31:
1e:fa:39:c9:c1:ff:13:ba:f9:1e:87:e7:2f:81:80:0f:bd:d6:
fe:92:94:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 09:25:46 2026 by rpki-client