Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS10103.roa
File: AS10103.roa (raw, json)
Hash identifier: GsvMmcU0ktoyPs5JwEpfK4Y+/MW+ceEnsThFv/rmnjw=
Subject key identifier: AF:74:28:96:6A:F7:BA:0A:F1:2A:80:7E:DC:1B:FC:E0:7E:43:D7:3E
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 2A177A131ED176D79E72A65111B5BD8E61D5CF60
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS10103.roa
Signing time: Mon 04 May 2026 00:47:07 +0000
ROA not before: Mon 04 May 2026 00:42:07 +0000
ROA not after: Mon 03 May 2027 00:47:07 +0000
asID: 10103
IP address blocks: 96.62.0.0/19 maxlen: 24
96.62.156.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:17:7a:13:1e:d1:76:d7:9e:72:a6:51:11:b5:bd:8e:61:d5:cf:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: May 4 00:42:07 2026 GMT
Not After : May 3 00:47:07 2027 GMT
Subject: CN=AF7428966AF7BA0AF12A807EDC1BFCE07E43D73E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e0:d2:ea:43:90:71:74:24:e0:8d:8f:c8:d8:
8f:b9:c1:8e:da:b1:92:86:2c:34:4e:80:2b:20:fa:
b9:f3:df:89:b1:e9:b0:d9:07:f4:53:28:39:31:e1:
d9:1b:29:b1:6c:52:76:5c:00:12:af:8c:a0:7e:e8:
cf:40:33:13:b5:2a:b3:67:d4:e0:e9:8b:c3:d7:d6:
36:89:ae:44:aa:dd:8f:74:c0:28:dd:8a:02:44:3d:
9e:4e:3d:87:74:c5:a6:36:18:3c:10:90:91:5d:67:
05:1b:65:d3:25:a7:47:17:ab:21:10:d5:e9:4f:c3:
fe:d9:40:75:48:d6:4a:88:f1:08:23:d6:4e:79:25:
fe:a4:0f:a9:82:c0:3d:43:86:84:4f:05:d8:f3:49:
0a:f3:a4:f5:39:8f:3e:89:86:71:cd:e2:c2:6d:30:
e9:28:b6:9a:02:7c:47:eb:3b:d0:3b:09:3b:e2:da:
ba:bf:8e:37:f2:e9:47:64:4e:5a:0e:e6:fa:13:da:
2f:fe:da:94:4d:61:a2:c7:72:6a:ce:fa:3b:38:ad:
39:0b:be:fb:85:35:f0:f3:41:24:66:63:a9:1f:9f:
8e:33:0d:cd:1c:a3:9a:ba:f5:e8:a9:85:5a:0b:6e:
55:2c:bb:ab:7c:41:fb:3a:e6:88:1b:8d:5e:12:46:
63:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:74:28:96:6A:F7:BA:0A:F1:2A:80:7E:DC:1B:FC:E0:7E:43:D7:3E
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS10103.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.0.0/19
96.62.156.0/22
Signature Algorithm: sha256WithRSAEncryption
60:a6:05:f7:6d:d6:ce:5e:d2:9c:34:20:c2:f4:09:cd:f0:f9:
3e:47:07:51:97:87:bd:7f:42:55:02:b6:09:02:6c:ab:70:20:
d9:16:0b:b6:6d:9b:a0:39:22:0b:4d:0a:d8:19:24:08:ef:98:
4c:0a:91:cd:70:ee:af:91:33:cb:03:3e:fa:2e:35:c4:a8:83:
8f:e3:17:a3:9b:e9:09:52:7d:10:c8:b4:36:e5:f0:b8:b2:b6:
52:3d:a9:3a:8f:42:07:fb:17:3e:f0:00:10:00:8c:be:4c:70:
5a:17:22:0c:cb:f8:a3:50:32:d9:c2:15:19:64:ed:7d:a0:aa:
c8:6d:62:5e:30:c6:54:30:87:ec:f4:9d:26:9e:76:e8:6a:34:
78:c0:28:b8:b1:4a:5b:54:d5:76:19:e9:86:6e:fe:2e:86:ee:
fd:d3:2a:66:3f:34:c1:8a:1d:85:ba:f6:eb:49:50:d0:77:35:
8f:2d:aa:6f:ba:80:b8:bf:71:5e:b8:81:18:64:3a:f2:94:2e:
3f:4e:f1:1c:5f:7d:c8:8e:d7:50:ae:5d:4c:38:5e:cf:38:6c:
49:04:ae:d3:6c:66:85:2c:cb:3b:98:83:2d:fb:f3:69:1b:e1:
6c:e5:48:fa:ec:ed:83:b8:fa:65:a2:97:bc:a0:cd:a0:f4:a5:
57:a0:44:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:42:16 2026 by rpki-client