Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS203057.roa
File: AS203057.roa (raw, json)
Hash identifier: z9Q4HTs3y4QjIKTbELWaB7psyB7bZueFkeMvFOCbsXU=
Subject key identifier: CE:EC:08:AA:93:09:08:C9:85:A9:6A:F7:47:AF:64:2B:86:B5:41:AD
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 6CC5F804A26A6D89D256F46D2A1F37E7F2AC5C04
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS203057.roa
Signing time: Sat 21 Mar 2026 07:34:27 +0000
ROA not before: Sat 21 Mar 2026 07:29:27 +0000
ROA not after: Sat 20 Mar 2027 07:34:27 +0000
asID: 203057
IP address blocks: 143.14.166.0/24 maxlen: 24
167.148.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:c5:f8:04:a2:6a:6d:89:d2:56:f4:6d:2a:1f:37:e7:f2:ac:5c:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 21 07:29:27 2026 GMT
Not After : Mar 20 07:34:27 2027 GMT
Subject: CN=CEEC08AA930908C985A96AF747AF642B86B541AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:17:96:5b:d1:2e:82:13:db:69:c6:9f:af:05:
01:47:bd:f3:29:6e:61:23:a5:e7:9e:b4:84:14:14:
2b:27:06:2c:8a:3a:ac:62:80:b6:1a:e4:e4:15:94:
5b:73:ad:92:d6:ca:8c:d6:97:ae:22:3b:76:91:28:
3f:56:d0:f0:27:2c:e4:4c:49:62:d2:d0:2b:0b:b4:
1e:03:5e:78:ff:ef:c3:f8:bd:ce:4a:05:48:37:94:
c2:13:14:be:02:7c:23:3f:80:a5:50:d4:56:80:9b:
5d:4d:f8:c0:50:38:23:36:5a:c5:c9:a0:c9:e4:96:
2a:1e:17:11:16:04:c2:0d:6b:f5:34:c5:cb:e1:7b:
ae:39:5e:61:12:ef:71:54:9f:3c:3d:98:3f:33:99:
30:39:82:97:ca:62:f9:61:4c:cf:53:df:36:0d:e0:
69:c2:46:2b:bc:d4:f1:91:33:6e:7c:3a:aa:33:c5:
bc:c8:b7:06:d5:01:5b:dc:b1:3c:cf:72:c4:92:57:
16:0d:e6:1d:2e:1a:64:f5:0a:ff:85:44:7c:f4:42:
88:ed:29:c7:98:9f:bd:a3:ed:18:65:b0:fd:6d:4f:
7f:bc:d5:27:5c:52:b2:b9:8b:46:8a:04:95:f2:59:
18:90:6a:49:45:aa:5b:f0:e7:71:25:92:21:60:97:
ac:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:EC:08:AA:93:09:08:C9:85:A9:6A:F7:47:AF:64:2B:86:B5:41:AD
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS203057.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.166.0/24
167.148.188.0/24
Signature Algorithm: sha256WithRSAEncryption
26:66:75:0a:a9:f2:81:07:c8:ec:b4:ec:b5:ff:56:d0:a0:06:
25:31:fc:6e:43:5b:4c:03:5d:15:f0:a3:b4:6d:c9:69:79:3a:
d6:cf:3f:62:65:54:64:8d:26:96:bc:c7:cb:e9:47:66:c9:10:
64:8b:05:8d:30:34:ee:c2:c2:13:49:e2:39:1a:b2:26:48:f6:
77:1a:7a:01:d7:15:28:ab:d4:ac:ef:c8:43:d5:9e:75:63:f9:
d5:26:ee:18:06:e6:4c:ee:c8:4d:a4:fb:14:91:06:32:90:ec:
91:ec:1f:df:98:d9:cb:cf:20:9a:7a:57:d4:22:d7:19:f6:65:
d3:c9:ff:f2:9c:81:06:7d:51:b1:64:2d:34:f2:63:55:13:ab:
b7:0a:2f:84:36:3e:3f:f3:ba:a1:13:8c:97:8a:9f:11:95:ca:
ec:bc:7e:53:54:8b:33:d6:fb:f7:4d:52:9f:ce:ce:9e:a8:bd:
25:e9:13:48:b3:93:19:a7:89:09:35:55:bb:c8:fa:8f:fa:b7:
e7:0b:dd:d4:1b:70:0d:17:a2:60:cb:e6:58:2a:0d:bf:af:70:
6e:54:f1:e3:f1:23:50:54:a9:2b:2d:55:80:76:b8:c2:3f:3f:
04:fd:52:a5:81:c4:2c:ab:da:ee:8d:86:9b:6d:17:6a:f1:4c:
2b:1a:d7:af
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUbMX4BKJqbYnSVvRtKh835/KsXAQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjAzMjEwNzI5MjdaFw0yNzAzMjAwNzM0MjdaMDMxMTAvBgNV
BAMTKENFRUMwOEFBOTMwOTA4Qzk4NUE5NkFGNzQ3QUY2NDJCODZCNTQxQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYF5Zb0S6CE9tpxp+vBQFHvfMp
bmEjpeeetIQUFCsnBiyKOqxigLYa5OQVlFtzrZLWyozWl64iO3aRKD9W0PAnLORM
SWLS0CsLtB4DXnj/78P4vc5KBUg3lMITFL4CfCM/gKVQ1FaAm11N+MBQOCM2WsXJ
oMnklioeFxEWBMINa/U0xcvhe645XmES73FUnzw9mD8zmTA5gpfKYvlhTM9T3zYN
4GnCRiu81PGRM258OqozxbzItwbVAVvcsTzPcsSSVxYN5h0uGmT1Cv+FRHz0Qojt
KceYn72j7RhlsP1tT3+81SdcUrK5i0aKBJXyWRiQaklFqlvw53ElkiFgl6w7AgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUzuwIqpMJCMmFqWr3R69kK4a1Qa0wHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjAzMDU3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAjw6m
AwQAp5S8MA0GCSqGSIb3DQEBCwUAA4IBAQAmZnUKqfKBB8jstOy1/1bQoAYlMfxu
Q1tMA10V8KO0bclpeTrWzz9iZVRkjSaWvMfL6UdmyRBkiwWNMDTuwsITSeI5GrIm
SPZ3GnoB1xUoq9Ss78hD1Z51Y/nVJu4YBuZM7shNpPsUkQYykOyR7B/fmNnLzyCa
elfUItcZ9mXTyf/ynIEGfVGxZC008mNVE6u3Ci+ENj4/87qhE4yXip8RlcrsvH5T
VIsz1vv3TVKfzs6eqL0l6RNIs5MZp4kJNVW7yPqP+rfnC93UG3ANF6Jgy+ZYKg2/
r3BuVPHj8SNQVKkrLVWAdrjCPz8E/VKlgcQsq9rujYabbRdq8UwrGtev
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:48:28 2026 by rpki-client