Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS203113.roa
File: AS203113.roa (raw, json)
Hash identifier: u5zxi3PDYMhnl95DDUlJpQc0Be0bL16NPHznlJFjxso=
Subject key identifier: 6F:BF:89:6B:9F:81:CB:CE:09:5D:00:49:D3:E2:2A:CE:56:37:29:BB
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 47F10AF3209A27DE47032CDAB910B6880FF40446
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS203113.roa
Signing time: Thu 07 May 2026 20:56:30 +0000
ROA not before: Thu 07 May 2026 20:51:30 +0000
ROA not after: Thu 06 May 2027 20:56:30 +0000
asID: 203113
IP address blocks: 167.148.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:f1:0a:f3:20:9a:27:de:47:03:2c:da:b9:10:b6:88:0f:f4:04:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: May 7 20:51:30 2026 GMT
Not After : May 6 20:56:30 2027 GMT
Subject: CN=6FBF896B9F81CBCE095D0049D3E22ACE563729BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1c:86:e2:4c:a7:bf:19:13:3b:77:a7:0d:34:
92:79:5d:0c:6c:13:63:5d:4e:50:c1:a1:63:6c:c8:
36:40:1d:d8:fd:c0:64:91:6c:46:31:17:5f:b0:06:
e2:d9:36:ea:23:08:b0:ef:2e:f5:8b:53:e9:49:08:
2a:51:22:62:3a:a1:90:bb:dd:14:44:87:3f:b1:8c:
cd:5e:0b:59:a0:54:a0:a2:12:43:90:b5:ee:0b:6e:
f0:67:04:ec:17:06:ca:4c:1c:25:e3:ba:70:84:e3:
55:dc:cd:f4:5c:27:81:6c:e4:ff:48:68:87:b5:51:
1f:8a:de:b6:43:d5:5f:cb:e5:27:56:30:19:e1:4a:
a1:25:41:9c:9a:ae:d7:ca:70:71:70:df:3f:36:c7:
85:3b:44:2b:29:c8:8c:c4:b5:85:cc:55:84:7e:45:
05:77:ea:78:77:22:91:22:d0:76:a4:75:b1:94:ca:
f3:bc:8b:dd:c3:3f:e2:a8:6e:01:e1:ff:a7:14:07:
5b:97:17:91:29:b1:c5:0a:7f:2e:cc:e4:04:6f:cf:
36:21:82:f5:e1:f7:d1:6b:ee:51:ed:00:d3:1d:0b:
52:f4:ee:42:b0:5d:a4:99:30:c2:3d:b4:7f:e3:b4:
56:dd:fa:93:11:04:04:2d:a0:67:20:d4:94:c6:4a:
73:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:BF:89:6B:9F:81:CB:CE:09:5D:00:49:D3:E2:2A:CE:56:37:29:BB
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS203113.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.148.81.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:74:52:5f:b4:ce:7f:4a:64:1f:0b:94:3f:1f:11:08:e6:99:
0d:67:34:3f:28:4d:da:8f:dc:be:5d:c4:33:b9:e4:ba:d3:5b:
08:32:88:a9:58:fe:73:33:ba:0a:8e:02:a2:0d:2b:c0:12:d4:
4e:2d:89:b2:b7:3e:c5:25:b4:ae:24:97:f8:43:5c:1a:df:c9:
af:dd:c7:39:a9:d1:d6:5f:16:d1:97:a2:f1:c8:92:d2:b6:14:
53:2c:cc:48:91:a0:a0:71:e6:7f:4f:16:0b:fc:46:fb:b8:d9:
99:ac:c3:06:ca:87:ff:ec:9c:7b:dc:77:f1:f4:46:25:06:0c:
78:89:b0:ec:0f:de:01:78:c4:f9:04:95:86:20:9f:46:7e:34:
8d:8b:18:2e:ee:35:ab:1e:88:33:8e:61:4a:ea:6d:8e:13:e1:
9d:07:6c:d1:bb:08:b0:c6:95:2e:89:be:e5:46:42:39:ff:4b:
f7:de:0c:3e:b4:5e:f1:38:81:86:e9:e2:b7:40:88:74:6a:85:
b5:cb:35:49:9d:60:5d:ce:7f:42:6a:dc:bd:e4:1c:96:2a:88:
5e:e0:17:dd:a6:c8:c7:11:fb:c0:bd:f0:f9:9f:ff:13:3c:f9:
7e:56:5b:b1:0e:b2:d1:95:91:fc:21:a2:b8:47:91:20:1b:d6:
9b:1d:57:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:24:43 2026 by rpki-client