Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS203548.roa
File: AS203548.roa (raw, json)
Hash identifier: SXYrrRgCwVcl0/em8XgCfY9AN9M07chVwCg3dxpQFdI=
Subject key identifier: A2:8B:F1:59:57:29:91:71:CC:B8:F9:DB:6A:D7:71:2D:FB:C8:0B:E9
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 2DF8F67A57B91A9428DDBB5552022E0469BF89ED
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS203548.roa
Signing time: Tue 24 Mar 2026 16:47:27 +0000
ROA not before: Tue 24 Mar 2026 16:42:27 +0000
ROA not after: Tue 23 Mar 2027 16:47:27 +0000
asID: 203548
IP address blocks: 181.215.40.0/24 maxlen: 24
181.215.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:f8:f6:7a:57:b9:1a:94:28:dd:bb:55:52:02:2e:04:69:bf:89:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Mar 24 16:42:27 2026 GMT
Not After : Mar 23 16:47:27 2027 GMT
Subject: CN=A28BF15957299171CCB8F9DB6AD7712DFBC80BE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:69:bb:6f:1a:38:4d:e8:dd:66:ee:99:bc:11:
0c:6b:c7:b5:c9:ad:fa:f2:8d:3f:7b:2d:19:b6:2d:
2b:08:a2:d1:bf:ac:99:5f:3c:68:05:95:c0:10:84:
ff:02:2d:07:c0:01:2a:ec:65:33:14:0e:2b:49:0a:
f7:20:db:9b:68:95:71:5d:f6:e4:80:16:6a:a5:81:
3c:7c:84:a2:87:01:ad:c4:ff:52:28:87:6e:09:de:
80:e1:6a:0b:d3:5b:aa:8e:6a:e5:70:9d:dc:db:39:
d9:39:d6:8c:e0:ee:b4:2d:03:6e:06:08:86:2c:a4:
22:3a:b8:0b:33:68:b8:eb:c0:ce:ef:39:18:66:c0:
fe:63:45:dc:54:d4:bc:8d:54:4f:4d:49:6a:28:cf:
6b:71:30:f2:0a:8e:24:6c:d9:64:a6:91:f2:54:b6:
26:8f:aa:9c:bc:76:5e:3c:79:d9:a5:4b:d0:6e:97:
bd:03:2b:e0:32:7f:cd:6e:02:9f:44:38:75:d8:9b:
ae:01:17:a7:ae:7b:ba:4c:9e:b7:28:78:86:2c:11:
d7:8a:d8:b7:29:ce:b6:25:a4:34:28:7d:21:20:2e:
65:5e:3e:33:a2:21:92:c0:d9:f5:14:db:48:13:88:
75:a1:09:9a:6c:44:bc:68:7b:9f:73:da:25:40:aa:
ee:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:8B:F1:59:57:29:91:71:CC:B8:F9:DB:6A:D7:71:2D:FB:C8:0B:E9
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS203548.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.215.40.0/24
181.215.115.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:5a:e3:e0:37:e1:45:95:30:04:ea:11:3d:d5:ec:5c:89:5f:
83:14:f1:d4:31:fd:e6:41:82:45:84:2e:97:2d:6d:5b:79:b3:
2a:9b:b2:30:c3:24:21:98:a6:15:2f:67:a9:25:0f:fc:1b:f9:
d1:c0:37:ee:1c:ca:cd:27:80:11:f6:1e:ba:7d:9b:67:9c:b7:
d2:da:11:2b:61:75:9a:b5:41:a7:12:a1:84:3a:65:f3:e2:02:
6f:a8:ec:cc:5c:3c:0b:ac:6b:78:f2:dd:05:1c:ec:4d:b7:75:
f1:4f:03:25:6d:cd:87:15:32:b3:91:ea:cf:3c:80:06:6d:2f:
8e:c3:69:6e:69:2d:e3:21:9e:ab:1e:cc:5a:aa:b9:bb:3e:f3:
68:46:db:4d:66:4b:cb:df:f1:81:cd:4e:ee:e6:c2:d5:a1:53:
ca:90:fb:6e:33:21:b6:6c:0b:02:0f:c6:4e:dd:7c:4e:d2:7a:
1f:42:05:26:8e:67:bc:13:14:00:db:94:b5:80:36:e1:81:a6:
7e:c8:12:b9:94:ac:a3:30:76:a5:3f:6b:73:ea:61:d9:b1:75:
cb:8d:8e:84:17:af:b7:09:9c:ee:af:af:1d:88:b3:06:6a:d5:
33:19:d5:6f:61:0d:8a:25:2d:25:87:2e:69:56:c7:0d:9e:3f:
9f:fa:dd:88
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIULfj2ele5GpQo3btVUgIuBGm/ie0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNjAzMjQxNjQyMjdaFw0yNzAzMjMxNjQ3MjdaMDMxMTAvBgNV
BAMTKEEyOEJGMTU5NTcyOTkxNzFDQ0I4RjlEQjZBRDc3MTJERkJDODBCRTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1abtvGjhN6N1m7pm8EQxrx7XJ
rfryjT97LRm2LSsIotG/rJlfPGgFlcAQhP8CLQfAASrsZTMUDitJCvcg25tolXFd
9uSAFmqlgTx8hKKHAa3E/1Ioh24J3oDhagvTW6qOauVwndzbOdk51ozg7rQtA24G
CIYspCI6uAszaLjrwM7vORhmwP5jRdxU1LyNVE9NSWooz2txMPIKjiRs2WSmkfJU
tiaPqpy8dl48edmlS9Bul70DK+Ayf81uAp9EOHXYm64BF6eue7pMnrcoeIYsEdeK
2LcpzrYlpDQofSEgLmVePjOiIZLA2fUU20gTiHWhCZpsRLxoe59z2iVAqu7lAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUoovxWVcpkXHMuPnbatdxLfvIC+kwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjAzNTQ4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAtdco
AwQAtddzMA0GCSqGSIb3DQEBCwUAA4IBAQAcWuPgN+FFlTAE6hE91exciV+DFPHU
Mf3mQYJFhC6XLW1bebMqm7IwwyQhmKYVL2epJQ/8G/nRwDfuHMrNJ4AR9h66fZtn
nLfS2hErYXWatUGnEqGEOmXz4gJvqOzMXDwLrGt48t0FHOxNt3XxTwMlbc2HFTKz
kerPPIAGbS+Ow2luaS3jIZ6rHsxaqrm7PvNoRttNZkvL3/GBzU7u5sLVoVPKkPtu
MyG2bAsCD8ZO3XxO0nofQgUmjme8ExQA25S1gDbhgaZ+yBK5lKyjMHalP2tz6mHZ
sXXLjY6EF6+3CZzur68diLMGatUzGdVvYQ2KJS0lhy5pVscNnj+f+t2I
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:04:25 2026 by rpki-client