Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS203494.roa
File: AS203494.roa (raw, json)
Hash identifier: ig9gZMR95UKAYhdNBNvuVzCxzdZ38GSM8+DE+EDzSoM=
Subject key identifier: 23:9B:DD:F1:B1:AF:49:55:87:67:BC:CD:3F:E3:AC:73:F0:0E:29:71
Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial: 2AF405362B6F7ABA9C48232AF3506222BC2A5D83
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS203494.roa
Signing time: Fri 10 Jul 2026 13:49:46 +0000
ROA not before: Fri 10 Jul 2026 13:44:46 +0000
ROA not after: Fri 09 Jul 2027 13:49:46 +0000
asID: 203494
IP address blocks: 92.249.60.0/24 maxlen: 24
217.18.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:f4:05:36:2b:6f:7a:ba:9c:48:23:2a:f3:50:62:22:bc:2a:5d:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Validity
Not Before: Jul 10 13:44:46 2026 GMT
Not After : Jul 9 13:49:46 2027 GMT
Subject: CN=239BDDF1B1AF49558767BCCD3FE3AC73F00E2971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a2:d1:2e:ab:0d:53:b8:2c:e7:b7:0a:6c:36:
bb:5c:7e:ce:cd:cc:6d:01:6a:0e:43:b9:04:5d:c6:
34:9a:72:cf:b1:66:05:32:a4:fd:99:a8:43:fe:fa:
e6:c8:a6:e1:45:f3:16:4c:56:45:2d:b7:07:0d:da:
b5:77:ca:e1:29:aa:95:f6:ae:ac:73:69:fb:43:15:
eb:6f:d4:3c:45:f0:5f:10:92:8d:ea:fd:fe:6e:f6:
49:27:67:d4:77:06:02:71:81:98:aa:4e:84:61:3f:
e7:80:3f:4d:7f:0a:26:e3:44:fa:d6:9b:7b:41:c9:
90:af:36:5b:7a:75:d7:ff:28:0f:84:23:77:c0:ac:
96:1e:d3:a0:3c:f2:5d:34:1e:c8:4b:7c:d9:0f:e9:
2c:54:d8:87:0d:40:6c:69:ca:99:36:74:ae:33:57:
3e:69:fa:3a:81:11:fd:4b:5a:98:89:8b:4f:cf:86:
be:d5:c5:91:0e:52:61:f6:a4:da:f6:7e:5b:e3:52:
88:ad:70:87:b8:a4:1a:a4:1f:18:7b:af:03:76:92:
ee:5c:32:46:3b:ec:58:53:69:70:ea:88:ca:46:bc:
73:c3:2b:7a:8f:be:94:02:32:2f:ca:a0:0b:fb:86:
59:be:c2:5b:9d:92:fb:36:c7:d0:88:c4:13:b1:c2:
02:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:9B:DD:F1:B1:AF:49:55:87:67:BC:CD:3F:E3:AC:73:F0:0E:29:71
X509v3 Authority Key Identifier:
keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS203494.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.249.60.0/24
217.18.209.0/24
Signature Algorithm: sha256WithRSAEncryption
e5:ee:54:57:da:c3:2d:e0:1d:4e:b9:88:9b:c7:e8:ed:91:66:
e4:98:21:5f:bb:11:82:67:44:e0:a9:15:3b:51:7a:c0:d7:68:
d7:c4:7e:88:7b:76:f4:db:6f:f4:2e:1e:75:6b:bb:8a:7e:f3:
3f:ab:04:a3:30:31:fa:35:4c:65:cd:24:9b:27:37:25:15:16:
3d:de:18:e0:4e:b7:06:b5:49:0e:b3:43:e7:4b:94:96:32:6d:
c5:e1:65:21:45:f5:52:32:9d:ad:b6:0d:02:aa:08:04:11:4c:
44:f6:c5:2c:20:47:b5:f9:f9:01:e6:81:fd:81:6e:91:c4:f4:
ed:15:74:ca:b1:2b:62:17:34:cf:cc:5f:4a:5f:3c:f2:5b:0f:
6d:e8:15:46:68:54:32:c3:d7:0d:7f:c1:64:66:17:bc:4a:df:
9e:eb:09:67:25:4a:6d:28:f1:34:6c:11:ce:5c:bc:25:2c:ea:
2d:6b:d4:12:d3:7f:8b:d3:9f:2f:8b:ab:4e:12:5f:09:f0:ec:
31:60:78:b4:89:1e:52:7a:1d:45:28:50:01:41:12:ef:9f:f5:
a2:62:87:65:59:12:ce:4c:1d:e3:ef:a6:65:06:5b:f7:07:cb:
0a:6c:9b:3b:62:1c:55:f8:01:71:65:a5:fe:09:59:00:c9:f6:
14:63:c1:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:59:05 2026 by rpki-client