Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203048.roa
File: AS203048.roa (raw, json)
Hash identifier: C8MvJGwh343JTDlFyboYlNusRg96ENTf321fkSUQ1YY=
Subject key identifier: 49:06:78:F0:4D:63:84:FC:61:E9:C8:66:B2:3C:26:7B:B2:7E:29:87
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 451B2C15AFFE2BC0D21D71A27234721E01CD6E41
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203048.roa
Signing time: Tue 24 Mar 2026 08:47:59 +0000
ROA not before: Tue 24 Mar 2026 08:42:59 +0000
ROA not after: Tue 23 Mar 2027 08:47:59 +0000
asID: 203048
IP address blocks: 82.38.20.0/22 maxlen: 24
84.75.183.0/24 maxlen: 24
178.83.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:1b:2c:15:af:fe:2b:c0:d2:1d:71:a2:72:34:72:1e:01:cd:6e:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 24 08:42:59 2026 GMT
Not After : Mar 23 08:47:59 2027 GMT
Subject: CN=490678F04D6384FC61E9C866B23C267BB27E2987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:47:d7:8b:fd:32:9d:17:00:af:b3:d0:ea:dc:
c5:b4:b5:af:dd:f4:0e:64:e2:66:3d:ae:a5:d1:ee:
f1:73:ff:93:43:73:8c:cd:2a:74:51:26:28:0e:3d:
09:33:b7:ae:1f:ed:af:28:23:e2:fc:70:ad:0c:b1:
49:0d:44:f5:06:46:18:45:d5:37:ff:2b:0e:d1:5a:
39:84:73:3c:38:ad:e5:50:cb:01:98:b4:5e:d5:b6:
85:28:b9:f6:a8:4c:ca:51:c0:ac:8e:52:c6:6d:a9:
61:95:a7:ad:74:29:fb:29:9e:1e:1f:2b:c0:b3:0e:
7c:97:1e:10:93:c7:c0:b1:97:e6:c8:4e:b6:15:71:
13:28:4d:e6:c9:fd:dd:2b:04:64:f4:f6:25:65:46:
c7:d9:41:37:93:0c:df:63:dd:91:97:44:7e:e6:5c:
0a:5b:60:94:91:a4:6b:d8:c4:6b:ce:63:5b:c2:75:
c6:ad:96:7e:7d:c6:a5:70:cc:03:9f:63:31:24:05:
dc:8f:11:58:ff:d6:12:c8:60:4f:20:6c:88:f7:65:
da:e6:85:7d:ac:2d:02:0a:b0:1d:ff:f4:d2:ab:95:
d4:74:4f:8f:38:bb:0f:ec:7e:e0:4b:a4:1f:c7:46:
62:e3:93:57:e3:57:3e:c7:fa:23:a7:6a:a3:a0:39:
2e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:06:78:F0:4D:63:84:FC:61:E9:C8:66:B2:3C:26:7B:B2:7E:29:87
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203048.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.38.20.0/22
84.75.183.0/24
178.83.133.0/24
Signature Algorithm: sha256WithRSAEncryption
39:72:bb:c4:0f:e6:4a:fc:f6:d6:fa:01:3f:46:66:38:33:11:
19:2f:2b:9d:1b:07:1e:1e:c9:a5:c4:3c:36:e8:da:89:94:5e:
b9:9b:34:69:d9:64:84:20:3e:e0:32:55:bf:8e:84:5b:40:21:
79:f5:e7:12:eb:14:cd:35:03:eb:44:17:96:2e:a5:f7:b3:8b:
3d:0b:17:24:81:4e:61:46:3d:86:a6:b6:f5:a5:be:71:17:25:
41:b7:d6:b7:ac:ca:04:6f:9e:bd:f5:9b:a8:39:12:98:75:54:
98:73:e7:b1:f0:36:6d:4c:4a:08:5b:00:41:50:fb:3e:08:8d:
12:cd:78:9a:d3:70:44:df:98:41:97:03:25:cb:e7:0b:9c:2f:
f8:0e:5f:61:3d:08:85:fd:09:60:34:90:76:fe:77:ef:cc:09:
0c:8a:d0:db:a9:85:0d:12:77:8a:fd:32:6f:7f:8e:22:16:be:
72:87:69:af:bb:71:1a:d3:98:5c:43:ab:78:62:42:d3:0f:da:
1f:14:78:f7:b8:f6:e4:e3:f1:f1:7e:fd:7a:70:6a:20:30:a7:
fc:fb:74:e6:1e:52:01:2f:49:c9:c0:9f:30:d4:da:6b:87:34:
c5:87:c2:44:08:ce:0a:5a:cc:79:0f:09:80:77:0e:01:7a:85:
5d:9b:0c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:34:45 2026 by rpki-client