Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203061.roa
File: AS203061.roa (raw, json)
Hash identifier: aTcDIcebwB5D8jRAnsocByU+QNYZqCmVxhtOhgLdplc=
Subject key identifier: 21:D0:B7:8B:A2:65:2D:02:9F:A0:82:67:B9:CB:70:B4:A8:AA:9D:20
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 2FB3199AE2554AA6BF250F56E4BF6959EE3CA606
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203061.roa
Signing time: Thu 11 Sep 2025 13:32:10 +0000
ROA not before: Thu 11 Sep 2025 13:27:10 +0000
ROA not after: Thu 10 Sep 2026 13:32:10 +0000
asID: 203061
IP address blocks: 82.27.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:b3:19:9a:e2:55:4a:a6:bf:25:0f:56:e4:bf:69:59:ee:3c:a6:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 11 13:27:10 2025 GMT
Not After : Sep 10 13:32:10 2026 GMT
Subject: CN=21D0B78BA2652D029FA08267B9CB70B4A8AA9D20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cd:e9:72:3e:c1:92:a1:cf:3d:72:8f:65:de:
32:57:18:eb:05:07:8a:d3:8b:3c:d9:a0:f9:80:8d:
b7:84:72:23:33:b4:4c:ba:b3:b1:70:13:c0:a2:dc:
28:d2:48:35:21:a5:df:23:55:6c:c1:15:d7:5a:b4:
71:b4:b2:a0:60:63:b4:2a:71:fd:75:ce:5c:45:bb:
b7:10:fa:a4:35:29:22:4b:f0:3a:9f:45:26:83:3a:
f9:7c:85:99:f5:bb:98:02:e6:4c:84:40:f5:a1:c3:
27:61:8f:2d:07:1c:7c:ac:22:2f:a0:8a:1d:d8:8b:
e3:bb:97:c8:a9:6c:dd:88:e4:97:82:66:3f:17:1d:
79:b9:e0:1e:2a:be:b7:3e:17:8e:dd:07:25:87:57:
84:47:3b:ed:0e:c4:cb:98:41:a2:3f:85:aa:c6:16:
99:21:34:2f:84:64:0c:a4:18:a9:03:6a:1f:39:5a:
cb:e1:20:14:fd:db:f3:75:0b:37:f7:c4:17:4b:7e:
aa:2f:15:88:17:f8:fc:4e:8a:d4:3b:2b:a0:90:91:
c0:6d:e4:ef:38:d6:e5:79:82:15:e5:a4:74:26:40:
c6:ec:c2:a5:8c:ad:e4:dc:50:ce:52:73:37:44:b4:
3f:c9:c0:42:18:f4:8c:8a:e3:7e:bf:57:5b:85:16:
1b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D0:B7:8B:A2:65:2D:02:9F:A0:82:67:B9:CB:70:B4:A8:AA:9D:20
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203061.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.27.227.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:63:a6:b4:fe:80:ad:68:39:64:65:ec:f1:7c:da:e8:fb:b3:
83:8a:e3:99:5e:5d:f8:3c:de:53:e8:5a:69:61:4e:11:50:a1:
d1:84:6c:f2:2b:b1:a8:1c:3b:c5:f0:98:12:ed:d7:89:e2:55:
e2:c9:4a:e2:04:c1:2d:ea:a2:e8:28:34:95:ac:41:42:95:ef:
75:8f:8c:21:aa:c7:0b:87:f3:cc:97:44:71:65:dc:f0:8e:a2:
27:45:21:64:7d:9a:0a:4c:a3:37:04:96:42:8f:03:99:25:68:
22:27:4a:93:03:7f:e2:44:10:c3:2d:68:cb:b0:c2:c8:0a:f4:
27:60:27:29:58:3c:31:fa:2b:6d:20:80:c7:31:3b:a7:73:05:
c1:50:cc:24:13:99:25:5b:49:38:22:2b:70:79:b7:4e:09:e9:
4a:f4:a7:9b:83:b4:53:d5:c3:6b:3c:e5:e6:ea:9a:77:ef:4e:
6a:0e:da:26:f7:c3:6e:b2:13:3a:c7:1f:7f:96:3b:a4:5a:54:
58:20:2e:81:71:b5:73:eb:8a:48:82:d6:68:5d:87:7c:30:89:
9b:a0:cd:60:3c:da:29:3d:ff:c3:ce:1c:f4:ad:13:a4:e1:d7:
bf:a4:e4:34:4e:a2:53:2e:1e:58:f0:0d:51:31:95:84:53:f4:
5e:76:e3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:58:03 2025 by rpki-client