Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203156.roa
File: AS203156.roa (raw, json)
Hash identifier: /nrv2YkDObScZoCqUZDqvYDYMaUdYMI7eH1lQ/Az4Rc=
Subject key identifier: C3:F2:93:F6:07:99:65:F9:98:66:B6:D8:9A:1F:F4:40:83:7D:8C:D0
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 671B903FE7737901BD0ED92C24F9DAF258829A1A
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203156.roa
Signing time: Mon 06 Jul 2026 00:05:01 +0000
ROA not before: Mon 06 Jul 2026 00:00:01 +0000
ROA not after: Mon 05 Jul 2027 00:05:01 +0000
asID: 203156
IP address blocks: 82.26.71.0/24 maxlen: 24
178.83.36.0/24 maxlen: 24
178.83.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:1b:90:3f:e7:73:79:01:bd:0e:d9:2c:24:f9:da:f2:58:82:9a:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 6 00:00:01 2026 GMT
Not After : Jul 5 00:05:01 2027 GMT
Subject: CN=C3F293F6079965F99866B6D89A1FF440837D8CD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:54:33:35:5b:d4:aa:87:7a:a6:3f:3a:d1:f2:
50:64:ca:5b:65:52:8b:0c:f7:05:4f:c6:00:62:4d:
e2:bd:c0:e5:2b:3c:e8:28:8f:b6:42:54:f9:6e:47:
b5:2e:5c:92:78:14:f4:9a:1e:96:9d:33:1f:d2:7f:
a6:8f:e3:1c:a6:b9:53:1e:9e:c2:f4:44:2e:6b:98:
74:b7:db:88:05:e5:81:57:d0:e5:e6:76:4b:38:4d:
d4:eb:cf:d6:b7:e0:9a:d0:29:ab:11:09:d7:27:c1:
a3:cd:42:7b:c1:7e:1b:8e:af:4f:95:c1:b4:63:b3:
86:03:63:88:df:88:40:16:01:ab:58:54:8c:0d:50:
7f:8d:96:b8:6e:14:c5:34:8f:60:8a:66:0b:b6:d6:
22:98:f0:db:fd:24:16:e0:82:bc:a2:56:21:1b:82:
1a:71:b6:27:4d:cb:58:73:bf:c1:3b:ca:8f:72:4b:
c2:93:29:8b:62:e5:74:de:9c:a7:c1:3c:76:a9:99:
20:7f:28:fc:45:eb:b9:32:a0:8d:7a:92:19:24:b7:
4f:1a:89:a0:14:83:2f:26:1c:75:21:5e:5a:c4:75:
5f:f8:9c:60:21:7e:03:3a:38:c3:52:1a:89:b5:f1:
bb:68:69:b7:90:3e:4f:d4:62:cb:12:ca:ea:16:26:
3f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F2:93:F6:07:99:65:F9:98:66:B6:D8:9A:1F:F4:40:83:7D:8C:D0
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203156.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.26.71.0/24
178.83.36.0/24
178.83.56.0/24
Signature Algorithm: sha256WithRSAEncryption
32:50:2b:ba:77:cf:3c:4b:2d:d3:24:8d:80:08:49:43:58:61:
a7:8d:03:2e:f8:d9:e3:f6:d3:6d:69:ee:cf:7d:28:57:a9:13:
e3:ce:28:b5:f4:f6:66:9f:c6:7c:8c:a1:2e:e9:48:3f:15:01:
a9:3c:62:cc:20:f5:ee:3e:1b:c7:66:e1:43:55:ac:45:75:1d:
8a:c3:60:9c:b1:75:1f:20:5e:07:9f:4f:d0:f0:94:5b:7d:6a:
73:c4:ef:f2:58:ad:83:2b:a5:a6:d3:dd:79:2f:08:b1:f2:5b:
5e:fb:a7:34:41:b9:a9:53:a0:a0:1c:e7:21:a1:58:93:be:4d:
12:ea:04:42:fd:c5:b5:c5:62:7a:31:98:dc:8f:dc:2f:b0:90:
d8:e9:ac:a6:6a:2d:80:8b:50:6d:fb:36:f4:85:87:a4:bb:f9:
64:1c:42:81:17:62:6a:2b:71:e6:1d:85:88:5d:5f:07:7e:69:
10:79:76:ca:ae:e8:e8:24:6e:54:50:f7:dc:50:a9:ef:c7:00:
e3:c8:a7:94:ef:bd:f7:1d:8c:11:c5:25:e5:41:35:e6:3b:5e:
5d:cd:65:6d:68:41:4a:09:c9:6a:9c:36:70:70:c8:fc:2f:8f:
4d:1e:d4:bf:d0:7b:c1:a4:a9:d3:52:52:25:78:52:d0:5f:21:
5c:27:4a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:18:38 2026 by rpki-client