Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203446.roa
File: AS203446.roa (raw, json)
Hash identifier: hHiIliqvTWuMa8QETVCSMGIhB094j0yDnAfD3WwXnYY=
Subject key identifier: AD:0C:CF:53:A3:0E:20:28:19:1D:DB:D6:65:C6:5D:E0:2B:D1:77:6C
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 21AC550F2773B0C83ECCEA7698D2DF82B121F45A
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203446.roa
Signing time: Mon 16 Mar 2026 16:08:23 +0000
ROA not before: Mon 16 Mar 2026 16:03:23 +0000
ROA not after: Mon 15 Mar 2027 16:08:23 +0000
asID: 203446
IP address blocks: 82.26.169.0/24 maxlen: 24
82.29.103.0/24 maxlen: 24
178.83.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:ac:55:0f:27:73:b0:c8:3e:cc:ea:76:98:d2:df:82:b1:21:f4:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 16 16:03:23 2026 GMT
Not After : Mar 15 16:08:23 2027 GMT
Subject: CN=AD0CCF53A30E2028191DDBD665C65DE02BD1776C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:99:1e:79:c5:80:b4:de:9b:91:77:ce:39:49:
ea:d9:87:9e:58:98:84:27:5c:2a:00:26:64:a3:03:
2a:c0:ab:56:93:6a:09:cf:b0:c1:15:a5:b5:41:22:
27:ab:2a:b6:83:c1:b2:f5:2d:40:e9:29:e3:c4:ce:
13:87:36:e7:1a:57:09:9b:6d:93:94:87:47:ee:bb:
a8:28:63:0d:bb:49:9b:0b:30:fc:8f:d7:37:fe:85:
19:f1:66:73:02:9a:63:c4:ae:51:01:f2:d2:99:5a:
26:f9:98:b3:99:b4:81:2c:e1:db:0d:76:30:48:12:
bd:c1:75:f2:18:83:e6:5c:38:34:50:fe:13:e1:98:
8b:db:f6:40:4b:e1:5f:4a:61:f0:7e:bc:2b:77:3f:
e6:da:e2:b8:ae:7f:53:3e:42:f3:c4:60:6f:75:5b:
3f:ce:1e:f1:c0:08:52:83:8f:1e:85:4f:99:49:83:
94:08:20:b7:a9:d7:96:74:96:68:11:0e:36:79:0f:
c4:43:95:07:07:46:ae:85:a7:16:a5:c2:74:21:e3:
68:c1:19:65:16:23:86:22:92:0b:70:51:82:dd:3d:
50:1a:8f:0c:12:12:14:e3:20:8c:1d:3c:b3:de:73:
d8:71:79:73:93:d7:dc:47:90:c4:4b:ff:2d:00:b9:
8c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:0C:CF:53:A3:0E:20:28:19:1D:DB:D6:65:C6:5D:E0:2B:D1:77:6C
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203446.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.26.169.0/24
82.29.103.0/24
178.83.15.0/24
Signature Algorithm: sha256WithRSAEncryption
86:ed:5a:b9:f0:07:1c:94:1d:f7:8f:f2:6e:25:f1:c0:7d:7e:
bd:cc:81:24:75:45:e2:f6:7e:7c:0a:92:2f:14:16:92:f0:f0:
39:95:c6:5b:10:1f:f6:d2:58:83:ee:53:35:19:c1:52:5f:55:
28:7f:a0:b1:02:1e:15:47:f6:cc:3e:e0:4c:5a:cc:f0:aa:6e:
6d:60:2d:5f:d8:02:b3:e4:ec:a6:ed:bb:df:65:1e:a3:50:d6:
81:49:d4:2b:a0:8a:20:ea:ca:91:15:c8:aa:85:b1:dd:d4:2f:
bb:e8:96:96:9f:35:27:c4:ca:d0:d1:ce:61:6b:5d:fa:a9:17:
82:1b:4f:6e:a9:74:db:34:9d:a4:7e:e4:6a:c5:22:03:7b:f0:
11:23:fc:d4:3a:35:f9:1d:b3:5b:b1:7b:79:87:fe:95:a2:7a:
29:ff:e5:78:77:11:e3:f1:02:76:6a:71:be:b0:4a:77:c6:88:
28:56:2e:e8:63:1c:03:ef:b3:40:9d:da:5c:fa:c3:f1:3c:d4:
21:aa:23:31:23:d3:bc:02:97:7a:b4:c9:0b:97:53:2d:45:6e:
5b:4a:4e:8e:08:bc:d1:32:54:d1:1f:58:cd:0d:f6:34:d6:d0:
ba:08:fd:bc:b9:17:20:27:e7:b2:41:7d:a8:d3:23:91:2f:f8:
0c:49:b7:b9
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIUIaxVDydzsMg+zOp2mNLfgrEh9FowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjAzMTYxNjAzMjNaFw0yNzAzMTUxNjA4MjNaMDMxMTAvBgNV
BAMTKEFEMENDRjUzQTMwRTIwMjgxOTFEREJENjY1QzY1REUwMkJEMTc3NkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDimR55xYC03puRd845SerZh55Y
mIQnXCoAJmSjAyrAq1aTagnPsMEVpbVBIierKraDwbL1LUDpKePEzhOHNucaVwmb
bZOUh0fuu6goYw27SZsLMPyP1zf+hRnxZnMCmmPErlEB8tKZWib5mLOZtIEs4dsN
djBIEr3BdfIYg+ZcODRQ/hPhmIvb9kBL4V9KYfB+vCt3P+ba4riuf1M+QvPEYG91
Wz/OHvHACFKDjx6FT5lJg5QIILep15Z0lmgRDjZ5D8RDlQcHRq6FpxalwnQh42jB
GWUWI4YikgtwUYLdPVAajwwSEhTjIIwdPLPec9hxeXOT19xHkMRL/y0AuYwFAgMB
AAGjggIWMIICEjAdBgNVHQ4EFgQUrQzPU6MOICgZHdvWZcZd4CvRd2wwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjAzNDQ2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUhqp
AwQAUh1nAwQAslMPMA0GCSqGSIb3DQEBCwUAA4IBAQCG7Vq58AcclB33j/JuJfHA
fX69zIEkdUXi9n58CpIvFBaS8PA5lcZbEB/20liD7lM1GcFSX1Uof6CxAh4VR/bM
PuBMWszwqm5tYC1f2AKz5Oym7bvfZR6jUNaBSdQroIog6sqRFciqhbHd1C+76JaW
nzUnxMrQ0c5ha136qReCG09uqXTbNJ2kfuRqxSIDe/ARI/zUOjX5HbNbsXt5h/6V
onop/+V4dxHj8QJ2anG+sEp3xogoVi7oYxwD77NAndpc+sPxPNQhqiMxI9O8Apd6
tMkLl1MtRW5bSk6OCLzRMlTRH1jNDfY01tC6CP28uRcgJ+eyQX2o0yORL/gMSbe5
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:29:20 2026 by rpki-client