Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203446.roa
File: AS203446.roa (raw, json)
Hash identifier: EdRndeyxCljktQg53A22UBaoU2+SjEEonwfXjST9XDY=
Subject key identifier: FD:59:2F:37:37:FD:BB:44:F4:14:EB:8D:64:32:CE:B2:74:4E:6C:BA
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 7ECFE952792C24B7C580F0CEA60A3D4D7A7E5DF0
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203446.roa
Signing time: Wed 22 Apr 2026 10:59:22 +0000
ROA not before: Wed 22 Apr 2026 10:54:22 +0000
ROA not after: Wed 21 Apr 2027 10:59:22 +0000
asID: 203446
IP address blocks: 82.29.103.0/24 maxlen: 24
82.47.19.0/24 maxlen: 24
178.83.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:cf:e9:52:79:2c:24:b7:c5:80:f0:ce:a6:0a:3d:4d:7a:7e:5d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 22 10:54:22 2026 GMT
Not After : Apr 21 10:59:22 2027 GMT
Subject: CN=FD592F3737FDBB44F414EB8D6432CEB2744E6CBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f9:8e:c1:6f:eb:c5:10:94:ee:e6:47:6e:a4:
51:25:1b:8a:ba:78:73:18:35:a7:15:52:66:cc:e6:
bc:81:9f:58:bd:75:d7:5e:ef:c1:ab:7b:e1:17:00:
80:93:17:3d:9a:c0:ab:79:39:39:bd:96:77:7e:94:
f4:53:da:b6:c0:24:65:a4:93:11:57:84:26:7b:15:
29:47:e3:d6:65:5e:7d:3c:89:35:89:b9:de:98:db:
21:66:d3:81:9e:44:10:71:a8:f0:b0:fd:9f:8c:37:
1c:dc:10:a3:1e:0c:24:9e:34:14:bd:27:71:3f:30:
c0:9e:a6:31:74:ae:53:59:a4:ac:70:a4:74:d4:bb:
4f:9f:71:d9:b6:99:09:c1:cc:14:23:ce:4e:75:dc:
f5:6f:9e:e9:46:67:85:d5:ee:0c:bc:b2:fb:e8:6d:
6a:c8:76:52:72:81:23:e3:6d:09:8b:3c:60:84:1d:
35:fb:12:a6:27:58:72:19:67:c9:38:27:37:4d:21:
6e:53:ce:03:22:fa:f9:60:b3:8e:09:8b:4e:8b:1e:
7e:9e:f9:b1:44:83:f7:1f:85:7e:49:c0:06:8b:6e:
ef:32:07:0e:6d:1f:86:17:db:a8:9f:47:47:0a:ce:
46:0c:7c:59:e8:c8:a7:30:76:0a:fd:84:2c:a8:25:
4d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:59:2F:37:37:FD:BB:44:F4:14:EB:8D:64:32:CE:B2:74:4E:6C:BA
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203446.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.29.103.0/24
82.47.19.0/24
178.83.15.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:64:d5:1e:01:d6:fe:bf:63:f3:93:3f:ee:0a:6c:25:01:bb:
91:7f:47:c5:e0:f4:01:1b:1a:1d:ba:0a:5b:15:14:2f:9c:dc:
7f:3a:e2:38:90:42:18:65:90:83:ce:82:5f:e0:9f:45:7b:55:
49:2d:7f:51:bc:6f:df:ea:9f:ad:c5:52:a8:45:93:54:53:92:
d8:73:7b:d8:05:55:61:7a:81:08:07:90:9d:73:e9:04:2d:85:
82:2d:cf:21:99:aa:72:db:98:5f:2b:96:b2:77:70:11:dd:92:
ed:9a:72:0e:c6:ba:77:ed:e1:5b:7f:01:48:fc:8c:9f:21:ea:
73:2e:33:d7:0a:e9:89:b3:db:d2:34:4b:64:9d:e9:8b:b6:e8:
1b:9d:a1:96:f7:8a:3e:79:b5:49:db:f3:87:c6:1c:0a:be:e8:
04:8d:e0:ce:96:95:f6:6a:db:40:bf:93:88:e2:9e:98:7e:d9:
9a:f4:bb:a7:9c:e8:f3:f6:73:17:5f:fb:f3:e3:f1:c5:22:f7:
6e:59:80:2c:9f:ed:8c:50:94:5e:19:f1:58:f9:5e:d3:1e:a7:
9a:b7:c8:a5:f0:ef:ba:f6:73:46:d4:6d:dd:be:bc:1f:d4:a7:
57:cd:e9:78:d8:8f:26:b5:43:9c:0e:0c:b2:e1:9a:fe:79:e2:
74:f9:a7:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:27:04 2026 by rpki-client