Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS203202.roa
File: AS203202.roa (raw, json)
Hash identifier: JckClazFw85gLBmKhx1rhI0VdtoSFZRVCI70q4vyoCA=
Subject key identifier: ED:29:D6:B9:A6:EE:37:02:52:93:CC:72:A8:D6:07:53:2E:25:4C:92
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 7C6728C2B7A06A4CEE8C3D866A990CE0C298B948
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS203202.roa
Signing time: Wed 11 Nov 2026 03:09:23 +0000
ROA not before: Wed 11 Nov 2026 03:04:23 +0000
ROA not after: Wed 10 Nov 2027 03:09:23 +0000
asID: 203202
IP address blocks: 2a0f:85c1:dd9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:67:28:c2:b7:a0:6a:4c:ee:8c:3d:86:6a:99:0c:e0:c2:98:b9:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Nov 11 03:04:23 2026 GMT
Not After : Nov 10 03:09:23 2027 GMT
Subject: CN=ED29D6B9A6EE37025293CC72A8D607532E254C92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:be:ec:ce:ef:e0:cf:f7:33:25:45:a5:ab:94:
da:db:66:7c:bc:60:d6:c0:b7:d8:7e:31:e9:31:96:
b9:ed:78:74:87:dc:ac:22:c9:66:c1:5e:fe:44:8e:
c0:3a:f5:09:a2:0b:be:09:ee:20:31:8a:b2:06:63:
d1:33:9e:3a:1a:8b:b4:cb:91:3c:bd:ed:cb:08:12:
52:97:77:cf:f2:b3:1b:3b:0f:c8:ad:ae:8d:fe:0e:
fd:08:a1:3d:f6:5f:0b:5e:49:e1:87:7f:5e:d9:78:
9b:b5:1a:a5:d9:08:31:dc:34:c5:b7:68:3c:9a:d1:
42:c9:35:18:7e:c3:a6:30:c6:2a:af:cb:73:c4:f3:
eb:9b:85:fd:20:b8:63:24:61:14:31:a2:0a:4a:1a:
01:ba:1e:e4:57:e0:b3:b8:95:3b:d3:4d:51:f4:8d:
18:84:a4:da:ea:dd:1a:ac:84:d0:f4:23:9d:62:db:
81:1f:ba:73:9c:28:97:af:04:1e:8b:4b:d0:69:95:
4c:1c:8d:de:7d:24:a2:c9:71:dd:3d:74:ad:8e:fd:
64:8a:61:46:57:2c:53:23:da:42:fe:8c:f3:3f:ce:
8e:4e:5a:7c:6e:76:38:cf:9c:73:92:1d:02:78:82:
fe:f2:d7:96:73:f7:42:47:56:09:19:f0:42:8e:d1:
56:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:29:D6:B9:A6:EE:37:02:52:93:CC:72:A8:D6:07:53:2E:25:4C:92
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS203202.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:dd9::/48
Signature Algorithm: sha256WithRSAEncryption
e6:d4:9b:4b:7f:c2:fa:0d:b6:89:8e:65:49:28:c7:34:c7:f1:
19:f4:09:ca:96:ac:74:19:ad:fa:17:fa:a6:3a:b9:90:3a:4c:
52:98:a4:3a:8b:70:04:5e:3f:55:3b:d3:fc:25:13:90:ea:15:
f2:d9:aa:00:d0:6a:23:61:7b:29:3d:ff:0c:e5:30:1e:c6:12:
53:86:06:0c:60:0d:fc:32:dc:af:33:f1:9c:4a:3a:a4:1a:b1:
e0:0f:66:96:11:da:44:65:40:6e:02:b8:c0:d9:3b:ea:67:3c:
3e:84:fb:fb:99:65:b3:43:89:d9:8b:a4:c3:35:b1:b8:af:c8:
79:ee:d6:05:cc:5f:56:ce:51:2d:29:ed:cd:13:1a:56:97:8e:
8b:c7:19:af:82:50:65:4c:2f:d9:2c:d1:50:97:22:3e:38:69:
df:21:09:bc:44:92:0a:60:06:08:8c:28:8a:b0:6c:6b:8f:80:
f7:50:8e:8d:46:a8:94:bb:28:a5:a3:9a:c8:ab:35:57:26:ed:
5e:4d:e4:eb:30:12:c3:af:6e:f9:12:ed:53:8e:8c:f2:a9:3d:
38:bb:aa:3b:23:99:5c:a1:1e:2c:6d:36:a8:e8:50:be:65:36:
70:cd:f1:3a:17:ee:fe:25:6f:03:71:fa:08:e5:c5:40:17:d6:
7b:05:14:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:32:34 2026 by rpki-client