Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS203233.roa
File: AS203233.roa (raw, json)
Hash identifier: qVOGoVZy9XLorf2yIxb8H+z5sljN1j3BTFr9R3/Xj2Y=
Subject key identifier: 73:35:9A:66:0B:65:F5:89:82:87:FD:DF:69:BB:9F:26:55:6F:C6:0B
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 147ACCD5076E3C18A7363E4AC3E11646C69A490F
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS203233.roa
Signing time: Wed 11 Nov 2026 03:09:24 +0000
ROA not before: Wed 11 Nov 2026 03:04:24 +0000
ROA not after: Wed 10 Nov 2027 03:09:24 +0000
asID: 203233
IP address blocks: 2a0f:85c1:ddc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:7a:cc:d5:07:6e:3c:18:a7:36:3e:4a:c3:e1:16:46:c6:9a:49:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Nov 11 03:04:24 2026 GMT
Not After : Nov 10 03:09:24 2027 GMT
Subject: CN=73359A660B65F5898287FDDF69BB9F26556FC60B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9f:25:1f:b1:e4:a9:3d:0d:88:77:c2:a3:4b:
e8:f1:ba:44:d8:46:96:ae:b4:95:57:eb:9f:31:1e:
8a:90:0f:86:de:99:4f:e9:51:49:5d:f8:ec:5c:65:
c5:e7:aa:9a:89:3d:16:38:d0:d8:5e:ab:b1:4a:a1:
72:70:85:20:57:3c:6a:95:b5:d6:1f:16:88:63:e2:
01:73:c3:d9:fa:1d:1c:9f:d8:de:1a:c5:59:11:78:
1b:93:4f:32:d4:32:66:3d:e6:30:11:60:24:87:96:
c5:88:40:55:fb:20:c9:7e:65:f3:93:8b:23:96:fd:
e7:03:a4:c1:ef:05:fd:58:58:99:cf:98:a8:94:94:
c1:b8:9b:7b:f5:76:88:c9:5d:66:be:9f:90:64:90:
35:99:9b:0e:48:05:57:23:c9:9f:06:fd:0f:ea:b2:
bd:0d:f3:95:1d:e7:76:76:7a:e4:cf:a3:d6:69:16:
12:05:52:91:6d:53:91:d5:7b:45:ea:1d:e5:e0:56:
83:9a:39:93:bd:0f:37:50:24:28:83:aa:a6:3a:24:
25:df:7b:97:dd:b9:0a:65:af:98:23:18:d9:4d:de:
20:a2:7f:43:c0:bc:fb:b4:51:c6:dc:5c:b8:9a:00:
e6:86:7f:8a:9d:63:e6:95:fe:14:3e:70:06:ef:10:
12:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:35:9A:66:0B:65:F5:89:82:87:FD:DF:69:BB:9F:26:55:6F:C6:0B
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS203233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:ddc::/48
Signature Algorithm: sha256WithRSAEncryption
3a:03:b1:94:3c:70:8a:c3:8d:a4:24:58:06:11:c6:f4:9d:c9:
86:13:51:08:68:35:97:9b:17:c2:7c:a3:6a:2c:a6:26:d9:ff:
52:04:e6:53:04:0c:ae:14:a7:f8:95:8e:b1:71:df:a3:54:bc:
4e:6e:6a:06:19:15:97:2a:ff:ab:60:08:76:34:67:e9:ee:72:
72:a3:e0:b7:77:1a:91:20:8b:9a:43:13:78:37:3d:c6:5b:d8:
d0:da:d3:7c:83:b6:4e:2c:bd:e7:39:d4:14:8a:88:f7:3a:1b:
7b:1f:bc:e3:d3:60:4b:93:5b:d6:c8:c7:e3:ca:b9:e7:82:10:
5a:b6:54:85:b3:df:45:a3:3f:3f:b3:64:ce:62:ba:26:88:15:
31:d8:3c:c0:3d:67:d6:72:16:2c:f7:f5:75:eb:38:c1:62:54:
a4:22:f1:3c:d0:db:04:91:60:ed:c3:11:3d:dc:31:f8:52:f5:
71:fa:70:83:b6:e1:1d:5d:70:d9:1d:79:e5:70:56:d6:aa:79:
ab:c9:a6:45:a0:3e:14:b6:d3:e9:c7:37:b2:b8:78:61:44:8c:
62:40:ac:8a:f1:41:03:ec:09:3f:2b:99:aa:6b:b9:aa:37:59:
0b:44:59:8f:1f:77:a1:c9:93:8d:6f:37:f4:fb:ca:34:44:11:
0c:62:0c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:54:36 2026 by rpki-client