Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/AS203314.roa
File: AS203314.roa (raw, json)
Hash identifier: RbYJAzZy0wCU06yulXJ+FCO+tbFGWR1tFPVS4Mpv/yM=
Subject key identifier: DD:9E:63:A9:15:C6:86:90:CA:DF:4F:62:50:89:79:DC:C0:3F:E4:2D
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 375998A1E224E7BFA80B3CAB0F83AA209E013151
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/AS203314.roa
Signing time: Thu 12 Nov 2026 08:25:18 +0000
ROA not before: Thu 12 Nov 2026 08:20:18 +0000
ROA not after: Thu 11 Nov 2027 08:25:18 +0000
asID: 203314
IP address blocks: 2a0f:1cc1::/32 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:59:98:a1:e2:24:e7:bf:a8:0b:3c:ab:0f:83:aa:20:9e:01:31:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Nov 12 08:20:18 2026 GMT
Not After : Nov 11 08:25:18 2027 GMT
Subject: CN=DD9E63A915C68690CADF4F62508979DCC03FE42D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3e:17:0f:58:0d:42:08:79:0a:6b:e3:4f:65:
0c:4a:d4:28:cd:99:77:b6:fc:a8:96:46:5d:e1:be:
79:67:86:b2:e9:c5:d5:e3:64:53:70:65:ea:3f:74:
b7:9f:86:65:11:72:13:8e:12:f8:76:82:10:02:f6:
21:a3:3e:df:e7:7c:00:35:9a:9b:2c:c8:26:8d:50:
09:b4:f3:83:37:6f:7c:1e:82:55:a7:33:66:b0:cc:
ad:f2:c9:b4:81:d9:ce:0e:4d:b9:93:ce:74:01:8c:
3b:54:5a:af:26:58:7a:71:c2:bd:53:11:a9:3f:e1:
2e:3e:90:55:45:82:0e:c7:5e:1a:97:5b:48:be:67:
b7:7d:c0:94:74:77:40:1f:a4:3a:76:26:3f:31:e1:
c7:62:6d:e2:b3:ce:51:27:a1:9f:c6:f7:46:a9:f3:
80:12:27:37:01:ff:13:7f:73:3f:49:91:5c:a5:d4:
84:c0:8c:43:82:5a:9e:89:0f:66:aa:ef:80:ca:0d:
2f:82:52:ea:9a:ba:63:75:08:0e:c0:bd:88:f8:33:
dd:c1:e2:63:92:b7:c0:ef:ab:1a:c0:21:87:82:fc:
b1:d5:09:5b:b0:49:09:66:53:0a:e1:75:a1:98:9d:
44:4e:ac:e4:05:f4:1a:db:a4:aa:fd:f3:ce:40:3f:
3a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:9E:63:A9:15:C6:86:90:CA:DF:4F:62:50:89:79:DC:C0:3F:E4:2D
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/AS203314.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc1::/32
Signature Algorithm: sha256WithRSAEncryption
44:b9:fc:3d:7f:45:84:b1:8a:2c:1a:d5:f5:eb:4c:36:d0:c2:
96:11:c4:51:5a:70:da:2e:79:36:bd:dd:f3:da:05:c0:06:79:
f2:0b:c1:97:18:5e:4b:58:f5:70:7f:0a:85:6c:d5:35:00:71:
28:8f:96:d7:a3:52:33:69:3b:c4:f8:96:67:12:6b:c7:a9:58:
7b:95:33:d6:42:0b:bf:2a:89:f6:aa:ca:d6:d7:50:e4:01:62:
bf:79:70:14:1f:97:7e:16:1e:39:d3:ab:8e:9c:f8:d4:b7:46:
fb:7f:db:41:71:3a:66:26:2d:b2:49:73:df:fb:10:f3:61:dd:
c8:68:18:21:23:9f:d2:ce:ca:06:89:6b:0f:b3:55:c9:d7:84:
54:5e:e9:e8:20:e9:79:a4:1b:7f:d3:d3:9e:95:86:b0:91:a5:
d5:de:65:b6:1c:d6:cf:38:cd:4c:a6:bf:0a:0c:bd:e0:d5:16:
32:df:61:99:f6:3f:c6:96:3a:bc:d1:90:7f:b6:bd:61:1f:63:
4f:24:9d:16:d4:8a:4c:6a:e4:68:50:bd:51:34:c7:ee:28:3d:
a8:7a:4f:68:0b:bb:c5:5d:e4:ac:df:ab:c0:93:9f:41:86:82:
ac:0d:0d:84:40:a9:11:1b:05:51:a1:dd:67:86:57:57:b8:de:
b8:05:a6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:20:41 2026 by rpki-client