Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS200105.roa
File: AS200105.roa (raw, json)
Hash identifier: vW5BT25GpTLbN9DT4/HsNzOTdrDT2J0wWcuaMFtqQxk=
Subject key identifier: 0B:A2:D9:B2:8E:49:13:FB:DA:55:04:2C:DF:6C:4D:97:06:DB:B2:6E
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 039F9FE4129ED651DF3966D21DFCCA1C58D80FEF
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS200105.roa
Signing time: Mon 20 Jul 2026 00:03:45 +0000
ROA not before: Sun 19 Jul 2026 23:58:45 +0000
ROA not after: Mon 19 Jul 2027 00:03:45 +0000
asID: 200105
IP address blocks: 155.117.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:9f:9f:e4:12:9e:d6:51:df:39:66:d2:1d:fc:ca:1c:58:d8:0f:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 19 23:58:45 2026 GMT
Not After : Jul 19 00:03:45 2027 GMT
Subject: CN=0BA2D9B28E4913FBDA55042CDF6C4D9706DBB26E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1b:ae:22:7e:db:e2:ac:b8:ab:17:4f:6a:89:
06:8b:fe:a2:2f:89:5b:64:d3:01:5e:4b:91:c8:15:
42:e3:4e:f8:20:ab:29:81:13:69:97:df:c2:8a:b4:
c5:cc:a3:19:64:a9:e4:1d:a7:f3:13:89:f7:3f:3b:
1d:bb:9e:88:ce:aa:1a:f7:1c:3f:79:b3:3c:9f:83:
d1:02:a8:88:43:dd:d5:c6:e2:06:c1:5f:2c:06:33:
aa:29:53:0a:06:e7:43:66:8b:c9:5c:41:d4:0a:05:
a6:e4:e9:87:03:e0:b6:99:d3:19:7a:d9:27:8b:0b:
32:fb:b6:b6:c5:23:dd:47:7f:c5:60:94:92:a0:1f:
ab:85:56:44:a6:56:13:06:1f:b8:de:6b:ba:59:f5:
13:8c:ba:59:63:be:fe:af:fb:3c:43:5e:78:04:60:
f8:0a:01:1e:89:4d:a3:7e:d8:c8:ca:af:c1:bd:ea:
44:f4:95:3b:67:bc:b1:ca:27:5a:27:e2:df:b0:97:
d2:95:25:c8:22:e2:24:99:5f:70:ee:71:6b:fa:07:
a3:29:d0:d3:46:54:ad:10:f6:33:9c:81:ea:ef:7b:
fd:d8:2c:71:06:c8:86:ba:23:1c:0e:db:e7:1d:61:
b8:e8:a0:88:7c:1c:a5:f1:71:6d:0f:9b:e8:33:1b:
c5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A2:D9:B2:8E:49:13:FB:DA:55:04:2C:DF:6C:4D:97:06:DB:B2:6E
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS200105.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.108.0/24
Signature Algorithm: sha256WithRSAEncryption
24:c5:50:1e:fc:60:73:3c:c6:00:9e:83:23:04:4b:f0:f4:31:
3f:76:19:b6:7d:08:0f:ac:c1:37:36:c8:97:eb:c7:fd:4e:0f:
5a:0d:3e:fe:08:da:53:d9:ed:5c:e1:4a:3f:a4:d2:05:a7:e6:
66:a5:bf:e7:dd:08:71:54:e5:a5:bc:10:1e:13:74:06:f9:35:
f8:61:3f:a3:70:0e:7d:fd:89:0b:91:5c:8a:0a:02:f3:09:63:
45:ec:11:1a:b8:9b:8d:54:11:47:20:d3:63:ff:b1:7a:48:f3:
f8:ee:87:05:74:b8:3b:4f:87:fb:b4:41:88:1f:9f:06:98:4b:
5b:da:c4:b3:20:76:05:c4:50:76:b2:e2:63:1c:b6:03:66:c5:
b9:6e:78:7c:2c:5e:88:77:74:23:db:88:f5:e5:73:57:d3:e7:
60:57:36:aa:10:7b:0c:5a:9d:47:2f:bc:fc:64:61:51:2f:a3:
ac:35:06:68:2e:50:8b:a3:06:82:7c:87:d4:f4:c9:63:ee:5c:
82:a4:44:2f:0e:b2:f0:f6:89:e7:5c:c9:0f:13:81:a4:69:62:
cd:38:95:34:46:27:e6:76:9e:b9:b1:15:fa:9b:f4:18:40:57:
e3:11:3c:9b:b5:46:d5:30:4f:17:ad:05:ec:64:a4:a3:7f:91:
ff:3d:7c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 18:34:34 2026 by rpki-client