Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200260.roa
File: AS200260.roa (raw, json)
Hash identifier: pm9+ESaENdGbKQlUwgUGENwBlJuw1HlP+H3Rh75wcrA=
Subject key identifier: 5E:68:C5:C0:C4:59:CE:FA:0F:FD:B7:9D:25:A6:C7:F5:8D:C3:61:53
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0CE4C582C4149B31357518A8470EEBF1BE8D44E0
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200260.roa
Signing time: Mon 12 Oct 2026 00:05:25 +0000
ROA not before: Mon 12 Oct 2026 00:00:25 +0000
ROA not after: Mon 11 Oct 2027 00:05:25 +0000
asID: 200260
IP address blocks: 82.29.12.0/22 maxlen: 24
82.39.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:e4:c5:82:c4:14:9b:31:35:75:18:a8:47:0e:eb:f1:be:8d:44:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 12 00:00:25 2026 GMT
Not After : Oct 11 00:05:25 2027 GMT
Subject: CN=5E68C5C0C459CEFA0FFDB79D25A6C7F58DC36153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c8:aa:ef:e6:ca:05:8f:90:fe:2b:10:45:90:
ef:53:18:c7:47:f0:63:25:b6:dc:26:1b:98:6a:62:
28:43:f8:60:a7:58:d4:c9:fb:a2:2b:bc:bd:fd:87:
15:84:15:32:4f:35:2e:c8:af:33:f5:d5:d5:50:e0:
b3:0e:82:5e:de:9e:c8:7a:02:e1:7b:61:44:b4:ed:
46:29:2d:12:a3:93:ff:51:1e:6b:82:53:ef:1f:0b:
c1:e1:58:ea:1c:bd:22:d5:57:4e:a1:41:40:82:65:
b9:e5:68:a5:3e:42:57:1b:44:9c:4d:7a:fd:60:9b:
19:2f:5c:e8:2b:f2:8b:54:8e:d5:de:65:78:db:0c:
9d:e6:83:6d:d1:2d:26:aa:d9:aa:46:7e:0a:d8:7f:
a6:5a:13:fa:f6:75:d5:b7:a1:ef:82:9c:47:d2:7d:
2c:e0:96:bf:29:8c:0f:6f:e2:b9:54:4f:43:95:8c:
e0:c5:dc:92:34:33:2e:2c:2e:56:ee:0e:22:c3:2c:
96:db:2e:e0:b4:62:9f:c2:37:82:ac:9d:e5:cf:84:
d4:40:56:30:3a:e3:63:42:d2:ac:17:32:d5:7c:c9:
da:57:35:e4:b5:9c:d0:0e:ad:b5:d0:f8:03:cf:3a:
76:09:d3:6a:42:a8:d1:31:11:ff:d4:5b:a9:e8:a1:
a6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:68:C5:C0:C4:59:CE:FA:0F:FD:B7:9D:25:A6:C7:F5:8D:C3:61:53
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200260.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.29.12.0/22
82.39.200.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:58:30:d6:9d:a4:3e:59:1d:6e:4c:29:03:1e:d9:33:28:7d:
07:c8:b1:4d:d2:63:0e:40:e3:d1:c9:1a:58:12:fe:20:c4:25:
d7:76:db:7c:5d:30:4d:8b:72:2d:3a:da:8d:2a:11:d6:a0:67:
2d:c1:5c:ec:fa:d4:cb:a5:06:a0:a1:3d:59:54:a1:0f:0c:ee:
71:1a:1e:99:c3:6a:1c:45:69:3a:9c:32:1b:85:fe:87:0e:90:
15:6b:e1:aa:08:f2:a5:b9:6c:b4:6f:8d:1b:2a:18:65:af:8e:
ac:57:32:5a:a7:3e:9b:63:e6:e5:b3:33:a2:0f:17:ce:92:10:
62:33:43:89:ed:03:f3:2b:94:7e:bd:24:9c:98:c6:33:51:c7:
ad:07:46:fe:3c:ce:a6:b5:6b:6d:29:fd:82:3b:4e:69:ff:93:
4e:ec:20:51:57:31:dd:ad:91:61:a3:d3:58:0e:c8:cd:86:aa:
d3:0a:8d:9f:95:2b:3a:96:1c:c3:ef:af:3e:c8:17:49:8e:69:
be:73:4f:e6:85:e3:b4:3e:9b:c8:0a:93:19:4a:ae:07:65:0c:
b9:21:af:6e:9c:6e:22:f4:cb:1f:37:b8:2f:17:05:7a:8c:47:
7d:4b:ff:11:60:51:44:84:71:2e:6b:47:d7:a9:4c:90:0c:14:
84:f2:a7:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 04:48:15 2026 by rpki-client