Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS200169.roa
File: AS200169.roa (raw, json)
Hash identifier: QtRELweUDanH3/5FqF+CueTqvHnpUK03iP/cZeBQOQA=
Subject key identifier: 9F:85:44:BF:F4:D5:4F:8B:F8:18:A4:6C:EE:D2:70:5D:DC:9B:EF:FD
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 51C7F8E932F19C95068C39C24DF96539FC1F0510
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS200169.roa
Signing time: Fri 31 Jul 2026 19:17:08 +0000
ROA not before: Fri 31 Jul 2026 19:12:08 +0000
ROA not after: Fri 30 Jul 2027 19:17:08 +0000
asID: 200169
IP address blocks: 155.117.8.0/24 maxlen: 24
162.141.152.0/24 maxlen: 24
167.148.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:c7:f8:e9:32:f1:9c:95:06:8c:39:c2:4d:f9:65:39:fc:1f:05:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 31 19:12:08 2026 GMT
Not After : Jul 30 19:17:08 2027 GMT
Subject: CN=9F8544BFF4D54F8BF818A46CEED2705DDC9BEFFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a0:cd:50:ca:b8:bb:fd:7f:e5:ff:04:08:9b:
0a:58:e3:0c:94:85:c5:f2:9d:50:8a:ab:3d:81:5f:
ec:91:da:69:35:d9:c9:1f:82:71:7d:60:ae:fc:fe:
cb:ea:f4:32:33:b7:46:e7:b8:74:31:b0:94:e9:8d:
24:3d:15:03:29:3e:0f:ee:59:a2:7b:0f:e3:be:13:
54:33:cc:84:fa:38:e7:18:b0:f1:3c:ca:54:45:72:
f9:15:ee:24:fa:99:66:ba:41:00:94:74:0c:07:f5:
26:b4:c1:eb:84:8b:96:3f:29:27:44:c2:02:75:2b:
41:ae:cc:b8:98:d9:31:6f:91:09:95:32:6a:7f:07:
1d:58:4e:f4:fe:63:69:91:4f:68:e7:d3:e5:35:67:
00:67:b5:7c:96:42:7d:f1:41:e9:ec:ee:eb:fe:31:
db:8f:a8:95:34:2d:9c:ef:19:2c:20:f3:c4:ca:2d:
fc:65:c4:04:8b:d3:17:31:fc:fd:79:0d:fb:07:a3:
d8:cb:22:e0:90:fa:c2:8f:9a:2a:af:9c:11:8a:53:
37:a2:de:d2:1e:51:47:50:93:ea:2d:f8:a5:01:11:
51:c7:64:a9:51:72:c6:28:48:e8:a2:cc:8b:d7:a5:
79:8f:a7:b1:3a:1f:e3:1f:d2:22:7f:38:38:ff:9b:
36:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:85:44:BF:F4:D5:4F:8B:F8:18:A4:6C:EE:D2:70:5D:DC:9B:EF:FD
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS200169.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.8.0/24
162.141.152.0/24
167.148.81.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:5f:01:f3:51:f4:d1:e1:0c:a4:2f:4d:44:42:52:14:ce:a5:
8a:e8:65:ac:b1:e3:b9:d2:18:3d:ce:d3:d7:4b:39:f9:17:46:
b3:18:25:fa:02:3d:a5:06:16:68:5c:af:4f:98:d7:e9:5b:a6:
b9:83:1f:66:b3:b0:a4:c3:60:85:d5:f3:7c:b5:67:46:46:2b:
f6:00:1d:cf:74:56:35:5a:ab:4b:54:b7:4b:69:fb:e4:aa:20:
d6:3b:03:10:8f:3c:97:d3:f5:50:0a:66:a7:a1:02:35:88:84:
8f:81:9f:88:8e:d5:10:6b:2f:20:3e:26:a2:4f:4c:d8:6e:56:
9f:6f:f5:30:49:67:d9:e8:39:82:9f:a7:b5:8c:f3:08:17:16:
ef:78:e4:b7:56:93:7b:55:0a:cc:7e:62:b1:d4:a6:62:7c:aa:
43:6d:12:a3:13:04:b9:6b:ae:7e:95:62:1e:b2:68:99:a8:2c:
bb:f9:2e:8e:10:fb:06:ae:65:45:ab:b4:78:01:9d:28:65:f3:
40:8a:3e:34:8d:30:55:e6:cc:75:9f:e3:a4:fb:9e:84:1c:2b:
a6:f2:a8:e1:30:c9:8b:a6:70:76:bc:67:15:62:a4:dc:9e:29:
b3:b6:43:d6:18:df:da:d3:ed:a3:87:3f:6a:f8:8e:55:ff:37:
35:b6:b4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:34:15 2026 by rpki-client