Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS200307.roa
File: AS200307.roa (raw, json)
Hash identifier: EqG94+UI6K2+dtmmIhVQVo0ORci5BLLtoN+AHh5yW+4=
Subject key identifier: C4:A8:C7:B9:5D:F5:79:D3:D1:4E:8D:1D:A8:3A:CC:84:64:78:DE:ED
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 77ACC0B63092EF0D533031F91AE8D08ED0CF0CCC
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS200307.roa
Signing time: Wed 24 Jun 2026 11:02:43 +0000
ROA not before: Wed 24 Jun 2026 10:57:43 +0000
ROA not after: Wed 23 Jun 2027 11:02:43 +0000
asID: 200307
IP address blocks: 140.150.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:ac:c0:b6:30:92:ef:0d:53:30:31:f9:1a:e8:d0:8e:d0:cf:0c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 24 10:57:43 2026 GMT
Not After : Jun 23 11:02:43 2027 GMT
Subject: CN=C4A8C7B95DF579D3D14E8D1DA83ACC846478DEED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b2:f8:68:f9:96:1a:36:7c:c4:26:2d:1c:39:
65:19:bc:30:12:e1:0b:e5:90:df:f8:6b:be:df:10:
95:62:86:5a:14:f3:14:24:2c:53:53:de:c2:c2:9a:
75:67:d8:22:1f:1e:e9:cc:7c:18:58:be:6b:33:67:
f9:52:2c:2f:28:98:19:25:61:5b:31:ee:de:3e:10:
70:60:9d:57:3e:26:08:68:e7:16:21:2c:d2:df:6c:
3f:c3:19:99:6f:d5:ea:5c:d2:7f:57:c6:75:3e:02:
e1:f3:db:c5:78:8f:c2:d9:1c:1a:0d:8a:e0:57:7b:
d1:33:25:3e:b8:94:84:51:da:a1:fc:90:b5:35:18:
1e:20:94:4b:66:3e:30:25:6e:48:6e:53:2c:83:70:
59:3f:bc:cd:d9:28:e2:55:37:9b:53:ee:d9:7b:d0:
cb:b2:af:19:4b:20:48:33:73:ec:13:8b:2d:44:39:
14:54:a5:2f:97:00:88:e0:99:93:3a:82:78:31:b6:
55:3d:78:6a:43:ae:39:34:af:b2:78:7b:95:7d:d6:
27:ef:06:97:8c:3c:eb:83:e2:15:70:ae:ac:87:78:
0b:86:36:a3:72:1f:04:95:3b:f1:38:94:6b:05:34:
32:6b:51:93:7a:39:6a:1f:ac:31:6d:85:c6:ef:98:
28:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A8:C7:B9:5D:F5:79:D3:D1:4E:8D:1D:A8:3A:CC:84:64:78:DE:ED
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS200307.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.232.0/24
Signature Algorithm: sha256WithRSAEncryption
77:dd:47:d4:31:a4:6a:de:0f:e1:a7:ec:9d:68:95:4b:2e:59:
1d:4d:6a:28:70:09:85:e8:b0:7a:e0:25:32:ec:85:87:34:0a:
da:f7:fd:7d:93:c1:5a:3a:aa:1c:20:c5:79:ef:70:a5:c3:51:
f2:ad:df:8f:0c:9b:27:fe:7c:d0:b8:c6:f6:a4:2a:31:64:3b:
32:82:21:e3:fc:2d:6a:95:66:78:ce:93:6c:59:38:69:33:b1:
50:dd:2f:a5:d9:6d:ed:4b:9c:1c:8f:22:2e:b6:47:6c:2f:eb:
94:92:83:fc:70:54:09:f4:f8:a9:51:aa:ff:6e:13:01:94:35:
b2:4a:4c:f9:ac:c1:8f:ad:31:f3:58:96:cd:68:f7:e8:96:db:
cb:65:23:c4:e0:97:68:33:c3:57:1b:b3:82:18:e2:44:d9:0c:
17:33:99:57:9e:2d:69:a5:12:14:10:0f:15:06:b3:42:eb:33:
4d:49:2d:2e:58:7b:d1:cf:cb:d3:9b:71:15:bf:c3:53:1e:3d:
7b:54:27:b2:06:52:e5:35:3d:d3:76:5c:ed:5c:c8:cb:c8:91:
21:df:06:08:1b:75:16:c8:cb:69:a8:88:6e:26:91:92:af:ba:
c8:68:e5:ec:08:22:55:08:4f:33:ec:45:bf:29:a4:33:92:bd:
e5:1e:da:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 06:40:57 2026 by rpki-client