Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS200819.roa
File: AS200819.roa (raw, json)
Hash identifier: H39vcpFN2zZkVBhKGzmZp+Y/e7y5f+8yejBH4e5somE=
Subject key identifier: 0A:33:BC:A3:60:F5:CC:A4:3F:75:56:BD:76:0C:5A:5C:11:87:EA:E7
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 08A63EB4B48A1D950C59055D9A102E03515569C7
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS200819.roa
Signing time: Mon 23 Feb 2026 14:45:51 +0000
ROA not before: Mon 23 Feb 2026 14:40:51 +0000
ROA not after: Mon 22 Feb 2027 14:45:51 +0000
asID: 200819
IP address blocks: 167.148.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Feb 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:a6:3e:b4:b4:8a:1d:95:0c:59:05:5d:9a:10:2e:03:51:55:69:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Feb 23 14:40:51 2026 GMT
Not After : Feb 22 14:45:51 2027 GMT
Subject: CN=0A33BCA360F5CCA43F7556BD760C5A5C1187EAE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:71:7b:9f:c5:4d:bd:70:a0:64:24:49:ca:79:
49:32:d9:1e:9b:52:04:e6:f8:2d:6c:55:b2:b4:95:
47:20:af:44:d6:cc:f7:0b:6c:e8:af:6e:ed:e2:7c:
64:13:67:57:a1:83:3c:93:eb:d6:ed:6a:bb:6e:5e:
53:fc:e0:c0:d2:8c:4b:f8:42:ea:a7:1b:ef:ba:76:
00:d4:76:d9:14:2c:43:51:2b:b0:4f:68:21:8b:9c:
76:1d:b9:bd:0b:3f:a0:8e:0b:48:67:cc:78:5b:d0:
81:40:96:b3:fc:05:c4:ef:b2:2b:95:95:fe:cb:d6:
27:d0:42:1e:e9:ae:f1:16:0a:e4:51:ab:4d:0e:23:
00:3c:79:41:cc:a3:cf:fc:4d:56:9f:d8:49:dd:5f:
87:75:49:c6:5d:0e:f3:a8:4d:fd:9a:6f:4f:1d:b0:
68:77:86:72:bc:47:27:36:f6:3d:9f:9c:99:d8:45:
f6:87:74:d9:79:61:e7:73:17:83:f0:5e:89:f9:e6:
a5:b7:58:3a:c2:c3:8e:8f:3c:44:15:42:a1:17:06:
c2:28:aa:35:73:5a:76:19:d6:62:83:a6:47:e9:a3:
48:76:a6:4c:07:e8:72:72:3a:7a:37:1f:c7:2f:c5:
68:45:b2:88:3b:79:25:52:1b:34:b6:1e:8d:01:9d:
cc:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:33:BC:A3:60:F5:CC:A4:3F:75:56:BD:76:0C:5A:5C:11:87:EA:E7
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS200819.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.148.189.0/24
Signature Algorithm: sha256WithRSAEncryption
71:75:f5:a9:0a:6f:85:d6:e6:68:96:05:4b:55:89:50:dc:32:
5a:6c:69:45:4c:c3:5c:dc:fb:95:25:5f:41:cd:36:15:13:15:
e7:19:66:95:f1:7a:67:11:c9:ad:ed:2d:6b:f2:65:dc:40:ad:
20:7a:26:20:7c:c1:dc:a7:81:94:1f:0a:6b:83:27:1d:c7:07:
d1:6d:5f:c9:fc:56:03:4c:9c:ae:df:ba:6b:d1:16:5b:ad:ef:
ca:3b:59:2f:47:a3:5c:26:f8:76:14:ec:20:d7:42:59:8d:c1:
5e:77:b5:7b:a7:3d:1e:50:a1:61:e0:8f:ee:d0:3f:21:c6:15:
72:3c:ba:97:35:b9:fa:b2:fa:be:f9:36:f3:d7:1e:48:4e:41:
f1:cd:0d:8e:22:e2:65:e1:d5:9a:2f:6b:f6:3d:b9:49:41:1f:
d5:57:b7:0f:23:ac:9a:25:f9:8e:d2:e9:ef:3c:4c:4d:94:02:
14:f9:e1:a0:b8:4a:e3:93:47:d7:3f:cf:a0:13:0f:a4:ee:18:
e8:2a:a3:5e:06:ed:c8:37:c6:54:f0:d6:4a:33:73:c7:e0:d1:
e7:89:e8:f8:73:b0:2a:28:b2:e5:6c:e4:83:0d:7c:fb:30:13:
50:15:fa:4f:87:6b:65:4f:83:b0:87:4a:5f:8b:4c:1c:94:e8:
06:75:af:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 09:15:24 2026 by rpki-client