Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS200169.roa
File: AS200169.roa (raw, json)
Hash identifier: ExhU535p220HFH2LbSU4xjgrB4HVbgOyBJkakSNfpC8=
Subject key identifier: 17:91:C6:96:C9:AA:D5:C5:36:F0:00:E9:B9:79:26:96:CE:18:52:EE
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 2908094B1511AC09FE1ABDA9B3027AFEE548F933
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS200169.roa
Signing time: Fri 31 Jul 2026 19:16:49 +0000
ROA not before: Fri 31 Jul 2026 19:11:49 +0000
ROA not after: Fri 30 Jul 2027 19:16:49 +0000
asID: 200169
IP address blocks: 82.139.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:08:09:4b:15:11:ac:09:fe:1a:bd:a9:b3:02:7a:fe:e5:48:f9:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Jul 31 19:11:49 2026 GMT
Not After : Jul 30 19:16:49 2027 GMT
Subject: CN=1791C696C9AAD5C536F000E9B9792696CE1852EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f9:8b:53:72:43:e5:b2:dc:41:d8:ce:9b:ce:
6e:33:b6:41:8d:85:fe:77:a5:19:13:25:d8:e5:c0:
77:dd:b4:16:7e:89:6d:2a:09:fc:ac:53:22:28:87:
bb:3e:cd:c1:71:19:de:09:ca:07:1f:2f:f0:8f:c5:
29:2b:a1:6b:27:e2:88:91:26:23:ff:b6:13:d8:ae:
1d:a3:7e:43:39:ba:cb:b8:ce:62:d4:b7:ec:1f:24:
aa:90:fc:39:8e:0b:30:1e:8b:c0:c5:13:a3:95:66:
47:94:69:c0:c4:bd:71:3a:5a:79:37:0a:9c:63:5b:
2b:b0:dc:55:38:78:64:13:0c:15:04:c8:9d:e1:ed:
a2:fc:37:78:00:84:5e:52:11:37:9f:3f:9e:db:f5:
51:ae:14:62:14:56:25:96:d3:5c:16:1d:b2:28:e9:
a0:ee:b5:53:fc:83:06:4f:e8:72:a4:15:cf:f7:81:
40:cc:61:06:a9:41:df:34:6a:b7:d1:76:12:fe:a9:
cb:86:3b:48:07:48:c0:c3:d6:5d:81:87:e8:a3:33:
a1:7d:b2:6d:59:02:19:e7:75:bf:46:47:38:fe:e3:
9d:ab:c8:53:65:e6:17:44:24:f0:55:1e:58:2c:3e:
55:92:84:46:48:7c:51:7f:9a:77:dc:4e:8c:2c:b7:
31:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:91:C6:96:C9:AA:D5:C5:36:F0:00:E9:B9:79:26:96:CE:18:52:EE
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS200169.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.139.229.0/24
Signature Algorithm: sha256WithRSAEncryption
24:d4:c8:14:5b:32:06:fe:75:c3:81:95:79:42:b7:76:16:21:
b0:89:9b:05:53:3e:20:81:c3:d4:e6:91:b6:26:8d:30:44:da:
76:9f:77:ba:20:8f:c0:98:be:16:07:22:8f:4a:c0:61:c1:1d:
62:c0:8e:a7:9c:b0:ac:18:40:c8:61:f6:d2:de:f0:8f:6a:38:
e4:01:a8:4e:20:1f:f2:56:e1:ce:fe:98:28:c6:7c:55:9a:ca:
ca:fe:1f:6d:30:2f:a0:27:1e:a4:0a:8c:6c:07:42:21:a8:92:
49:01:95:b3:dd:4b:01:25:bc:39:4c:95:9b:b9:3c:62:43:43:
a5:b4:55:fb:f8:89:9c:e6:30:9b:bc:b0:5f:e5:1a:95:9f:95:
4a:e3:5b:98:00:74:c9:53:d9:41:62:77:40:30:09:db:12:fa:
01:0d:1a:d6:1e:a6:d0:74:d3:30:9c:16:34:d4:e1:54:3c:d5:
15:01:b8:34:db:50:83:2f:55:7d:37:1d:f3:e1:14:2d:19:ee:
84:9c:08:74:23:24:88:00:d6:ea:36:a1:3b:bb:58:03:48:80:
08:30:d3:dd:a7:94:bc:26:1f:c9:42:da:1a:f9:79:43:1e:cb:
7b:7a:0e:23:08:33:42:aa:52:0e:27:01:3b:20:8c:ac:d8:16:
9b:dc:1c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:34:13 2026 by rpki-client