Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS200017.roa
File: AS200017.roa (raw, json)
Hash identifier: 3rd5/U7IKr+11KlMN3k5u7P7bJTmJmXQQzoeyHvBSWc=
Subject key identifier: C1:73:B5:AF:D4:F4:A5:1A:A4:AD:03:C5:E5:43:44:95:7B:14:F4:B5
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 4871FCB9E97F5AC2E505C59D8AA74C0117210340
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS200017.roa
Signing time: Thu 13 Aug 2026 06:57:00 +0000
ROA not before: Thu 13 Aug 2026 06:52:00 +0000
ROA not after: Thu 12 Aug 2027 06:57:00 +0000
asID: 200017
IP address blocks: 5.45.39.0/24 maxlen: 24
181.215.26.0/24 maxlen: 24
181.215.202.0/24 maxlen: 24
185.170.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:71:fc:b9:e9:7f:5a:c2:e5:05:c5:9d:8a:a7:4c:01:17:21:03:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 13 06:52:00 2026 GMT
Not After : Aug 12 06:57:00 2027 GMT
Subject: CN=C173B5AFD4F4A51AA4AD03C5E54344957B14F4B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b1:30:8a:e6:2e:76:c3:a2:74:03:8a:6c:0f:
17:1c:e9:15:50:90:b3:7b:f6:03:ed:91:8d:82:24:
4f:a0:98:d6:c4:d1:7c:03:d3:27:37:20:cb:70:8f:
4e:ea:58:d7:1c:aa:58:d5:3e:e8:ee:51:59:ea:6e:
54:0b:62:20:4e:e5:cc:58:10:22:c8:30:81:94:d0:
49:b4:8a:d5:8f:28:fa:f0:b1:52:1a:4f:95:bb:95:
61:90:de:61:a8:81:38:81:31:5f:7a:10:83:04:f0:
fc:57:b1:c1:00:db:93:f2:e9:fd:f0:5e:b0:cc:10:
5e:7d:87:8d:8c:62:54:41:12:6b:26:af:ca:fa:14:
7e:12:86:20:53:01:6b:a7:80:eb:95:ea:a2:2f:f7:
bf:5f:a8:19:8e:66:96:19:be:49:a2:ed:b4:db:00:
51:98:de:9a:7f:f9:40:71:10:07:78:f0:4c:10:5f:
67:7a:10:8b:49:21:5c:c1:52:f9:12:98:40:23:a1:
b2:5f:fb:48:6e:4f:29:e7:62:b5:46:5f:21:c6:ae:
73:7f:fc:24:d4:0d:99:78:03:3e:d0:65:c1:dd:6c:
9e:a4:60:83:f1:98:d7:e8:ea:dd:38:a0:3b:e6:df:
8a:cd:00:07:0e:44:4e:2e:08:aa:c0:a7:8b:2c:42:
ac:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:73:B5:AF:D4:F4:A5:1A:A4:AD:03:C5:E5:43:44:95:7B:14:F4:B5
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS200017.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.45.39.0/24
181.215.26.0/24
181.215.202.0/24
185.170.41.0/24
Signature Algorithm: sha256WithRSAEncryption
88:dd:6c:bf:30:e4:31:cb:4c:be:ed:7c:36:ad:34:69:a8:41:
e4:ff:6f:a6:50:5b:f3:40:7b:ad:9f:cc:3d:23:a8:0d:49:69:
58:24:da:2b:75:4e:05:1a:7b:24:51:d2:48:32:93:cc:aa:b9:
07:42:6e:bc:cd:79:30:f5:75:23:fb:1a:41:c2:16:c1:44:34:
d2:fd:f9:40:c4:08:6e:ad:5f:59:27:d0:9d:d0:af:09:58:c5:
e8:89:33:1d:1c:85:66:bb:5e:b1:65:e2:07:d3:3e:70:b4:df:
ca:e0:4c:77:6d:07:6a:7d:e0:b6:7c:c2:1b:3b:77:1c:8a:36:
73:b1:30:36:3a:6a:df:9d:5b:b4:8b:2e:cd:0e:a0:c0:9a:91:
da:6e:3a:07:8f:9a:4c:91:27:5a:c7:c3:cf:1c:55:73:b8:ae:
aa:11:1e:39:c5:9e:64:81:23:8e:34:83:db:ed:5d:0e:53:23:
6f:bd:ba:3e:16:b0:a3:c3:ce:33:68:46:a0:21:08:5b:7c:a5:
92:4c:51:ec:7a:da:5a:ab:aa:d7:db:04:e3:87:9e:04:a2:74:
34:df:1b:a8:90:d5:7f:f4:fa:8e:16:00:b4:1a:84:70:93:84:
e9:b7:3d:d4:d0:9f:de:15:35:16:e1:c7:83:87:4f:7d:a7:4c:
1f:72:41:43
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgIUSHH8uel/WsLlBcWdiqdMARchA0AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNjA4MTMwNjUyMDBaFw0yNzA4MTIwNjU3MDBaMDMxMTAvBgNV
BAMTKEMxNzNCNUFGRDRGNEE1MUFBNEFEMDNDNUU1NDM0NDk1N0IxNEY0QjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzsTCK5i52w6J0A4psDxcc6RVQ
kLN79gPtkY2CJE+gmNbE0XwD0yc3IMtwj07qWNccqljVPujuUVnqblQLYiBO5cxY
ECLIMIGU0Em0itWPKPrwsVIaT5W7lWGQ3mGogTiBMV96EIME8PxXscEA25Py6f3w
XrDMEF59h42MYlRBEmsmr8r6FH4ShiBTAWungOuV6qIv979fqBmOZpYZvkmi7bTb
AFGY3pp/+UBxEAd48EwQX2d6EItJIVzBUvkSmEAjobJf+0huTynnYrVGXyHGrnN/
/CTUDZl4Az7QZcHdbJ6kYIPxmNfo6t04oDvm34rNAAcORE4uCKrAp4ssQqwbAgMB
AAGjggIcMIICGDAdBgNVHQ4EFgQUwXO1r9T0pRqkrQPF5UNElXsU9LUwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjAwMDE3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQABS0n
AwQAtdcaAwQAtdfKAwQAuaopMA0GCSqGSIb3DQEBCwUAA4IBAQCI3Wy/MOQxy0y+
7Xw2rTRpqEHk/2+mUFvzQHutn8w9I6gNSWlYJNordU4FGnskUdJIMpPMqrkHQm68
zXkw9XUj+xpBwhbBRDTS/flAxAhurV9ZJ9Cd0K8JWMXoiTMdHIVmu16xZeIH0z5w
tN/K4Ex3bQdqfeC2fMIbO3ccijZzsTA2OmrfnVu0iy7NDqDAmpHabjoHj5pMkSda
x8PPHFVzuK6qER45xZ5kgSOONIPb7V0OUyNvvbo+FrCjw84zaEagIQhbfKWSTFHs
etpaq6rX2wTjh54EonQ03xuokNV/9PqOFgC0GoRwk4Tptz3U0J/eFTUW4ceDh099
p0wfckFD
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:20:43 2026 by rpki-client