Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200017.roa
File: AS200017.roa (raw, json)
Hash identifier: Bn6WVYykK4rdWIO+BLDeVB5yX57OuTMNpHtmRR9y1ds=
Subject key identifier: 1B:F6:A9:AF:C9:95:2D:C8:2A:A9:7F:EC:5F:91:42:1D:B7:EB:82:C4
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 5F1DA81DA735CA7E9312C823DC7C8EF4CF0A73F4
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200017.roa
Signing time: Wed 29 Jul 2026 13:17:30 +0000
ROA not before: Wed 29 Jul 2026 13:12:30 +0000
ROA not after: Wed 28 Jul 2027 13:17:30 +0000
asID: 200017
IP address blocks: 82.25.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:1d:a8:1d:a7:35:ca:7e:93:12:c8:23:dc:7c:8e:f4:cf:0a:73:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 29 13:12:30 2026 GMT
Not After : Jul 28 13:17:30 2027 GMT
Subject: CN=1BF6A9AFC9952DC82AA97FEC5F91421DB7EB82C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:20:de:66:ed:31:ad:47:ab:64:f5:62:bb:a7:
0f:54:21:67:50:bf:86:9b:11:53:31:65:5a:7b:13:
72:cb:08:e8:c4:5c:08:e9:0d:2a:dc:41:f0:17:d7:
6a:24:35:60:d5:54:8b:6e:b1:a5:5f:78:a1:7a:e4:
cc:43:0c:60:24:09:2f:a2:e1:e4:3e:db:0e:27:37:
3f:07:85:f7:9f:df:7d:d5:d2:e7:f0:78:c0:94:67:
75:75:9a:1f:14:bb:8c:7b:2b:a0:e7:53:26:03:c5:
68:45:46:ad:d0:75:d6:4f:e7:e3:d2:f5:8b:9e:8e:
3d:39:45:ee:7e:a4:43:19:92:1c:2e:e3:e3:cc:a7:
dd:4e:6d:da:dd:bd:0a:3c:85:15:97:b3:ae:10:e5:
5f:4c:cd:70:bc:68:78:22:52:f3:20:07:39:dd:0a:
e9:a2:18:a7:6e:37:08:90:77:e9:65:70:91:86:ea:
ca:c5:5f:e4:c4:c7:50:21:a0:a7:f7:0e:07:2e:24:
37:2a:88:72:e3:45:f1:50:bd:77:b2:86:cb:9a:6c:
83:09:5e:f8:ef:c9:91:68:cc:9a:cf:77:9b:2f:75:
19:7b:e5:c8:3c:e5:c8:eb:53:39:e6:5a:84:59:03:
e5:50:72:4d:ce:48:ab:a6:0b:f9:1a:7c:c3:c3:69:
40:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F6:A9:AF:C9:95:2D:C8:2A:A9:7F:EC:5F:91:42:1D:B7:EB:82:C4
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200017.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.25.38.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:08:3e:ae:a1:91:80:1a:4d:f1:05:db:90:85:9c:b5:f8:14:
51:c2:69:6f:e3:20:b2:cf:4c:3c:a1:62:8e:8d:62:1f:29:f8:
bd:9f:d8:b2:62:50:68:75:19:6d:d5:7e:38:28:76:d3:82:64:
cf:bd:63:c6:ff:60:a2:6e:77:40:a9:c9:4b:7d:fb:f1:40:cf:
4d:c2:a8:4b:7b:28:70:80:db:d9:dc:27:fb:2f:98:e6:94:f7:
8b:54:8d:fc:c2:9e:75:35:9c:88:76:29:9d:c5:1a:a4:f1:a1:
fd:ad:9a:1f:33:f6:54:82:5d:41:b6:68:c1:58:a5:4d:0f:d2:
bd:7d:e4:b3:40:0b:1b:c9:df:ec:c1:b1:0d:60:b1:4c:91:c2:
c2:30:e1:74:00:bc:49:31:81:e7:d0:69:4f:7c:e5:6f:db:5a:
86:39:40:ac:0e:8d:45:a1:f5:14:06:00:ea:ca:23:09:ad:a9:
cc:53:c7:25:1d:8b:21:95:6a:4b:9e:c7:96:52:e5:1a:68:4a:
8d:a2:d6:e0:7d:91:7b:a1:e8:14:ef:5a:74:3a:ef:4f:16:8e:
d3:44:26:84:c0:b6:75:f5:97:6a:25:c4:9c:82:05:08:04:1d:
a0:ba:3f:7a:a8:67:7a:a4:71:f2:31:97:1f:8c:6a:09:78:28:
6a:d2:12:ce
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUXx2oHac1yn6TEsgj3HyO9M8Kc/QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA3MjkxMzEyMzBaFw0yNzA3MjgxMzE3MzBaMDMxMTAvBgNV
BAMTKDFCRjZBOUFGQzk5NTJEQzgyQUE5N0ZFQzVGOTE0MjFEQjdFQjgyQzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4IN5m7TGtR6tk9WK7pw9UIWdQ
v4abEVMxZVp7E3LLCOjEXAjpDSrcQfAX12okNWDVVItusaVfeKF65MxDDGAkCS+i
4eQ+2w4nNz8Hhfef333V0ufweMCUZ3V1mh8Uu4x7K6DnUyYDxWhFRq3QddZP5+PS
9Yuejj05Re5+pEMZkhwu4+PMp91ObdrdvQo8hRWXs64Q5V9MzXC8aHgiUvMgBznd
CumiGKduNwiQd+llcJGG6srFX+TEx1AhoKf3DgcuJDcqiHLjRfFQvXeyhsuabIMJ
XvjvyZFozJrPd5svdRl75cg85cjrUznmWoRZA+VQck3OSKumC/kafMPDaUBlAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUG/apr8mVLcgqqX/sX5FCHbfrgsQwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjAwMDE3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUhkm
MA0GCSqGSIb3DQEBCwUAA4IBAQBtCD6uoZGAGk3xBduQhZy1+BRRwmlv4yCyz0w8
oWKOjWIfKfi9n9iyYlBodRlt1X44KHbTgmTPvWPG/2CibndAqclLffvxQM9NwqhL
eyhwgNvZ3Cf7L5jmlPeLVI38wp51NZyIdimdxRqk8aH9rZofM/ZUgl1BtmjBWKVN
D9K9feSzQAsbyd/swbENYLFMkcLCMOF0ALxJMYHn0GlPfOVv21qGOUCsDo1FofUU
BgDqyiMJranMU8clHYshlWpLnseWUuUaaEqNotbgfZF7oegU71p0Ou9PFo7TRCaE
wLZ19ZdqJcScggUIBB2guj96qGd6pHHyMZcfjGoJeChq0hLO
-----END CERTIFICATE-----
Generated at Tue Sep 1 01:16:26 2026 by rpki-client