Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200169.roa
File: AS200169.roa (raw, json)
Hash identifier: l9x3d3BpwScksCLy6sIvxPGIkPpNHmSaq3XQ7jSLqp4=
Subject key identifier: C4:B5:94:86:D5:7A:51:E4:90:2B:E2:53:E1:F4:C5:69:B5:FA:7B:8B
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 5125DF121669986CB67CBDDF81353009954122D4
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200169.roa
Signing time: Fri 31 Jul 2026 19:17:01 +0000
ROA not before: Fri 31 Jul 2026 19:12:01 +0000
ROA not after: Fri 30 Jul 2027 19:17:01 +0000
asID: 200169
IP address blocks: 82.29.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:25:df:12:16:69:98:6c:b6:7c:bd:df:81:35:30:09:95:41:22:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 31 19:12:01 2026 GMT
Not After : Jul 30 19:17:01 2027 GMT
Subject: CN=C4B59486D57A51E4902BE253E1F4C569B5FA7B8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:15:a1:17:40:4a:ca:5e:7c:58:58:2f:c9:ea:
b0:34:c0:42:0b:65:2a:f2:b5:4c:10:bd:db:a6:af:
90:84:bf:ed:97:ce:ae:0c:21:7f:ed:d3:ea:66:90:
0d:c4:d3:37:13:4b:71:d0:89:fa:33:e4:bb:c4:8a:
ab:69:03:73:17:40:16:77:25:cb:ff:d8:65:a0:5b:
26:de:09:6d:0d:7c:13:3d:88:58:d8:41:f3:7e:c7:
57:24:a8:b7:85:f2:f6:2c:7c:3e:16:48:10:5b:1e:
17:5f:81:99:af:82:1e:d5:09:ee:b4:aa:d8:06:95:
2d:a7:1f:4e:a2:0e:9b:12:26:19:a7:18:91:69:c0:
e1:9c:86:c7:04:f5:ca:20:19:06:34:26:73:3c:e3:
3c:31:5b:1d:f4:84:ca:72:01:7a:44:cf:ee:3f:ff:
d4:d2:6c:d1:68:22:55:68:55:a8:c8:36:91:92:d5:
7f:51:64:b4:66:07:cc:91:f9:7f:dc:75:a8:45:9a:
eb:6e:0d:48:ae:7f:27:61:2f:61:73:16:99:28:de:
9a:1c:fb:37:6a:e8:ba:af:f8:84:c3:85:85:3f:fd:
a6:ce:40:a6:ee:2f:c2:9a:f7:82:0b:15:72:73:d6:
9b:c9:11:ba:05:1a:67:4a:f1:86:dd:af:3c:fb:ad:
c6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B5:94:86:D5:7A:51:E4:90:2B:E2:53:E1:F4:C5:69:B5:FA:7B:8B
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200169.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.29.45.0/24
Signature Algorithm: sha256WithRSAEncryption
90:07:4d:08:be:db:49:28:f0:6f:f8:84:2d:4f:ba:31:6f:09:
22:d7:fb:7a:73:2f:f3:2f:50:03:ef:2c:7d:1a:3e:7c:db:85:
2f:ba:11:57:51:94:dc:7d:f2:0e:f5:f2:ab:25:4e:e1:09:e1:
d3:c8:31:00:63:5b:fc:bb:61:7e:04:14:01:d6:5d:c0:d0:e9:
f5:ad:a0:32:10:36:29:b0:6b:b0:fe:1a:c7:e6:d6:1e:80:a3:
31:11:fa:75:1a:d4:72:19:19:63:0a:da:f7:2d:22:4c:71:a9:
37:d1:2f:e6:c8:da:4d:74:dd:03:3d:af:51:a4:dc:b0:b6:65:
ca:1d:0e:f2:17:27:0f:91:1a:75:b7:e8:16:4a:e3:4f:3c:d4:
64:2a:e8:55:29:81:f4:12:cc:fc:83:7f:15:aa:89:1a:98:ae:
00:d6:70:a2:95:96:4c:91:4f:0e:30:f6:11:73:22:e4:96:8c:
b6:a3:4b:75:68:6a:ae:4e:41:c0:f1:63:f9:24:dd:aa:49:87:
11:43:b6:ad:6a:0a:ea:36:88:be:2e:48:64:73:24:55:80:0c:
5d:9a:65:9a:ad:19:48:6c:66:9b:36:1a:74:70:b1:b6:ac:5d:
5a:d8:43:a0:72:a0:12:20:b7:d1:02:72:7b:45:77:6b:e2:73:
a2:48:b0:da
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUUSXfEhZpmGy2fL3fgTUwCZVBItQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA3MzExOTEyMDFaFw0yNzA3MzAxOTE3MDFaMDMxMTAvBgNV
BAMTKEM0QjU5NDg2RDU3QTUxRTQ5MDJCRTI1M0UxRjRDNTY5QjVGQTdCOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsFaEXQErKXnxYWC/J6rA0wEIL
ZSrytUwQvdumr5CEv+2Xzq4MIX/t0+pmkA3E0zcTS3HQifoz5LvEiqtpA3MXQBZ3
Jcv/2GWgWybeCW0NfBM9iFjYQfN+x1ckqLeF8vYsfD4WSBBbHhdfgZmvgh7VCe60
qtgGlS2nH06iDpsSJhmnGJFpwOGchscE9cogGQY0JnM84zwxWx30hMpyAXpEz+4/
/9TSbNFoIlVoVajINpGS1X9RZLRmB8yR+X/cdahFmutuDUiufydhL2FzFpko3poc
+zdq6Lqv+ITDhYU//abOQKbuL8Ka94ILFXJz1pvJEboFGmdK8Ybdrzz7rcYjAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUxLWUhtV6UeSQK+JT4fTFabX6e4swHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjAwMTY5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUh0t
MA0GCSqGSIb3DQEBCwUAA4IBAQCQB00IvttJKPBv+IQtT7oxbwki1/t6cy/zL1AD
7yx9Gj5824UvuhFXUZTcffIO9fKrJU7hCeHTyDEAY1v8u2F+BBQB1l3A0On1raAy
EDYpsGuw/hrH5tYegKMxEfp1GtRyGRljCtr3LSJMcak30S/myNpNdN0DPa9RpNyw
tmXKHQ7yFycPkRp1t+gWSuNPPNRkKuhVKYH0Esz8g38VqokamK4A1nCilZZMkU8O
MPYRcyLkloy2o0t1aGquTkHA8WP5JN2qSYcRQ7atagrqNoi+LkhkcyRVgAxdmmWa
rRlIbGabNhp0cLG2rF1a2EOgcqASILfRAnJ7RXdr4nOiSLDa
-----END CERTIFICATE-----
Generated at Thu Aug 13 08:34:11 2026 by rpki-client