Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200211.roa
File: AS200211.roa (raw, json)
Hash identifier: QGHt9WJ2Y6+Aikamm27iYyNaWIp74lB+IJKRIJ3CMcw=
Subject key identifier: 4F:5D:93:5C:EB:80:34:24:DE:7C:2A:F2:DC:7C:55:46:87:2B:3F:4C
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 74770DDDD4D1377F901AD9ADBA3E38F1B8B5D41A
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200211.roa
Signing time: Fri 27 Mar 2026 11:44:03 +0000
ROA not before: Fri 27 Mar 2026 11:39:03 +0000
ROA not after: Fri 26 Mar 2027 11:44:03 +0000
asID: 200211
IP address blocks: 84.75.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:77:0d:dd:d4:d1:37:7f:90:1a:d9:ad:ba:3e:38:f1:b8:b5:d4:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 27 11:39:03 2026 GMT
Not After : Mar 26 11:44:03 2027 GMT
Subject: CN=4F5D935CEB803424DE7C2AF2DC7C5546872B3F4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9e:73:cf:11:9f:6a:08:7e:4c:33:a0:55:1b:
46:2b:78:22:c0:ce:5e:92:6c:58:ac:c2:89:8a:27:
cf:0b:15:7f:7e:f7:14:0d:be:f9:0c:3a:cd:5c:83:
f2:5f:7b:11:af:16:52:89:b1:d1:75:f1:ed:1d:90:
12:d0:5c:27:20:f2:43:6d:31:60:87:60:97:e8:ef:
19:03:3a:9a:d8:19:93:a9:1c:4c:06:77:f6:2d:c7:
f8:87:f5:f1:c6:12:08:fc:2f:85:72:55:c1:2e:ef:
b2:93:78:ce:31:14:10:21:3a:a3:57:c0:e7:32:47:
5b:08:ea:19:3a:ed:5a:bc:e9:13:e9:be:98:0c:04:
e9:9d:6f:92:ff:44:85:3f:83:da:d7:8d:2c:b8:3c:
8c:42:5a:cf:a0:3c:1d:e3:81:d4:30:07:3c:50:0b:
be:4e:ed:0d:2b:0f:c3:ce:80:a6:d7:1d:b7:45:72:
8c:5b:30:79:81:f7:ad:4a:34:ae:07:cb:ee:c7:1f:
cf:1a:68:cb:d5:9a:3a:96:f9:e5:a7:7e:6f:c8:40:
30:a6:d6:ab:7e:9f:bb:c8:6e:e8:8d:59:d2:52:d2:
e3:b9:24:c1:5b:ad:9d:8a:d7:81:00:38:84:67:08:
67:56:e7:a4:b4:7d:8f:c9:3a:a7:04:73:e9:54:c0:
30:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:5D:93:5C:EB:80:34:24:DE:7C:2A:F2:DC:7C:55:46:87:2B:3F:4C
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200211.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.75.212.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:1a:79:86:28:e5:77:3c:5d:af:71:df:62:7e:ea:72:99:89:
97:71:7f:09:79:65:d6:b8:34:9f:e5:29:da:55:e0:31:b3:06:
1e:1a:4a:2e:cc:07:2e:eb:31:a4:42:2c:82:eb:e9:8e:4d:26:
d2:6f:93:89:f0:fb:34:0f:6f:f7:8c:5f:06:8b:07:e0:fd:19:
a8:f2:43:c9:12:c0:46:30:c5:53:e1:f8:30:f8:12:6b:90:6c:
36:d6:59:b1:3a:95:90:43:cf:3c:59:18:64:98:85:4a:b3:a3:
fe:24:bc:b8:21:a4:c9:95:b4:fb:1b:aa:84:c3:f5:61:9c:6f:
cf:11:63:d0:44:6b:66:6c:74:fa:56:39:9a:86:6e:ed:08:70:
46:0f:5e:a9:53:7b:67:c3:6c:ec:b3:90:e6:5e:a3:ed:02:92:
54:18:0f:2b:5f:69:cb:d8:cb:c9:2d:83:2e:ca:5c:06:96:a2:
eb:aa:cd:e7:92:b4:cc:b1:7a:e1:d3:e3:f5:d6:fc:31:d8:e0:
ae:8d:e4:2f:b2:70:d5:52:41:1f:3c:f1:58:11:cf:08:45:d6:
86:71:d2:64:14:4c:c2:38:d5:6c:14:5b:f5:c5:ca:81:70:19:
5a:47:4b:c9:54:ef:b0:27:87:c5:58:ca:37:a2:55:7d:48:6e:
cc:27:73:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 14:31:19 2026 by rpki-client