Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200213.roa
File: AS200213.roa (raw, json)
Hash identifier: LpiKZTkqSMawuabPo6Z6Q2dX/UW9De2+zvk0bgNydeQ=
Subject key identifier: BE:22:3F:14:56:7E:D1:C9:AF:93:E2:FD:18:50:F7:9A:62:2B:0B:2E
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 430E698332F81E60B73AAF7F558EC50235E646C6
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200213.roa
Signing time: Fri 07 Aug 2026 00:01:38 +0000
ROA not before: Thu 06 Aug 2026 23:56:38 +0000
ROA not after: Fri 06 Aug 2027 00:01:38 +0000
asID: 200213
IP address blocks: 2a13:9500:155::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:0e:69:83:32:f8:1e:60:b7:3a:af:7f:55:8e:c5:02:35:e6:46:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 6 23:56:38 2026 GMT
Not After : Aug 6 00:01:38 2027 GMT
Subject: CN=BE223F14567ED1C9AF93E2FD1850F79A622B0B2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9f:a6:4f:d6:cb:f6:34:fe:57:12:7c:08:e1:
8f:c4:00:e7:31:ae:76:d2:0b:34:54:8e:03:0c:cf:
66:78:72:3c:1a:98:6f:e0:1e:8a:c7:82:42:89:3c:
af:85:e1:d8:17:5d:75:20:c4:48:c1:3d:78:43:57:
71:73:9d:fc:fb:b5:70:95:79:33:43:36:bc:b1:4c:
50:5b:b8:02:44:fd:0e:56:b9:b9:9d:3c:a6:37:33:
1b:40:75:31:b2:0a:eb:ab:98:b3:76:c6:22:12:98:
a5:8b:5f:01:7e:ae:74:70:8f:d4:08:0b:ea:7d:04:
65:28:69:fe:04:d4:8d:0e:96:58:67:86:81:f2:75:
f4:52:50:10:ec:4b:3a:37:6e:4d:a6:1c:4c:fd:f0:
91:33:74:56:68:df:bb:b2:0b:f8:ee:5a:7b:78:b5:
d2:91:b1:e6:0a:fb:c9:cb:e3:37:b0:b0:eb:e8:25:
8b:81:72:7d:c8:38:89:1c:50:43:4e:9c:9c:98:b1:
b8:bc:24:24:db:9d:79:d0:a3:79:aa:06:72:77:57:
ea:6e:41:a9:f7:01:f3:b1:6c:08:f6:66:9d:11:e8:
d7:bc:da:66:a7:cc:1d:5e:75:af:64:5f:9e:bd:74:
b9:53:c5:56:c1:30:d7:23:ac:f0:94:f6:47:84:79:
91:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:22:3F:14:56:7E:D1:C9:AF:93:E2:FD:18:50:F7:9A:62:2B:0B:2E
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200213.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:155::/48
Signature Algorithm: sha256WithRSAEncryption
73:9a:25:04:8f:ea:da:99:6d:ff:cf:9d:5d:37:96:1f:5a:58:
7c:ba:7f:64:09:4f:73:f9:d2:e5:1e:89:a0:4e:24:b3:34:d5:
5a:af:a9:25:e4:fd:f9:44:23:40:08:b7:e8:06:9a:19:ba:13:
9d:5d:0a:2f:e9:ae:e3:db:fc:5e:c9:07:a3:a6:10:fd:64:4e:
da:4c:67:bf:f8:b8:a7:65:ff:94:78:66:ba:de:9d:a3:4b:f9:
9a:6c:ec:ca:f0:98:01:ea:e1:70:8a:2b:19:ba:7d:00:1f:e2:
9c:35:52:2b:63:9c:5c:96:e2:39:47:50:fc:52:6b:3a:8b:0d:
80:7e:3d:f4:cf:0d:48:11:45:15:d3:7e:2e:fa:85:a7:a6:18:
a3:13:97:16:60:26:8b:f7:ed:35:23:f3:12:aa:34:08:60:7e:
f3:81:a2:40:e5:7f:8f:63:29:38:8c:9d:a2:21:6d:4d:30:c8:
f9:22:e2:92:0a:79:4b:ad:b8:44:83:55:3a:09:db:1b:39:d4:
5d:fd:f7:30:17:67:31:43:c7:08:ad:34:82:48:52:91:7b:73:
37:9f:c5:32:ae:74:68:7a:7d:dd:71:d0:7d:ff:14:07:b2:2e:
99:46:26:11:aa:f6:a2:98:1c:7a:31:58:38:fe:5d:a6:d7:08:
cd:54:ab:eb
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUQw5pgzL4HmC3Oq9/VY7FAjXmRsYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA4MDYyMzU2MzhaFw0yNzA4MDYwMDAxMzhaMDMxMTAvBgNV
BAMTKEJFMjIzRjE0NTY3RUQxQzlBRjkzRTJGRDE4NTBGNzlBNjIyQjBCMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZn6ZP1sv2NP5XEnwI4Y/EAOcx
rnbSCzRUjgMMz2Z4cjwamG/gHorHgkKJPK+F4dgXXXUgxEjBPXhDV3Fznfz7tXCV
eTNDNryxTFBbuAJE/Q5WubmdPKY3MxtAdTGyCuurmLN2xiISmKWLXwF+rnRwj9QI
C+p9BGUoaf4E1I0OllhnhoHydfRSUBDsSzo3bk2mHEz98JEzdFZo37uyC/juWnt4
tdKRseYK+8nL4zewsOvoJYuBcn3IOIkcUENOnJyYsbi8JCTbnXnQo3mqBnJ3V+pu
Qan3AfOxbAj2Zp0R6Ne82manzB1eda9kX569dLlTxVbBMNcjrPCU9keEeZEzAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUviI/FFZ+0cmvk+L9GFD3mmIrCy4wHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjAwMjEzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhOV
AAFVMA0GCSqGSIb3DQEBCwUAA4IBAQBzmiUEj+ramW3/z51dN5YfWlh8un9kCU9z
+dLlHomgTiSzNNVar6kl5P35RCNACLfoBpoZuhOdXQov6a7j2/xeyQejphD9ZE7a
TGe/+LinZf+UeGa63p2jS/mabOzK8JgB6uFwiisZun0AH+KcNVIrY5xcluI5R1D8
Ums6iw2Afj30zw1IEUUV034u+oWnphijE5cWYCaL9+01I/MSqjQIYH7zgaJA5X+P
Yyk4jJ2iIW1NMMj5IuKSCnlLrbhEg1U6CdsbOdRd/fcwF2cxQ8cIrTSCSFKRe3M3
n8UyrnRoen3dcdB9/xQHsi6ZRiYRqvaimBx6MVg4/l2m1wjNVKvr
-----END CERTIFICATE-----
Generated at Tue Sep 1 01:29:58 2026 by rpki-client