Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200307.roa
File: AS200307.roa (raw, json)
Hash identifier: Y1uJ5gSWHFJF6JYZpnTalYUrjo423PCaVqMVF2EuHws=
Subject key identifier: CD:2C:94:4D:1A:FA:7A:D0:E9:3E:D3:23:78:C9:9A:19:49:82:C1:83
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 352C2C3052816EF8D4DE2140BEC8C33FC577C9AE
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200307.roa
Signing time: Mon 29 Jun 2026 13:21:10 +0000
ROA not before: Mon 29 Jun 2026 13:16:10 +0000
ROA not after: Mon 28 Jun 2027 13:21:10 +0000
asID: 200307
IP address blocks: 82.47.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 03:57:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:2c:2c:30:52:81:6e:f8:d4:de:21:40:be:c8:c3:3f:c5:77:c9:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 29 13:16:10 2026 GMT
Not After : Jun 28 13:21:10 2027 GMT
Subject: CN=CD2C944D1AFA7AD0E93ED32378C99A194982C183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6a:3b:fa:ee:4d:b9:d9:cc:26:38:0a:15:a4:
0e:7f:84:c0:5d:68:55:c9:11:cf:52:ec:5e:e1:42:
e5:cb:5c:aa:2e:9e:99:81:fa:09:ff:b4:e1:74:a5:
75:bf:af:66:86:0e:63:64:05:01:8e:9c:96:fa:56:
39:45:35:33:71:ef:04:6c:7d:b6:ca:05:6a:ae:4a:
67:2f:ad:a7:30:8f:85:3f:69:93:7c:93:6e:e2:4d:
2d:15:0f:73:14:da:8f:b4:7b:54:af:f8:0c:62:0d:
ee:2f:93:e3:a0:18:a0:22:f9:48:62:a8:b1:ca:72:
28:f0:66:02:02:9c:08:88:ce:41:fb:6f:ad:be:5e:
bd:81:e8:6d:bb:e9:9e:6f:db:34:ea:ac:e6:72:ee:
a0:30:fb:27:fd:62:7e:1b:6e:cb:9c:e4:76:57:03:
54:1f:cb:c9:74:24:f7:cd:b3:e6:b4:d1:9c:9d:37:
e5:43:8e:ef:63:65:2f:db:59:61:70:38:69:9c:d8:
3c:1c:b5:d9:f0:e0:94:a8:d1:26:41:cb:87:21:43:
94:ea:cb:33:a1:4d:ad:34:8f:43:0f:45:04:cb:e9:
96:80:af:a2:48:51:eb:dd:58:bf:36:a4:4b:0f:62:
2c:04:cc:c7:df:28:f9:a7:04:cb:71:56:31:3f:24:
e9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:2C:94:4D:1A:FA:7A:D0:E9:3E:D3:23:78:C9:9A:19:49:82:C1:83
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200307.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.47.131.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:6f:75:4b:2e:30:48:c2:3f:af:35:ce:68:29:88:e3:a2:b0:
d9:6d:58:18:57:d3:fa:f9:6b:dc:10:05:4f:ec:da:1d:c9:ca:
7b:66:92:17:0a:61:65:1d:40:e3:c1:c1:61:55:7c:8e:7d:f3:
4a:32:b9:ac:8b:e2:c5:4a:6f:4e:b7:f6:6a:5a:34:ab:27:ae:
cd:96:8f:f1:55:f2:c6:6a:77:52:43:9c:1c:e8:67:28:04:17:
e5:16:18:5e:c5:a8:ff:60:4f:89:8e:44:cf:b1:06:66:d6:66:
8f:e2:e7:20:d7:03:a3:81:7b:56:fd:a5:64:fa:a3:9a:d2:ea:
43:b4:36:7c:32:76:9f:da:8b:d9:c8:f3:e3:c6:60:c5:e3:55:
77:09:29:25:c9:44:5c:1e:e6:f7:08:9f:e2:39:f8:c7:94:77:
6d:63:b1:ce:24:49:2c:7d:a6:37:0b:38:e4:44:f8:81:5a:47:
b1:01:39:86:6b:4f:e3:fb:a2:66:17:83:64:27:3f:b8:5e:8e:
ac:29:b9:37:d5:31:9f:08:28:61:50:cd:59:de:af:a6:62:a9:
59:b6:c2:1f:ee:2d:9e:ed:f8:3c:83:10:42:fa:c5:52:61:d7:
27:78:b5:37:a2:18:b6:40:f9:fc:68:fe:d2:d5:87:14:86:0a:
08:4d:dc:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 06:47:30 2026 by rpki-client