Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200455.roa
File: AS200455.roa (raw, json)
Hash identifier: P7USm6uwctV1EbZDVCpVUJTir3irFOIwZv3eOV4e3XM=
Subject key identifier: 2A:85:BD:49:F8:44:66:7F:4A:71:57:C7:D8:7B:1F:29:8C:F4:F2:EC
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6C4E5D3A742949EE5A9B93140BF6ADF5214DF149
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200455.roa
Signing time: Sun 23 Aug 2026 13:49:30 +0000
ROA not before: Sun 23 Aug 2026 13:44:30 +0000
ROA not after: Sun 22 Aug 2027 13:49:30 +0000
asID: 200455
IP address blocks: 2a13:9500:e5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:4e:5d:3a:74:29:49:ee:5a:9b:93:14:0b:f6:ad:f5:21:4d:f1:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 23 13:44:30 2026 GMT
Not After : Aug 22 13:49:30 2027 GMT
Subject: CN=2A85BD49F844667F4A7157C7D87B1F298CF4F2EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:97:51:9e:f0:5c:b3:f0:56:f5:58:99:ec:12:
cf:5d:76:ef:3e:6c:dd:cd:1c:52:ea:c3:04:f5:7c:
52:73:c8:c2:24:43:b8:c4:d9:64:32:1a:29:7d:f1:
e8:57:d3:3c:3b:5b:ce:1f:cf:39:b2:16:d8:6a:c3:
43:17:87:48:d1:ef:f9:28:f2:7e:7b:81:b1:09:d4:
81:f5:c6:d5:2f:58:ba:30:a6:55:e3:28:b9:f1:4a:
74:23:7a:47:90:d8:a9:1f:a5:39:f2:e4:3d:0f:91:
48:a3:92:59:37:ef:e6:84:12:1c:f2:ed:b5:ec:d1:
a6:8f:56:e7:9b:14:04:7e:29:9b:71:4e:ec:80:a4:
d3:9f:29:03:7c:00:b0:77:35:62:f9:db:28:5a:09:
f1:47:96:b6:ef:68:b4:9e:de:ca:bc:f0:75:96:80:
ce:ae:76:b1:dd:2d:92:bf:1e:82:33:1c:b9:df:61:
b8:90:ec:cd:07:5c:43:f1:67:d8:7b:de:72:8d:8b:
c9:a6:55:f3:b4:8c:01:5d:94:99:c5:c4:a6:12:44:
75:32:9c:1b:d5:e3:24:56:22:aa:90:3e:bc:7f:2c:
6d:7a:15:45:08:98:79:48:d2:5a:ae:1b:32:f2:a9:
66:2e:39:cd:ae:84:85:06:20:77:5f:15:21:93:cc:
6d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:85:BD:49:F8:44:66:7F:4A:71:57:C7:D8:7B:1F:29:8C:F4:F2:EC
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200455.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:e5::/48
Signature Algorithm: sha256WithRSAEncryption
2d:22:0c:7b:ef:c0:fd:9b:1f:0c:01:bc:39:68:d3:e5:a7:35:
99:2a:21:de:5f:47:1d:ca:9c:d1:c0:10:50:a2:32:d2:b3:74:
96:1a:01:2f:88:dc:ce:5c:83:a0:fb:cf:1f:6a:78:a9:94:c0:
ab:6e:56:1a:38:e7:14:21:eb:f4:b7:ff:b6:cb:57:33:be:5c:
e6:e4:f8:1d:b6:57:15:f8:70:ca:79:65:b8:74:d0:53:3a:68:
a8:e7:c8:27:5b:f2:e1:62:da:8b:54:c3:81:6d:a5:51:6b:f0:
c7:9b:15:1a:35:2c:61:06:52:e6:fe:61:c5:f4:00:6d:2a:16:
b3:d0:2a:33:ef:a8:c2:30:21:f6:f0:6f:f9:cd:24:b5:1f:51:
21:6f:98:6b:fd:1a:98:b8:2a:94:84:54:a4:bb:07:a9:15:b2:
0b:e4:cd:33:79:1d:44:c3:6d:7d:2e:30:77:e3:6e:85:1b:96:
a3:55:9d:d1:b6:f7:51:91:15:ef:6c:6d:20:2e:fe:73:0f:af:
f9:9e:43:87:50:3f:1b:47:8e:b8:52:de:b2:94:fc:be:12:ac:
9e:52:23:cc:2c:f0:34:3f:00:ae:9e:03:99:0e:25:46:c5:d3:
70:07:ef:38:d1:b0:4e:f6:96:0f:df:94:c4:06:19:5c:6a:9e:
54:0b:81:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:30:30 2026 by rpki-client