Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200464.roa
File: AS200464.roa (raw, json)
Hash identifier: yzVSbH8GIs1Ub/i1lpnpqtW7ecaFOobW4vNxAkb72Ic=
Subject key identifier: 80:F1:8B:C6:F1:03:13:B2:43:9A:37:D3:25:7C:BF:8F:9B:F0:BC:38
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 66142B49FF16A9449928739AE4C03D9EBCBB09C1
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200464.roa
Signing time: Thu 05 Mar 2026 17:12:26 +0000
ROA not before: Thu 05 Mar 2026 17:07:26 +0000
ROA not after: Thu 04 Mar 2027 17:12:26 +0000
asID: 200464
IP address blocks: 2a13:9500:146::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Mar 2026 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:14:2b:49:ff:16:a9:44:99:28:73:9a:e4:c0:3d:9e:bc:bb:09:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 5 17:07:26 2026 GMT
Not After : Mar 4 17:12:26 2027 GMT
Subject: CN=80F18BC6F10313B2439A37D3257CBF8F9BF0BC38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8c:9b:ad:bb:af:9c:54:2a:a9:0c:01:a6:09:
6f:30:6e:8e:1a:23:ba:0e:8f:c2:ee:d8:3b:eb:d0:
34:3e:a2:df:5c:84:da:8f:91:2a:f7:0a:88:57:c4:
0c:4b:c0:d2:a1:37:df:72:a8:16:4b:de:e3:f4:27:
fe:8b:a8:4a:ea:b2:b5:56:2a:c1:03:2e:43:b0:85:
2a:5f:cb:aa:d7:41:06:b6:42:1d:38:6e:50:81:56:
72:96:3f:cf:15:e1:02:3f:b0:00:f1:b1:c2:50:38:
8e:80:24:36:50:10:df:68:22:5d:d7:eb:b6:46:08:
6b:86:4e:31:9f:2f:74:79:fd:af:fb:29:ba:05:ac:
d5:55:bd:fb:df:8e:05:d2:24:f3:58:97:94:53:e4:
18:8b:81:c9:b5:24:65:da:fb:52:57:b0:db:05:86:
d9:ca:d5:20:0e:3b:02:ba:1d:a5:8c:39:c2:31:50:
79:8c:81:14:95:ea:85:7c:ad:6a:6c:a4:c4:91:40:
18:34:a3:b3:53:52:9a:d5:04:85:ec:5d:a5:44:6c:
21:9a:a3:97:4f:a9:97:17:5c:cd:df:99:73:dd:b9:
ab:8d:20:84:20:c1:d9:1a:c5:8d:5f:c9:c9:59:69:
c7:05:c2:95:92:7d:b8:ae:60:69:ea:d7:68:58:0f:
e6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F1:8B:C6:F1:03:13:B2:43:9A:37:D3:25:7C:BF:8F:9B:F0:BC:38
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200464.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:146::/48
Signature Algorithm: sha256WithRSAEncryption
2a:0d:7e:5b:d9:a2:30:13:bf:fd:96:dc:3f:7d:56:87:d6:a7:
cc:6e:a1:19:b8:9c:7d:dd:fb:e2:a7:49:4d:d0:86:17:f0:be:
38:f5:b5:b1:93:0a:fd:e9:45:c1:1d:66:e7:b6:c4:ea:61:bc:
19:ad:c0:6d:f2:22:46:32:03:78:e8:79:d6:fc:0a:87:ae:be:
1e:64:58:b3:fd:8e:fc:4a:08:a8:31:b7:18:28:04:51:c8:6e:
29:d1:15:3d:cd:10:4d:3a:4b:96:c1:02:b6:7b:c8:1d:08:66:
79:e8:dc:f2:bb:1e:49:c0:f2:55:1d:ca:bc:73:99:4d:3e:85:
9c:19:23:a7:8b:73:20:cf:34:bf:a6:bc:e2:5c:33:4d:f0:a4:
95:1c:c5:14:43:e3:b3:70:90:20:2a:f5:39:74:10:d0:5f:2b:
77:22:44:15:64:2a:58:08:7d:11:2f:77:1c:dd:43:c9:b6:30:
fc:80:63:de:31:89:73:c6:5b:af:61:75:e1:87:75:eb:a3:8a:
ca:b0:b8:b2:f7:ca:33:a5:e1:af:a5:36:c1:d6:8f:a7:16:c6:
58:87:17:bc:50:ba:fb:03:37:45:12:c4:3c:72:86:25:1c:a9:
b5:b3:0e:81:15:ac:c6:9f:5d:16:0e:f5:21:31:58:96:62:d9:
bb:e5:42:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 05:04:32 2026 by rpki-client