Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200623.roa
File: AS200623.roa (raw, json)
Hash identifier: HiKTmJiOVc+4hQ2kAkqxls08+GZAQACKZP5h3myvO+I=
Subject key identifier: E5:55:78:8E:D8:2D:BF:5B:C4:63:C3:93:05:61:AE:61:85:A0:BD:EB
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 64A41251D9E1C535B8935D26D6E5FE15298AE2D5
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200623.roa
Signing time: Fri 09 Oct 2026 19:00:34 +0000
ROA not before: Fri 09 Oct 2026 18:55:34 +0000
ROA not after: Fri 08 Oct 2027 19:00:34 +0000
asID: 200623
IP address blocks: 2a13:9500:1ed::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 07:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:a4:12:51:d9:e1:c5:35:b8:93:5d:26:d6:e5:fe:15:29:8a:e2:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 9 18:55:34 2026 GMT
Not After : Oct 8 19:00:34 2027 GMT
Subject: CN=E555788ED82DBF5BC463C3930561AE6185A0BDEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f3:67:d5:e9:00:87:eb:d7:bd:fe:d4:dd:d6:
ca:34:1d:31:28:57:99:fc:e0:83:09:82:13:1c:cd:
df:f0:38:c6:54:c6:99:f3:7e:1d:9e:0f:d0:3d:8d:
6f:ba:c8:a3:dd:e6:49:d9:0a:98:a5:0f:8c:a9:02:
fd:59:49:12:4c:1f:52:c0:d3:87:80:fa:e6:52:71:
db:20:bb:b9:bf:74:f0:b8:d0:f6:38:c3:43:c8:34:
30:0a:0a:55:9e:8f:33:01:39:ee:66:01:5d:ee:56:
fd:a9:b6:68:28:74:6f:a1:00:cd:69:57:2f:df:d7:
1e:53:c4:89:60:d1:e3:1d:c7:f7:c7:7c:19:3a:19:
6e:ae:c4:8a:04:8e:65:38:b5:25:5b:29:7f:57:8c:
c2:e9:68:93:a1:ac:fe:43:34:01:bb:9c:e5:99:01:
f5:0f:b5:70:e4:24:09:40:bb:9c:a6:2d:d8:a6:e1:
fa:b0:70:c1:06:72:55:1d:0b:f1:ce:c4:e4:4c:a8:
3a:cf:af:50:48:39:c7:a3:df:20:27:39:95:d0:a2:
ca:b3:ba:b4:8b:75:b4:26:47:7c:47:91:39:71:e5:
0d:19:2f:38:cb:18:4d:a1:97:fc:ae:5b:39:c4:84:
5f:35:0f:b8:a0:e9:f2:f9:36:52:9f:31:61:9b:ad:
ab:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:55:78:8E:D8:2D:BF:5B:C4:63:C3:93:05:61:AE:61:85:A0:BD:EB
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200623.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:1ed::/48
Signature Algorithm: sha256WithRSAEncryption
33:2e:a6:dc:67:00:f0:45:8b:66:dc:e2:85:96:54:b0:63:02:
04:00:0d:57:ce:d3:53:d1:a0:a4:b7:d7:02:52:02:c3:60:19:
db:0a:9b:65:cb:fa:61:7a:e1:6d:5e:ef:e1:7f:3d:aa:6b:9e:
d7:ec:29:3d:bd:99:e1:21:f9:86:50:c1:17:54:b7:32:70:5e:
2f:fe:97:33:e2:3b:00:b8:2a:79:6f:dd:33:fa:50:68:d9:f1:
80:eb:3c:6b:e8:7f:d1:10:fc:ca:a1:04:e8:03:a7:30:2d:9d:
aa:d8:1d:52:c3:ce:c0:3a:18:42:14:8f:9f:e0:cb:3c:43:13:
15:66:66:59:e5:05:de:38:bd:07:f4:6a:f0:dd:c7:f9:de:51:
b4:92:15:c1:04:a5:7e:4e:3d:70:17:28:83:a5:13:c8:e7:4b:
cd:55:25:d6:44:3e:97:7c:72:2d:5a:e7:b7:bf:01:ed:9e:6f:
bf:fb:a2:03:0e:33:5d:0f:b6:8c:96:5b:6f:e2:e6:17:c3:49:
23:af:98:07:29:49:52:b1:2d:7c:c4:c0:1f:b5:d4:ce:5d:d6:
8e:ad:6e:58:b6:d9:de:8e:c6:42:45:c1:cf:07:a9:a5:68:ee:
5e:fc:8e:61:fb:83:cf:d6:c0:f3:1b:ba:48:a6:66:c0:ca:7f:
99:b5:99:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 12:41:34 2026 by rpki-client