Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200636.roa
File: AS200636.roa (raw, json)
Hash identifier: BoGsfhAD5pIggs03K3KElWsOg0+fh5ObgiPDJXthh/0=
Subject key identifier: 0E:0C:AF:8E:BF:01:CC:D4:91:0D:FD:31:54:44:2C:6C:6B:9D:D4:40
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 5D28EFC5FD420610C93C4588958C0F6327CD3312
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200636.roa
Signing time: Sat 11 Oct 2025 17:56:02 +0000
ROA not before: Sat 11 Oct 2025 17:51:02 +0000
ROA not after: Sat 10 Oct 2026 17:56:02 +0000
asID: 200636
IP address blocks: 82.24.85.0/24 maxlen: 24
82.24.111.0/24 maxlen: 24
2a13:9500:e1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:28:ef:c5:fd:42:06:10:c9:3c:45:88:95:8c:0f:63:27:cd:33:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 11 17:51:02 2025 GMT
Not After : Oct 10 17:56:02 2026 GMT
Subject: CN=0E0CAF8EBF01CCD4910DFD3154442C6C6B9DD440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b3:ff:b5:a0:9b:6b:37:1c:ae:fa:64:d0:28:
02:27:03:76:e9:a3:04:c7:62:3b:40:b8:33:a2:7d:
21:5b:23:d0:25:3b:52:99:f3:95:22:97:f2:33:58:
47:8b:c5:22:44:4b:d7:2a:51:d8:aa:cb:10:a9:e4:
80:9c:d1:1e:b4:70:d6:69:f4:29:f1:75:5d:32:a8:
bf:27:9b:fb:59:5d:72:83:06:11:2a:97:02:9e:92:
ee:bd:db:89:3e:23:b8:16:e1:ba:9d:00:9d:00:2e:
81:ce:43:74:66:00:4e:00:51:cc:76:97:e2:3b:25:
f5:17:37:35:af:2c:de:04:c5:a2:da:52:85:13:3f:
e2:f5:82:ed:52:f2:d9:22:fc:6b:06:06:47:ab:e3:
dd:11:40:0f:71:6d:9b:c1:59:74:5a:77:4e:46:2a:
7c:d8:35:9a:57:84:08:cf:6c:e5:f4:6d:00:6b:ed:
3d:cc:4b:2e:ed:3b:86:42:c4:24:03:43:42:9d:8f:
12:2b:c6:af:78:de:ec:34:28:dd:86:46:98:1d:49:
15:75:d6:e3:23:67:01:0c:3c:51:70:8a:bb:14:9d:
f1:2f:d5:35:eb:aa:49:b5:55:0b:52:d0:e2:73:26:
a7:c6:94:09:9f:0e:90:e3:ee:71:18:e7:01:61:44:
db:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:0C:AF:8E:BF:01:CC:D4:91:0D:FD:31:54:44:2C:6C:6B:9D:D4:40
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.24.85.0/24
82.24.111.0/24
IPv6:
2a13:9500:e1::/48
Signature Algorithm: sha256WithRSAEncryption
12:03:80:cd:d1:63:fd:f2:87:97:7e:68:ab:f0:c9:06:e6:5b:
05:ff:3a:a7:6d:97:b4:df:13:da:95:3e:3c:1b:19:88:d7:17:
75:30:ff:90:dd:e2:44:42:3f:a0:52:57:4c:08:33:2d:b3:d0:
0f:9f:d9:0c:7c:7e:f3:21:10:63:86:1e:9b:54:4d:91:dc:63:
51:54:42:4e:41:cb:34:46:87:3f:29:f2:95:dd:4c:af:33:05:
7a:fe:25:de:b0:de:1c:af:8b:98:82:0d:9c:ca:da:a5:f0:1c:
b2:2c:8d:9d:9b:d6:ff:fb:dc:71:2f:d7:36:a6:6d:dc:02:f2:
b7:45:87:f5:c8:a4:76:81:c9:45:f7:b3:de:8c:0d:1a:d0:e5:
73:e3:fe:2a:48:d5:6b:db:91:c1:96:1a:9d:64:7f:14:73:74:
ab:a8:07:b6:2a:2f:f7:bd:b7:e0:ff:13:65:fe:c7:c6:ca:7c:
50:38:84:4b:1e:71:fb:e9:e7:0e:09:b9:89:a0:09:83:00:6e:
5e:19:41:22:13:98:d0:cf:38:b9:14:b9:ca:fe:f0:ce:5b:b6:
ee:a5:fc:da:fd:69:c9:27:0b:2b:86:45:7d:0a:a3:ec:da:d1:
cc:64:f7:e7:33:d0:cd:96:8c:21:04:eb:d9:ce:3e:8f:f8:51:
0d:80:06:b0
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgIUXSjvxf1CBhDJPEWIlYwPYyfNMxIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNTEwMTExNzUxMDJaFw0yNjEwMTAxNzU2MDJaMDMxMTAvBgNV
BAMTKDBFMENBRjhFQkYwMUNDRDQ5MTBERkQzMTU0NDQyQzZDNkI5REQ0NDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCys/+1oJtrNxyu+mTQKAInA3bp
owTHYjtAuDOifSFbI9AlO1KZ85Uil/IzWEeLxSJES9cqUdiqyxCp5ICc0R60cNZp
9CnxdV0yqL8nm/tZXXKDBhEqlwKeku6924k+I7gW4bqdAJ0ALoHOQ3RmAE4AUcx2
l+I7JfUXNzWvLN4ExaLaUoUTP+L1gu1S8tki/GsGBker490RQA9xbZvBWXRad05G
KnzYNZpXhAjPbOX0bQBr7T3MSy7tO4ZCxCQDQ0KdjxIrxq943uw0KN2GRpgdSRV1
1uMjZwEMPFFwirsUnfEv1TXrqkm1VQtS0OJzJqfGlAmfDpDj7nEY5wFhRNuXAgMB
AAGjggIhMIICHTAdBgNVHQ4EFgQUDgyvjr8BzNSRDf0xVEQsbGud1EAwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjAwNjM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAUhhV
AwQAUhhvMA8EAgACMAkDBwAqE5UAAOEwDQYJKoZIhvcNAQELBQADggEBABIDgM3R
Y/3yh5d+aKvwyQbmWwX/Oqdtl7TfE9qVPjwbGYjXF3Uw/5Dd4kRCP6BSV0wIMy2z
0A+f2Qx8fvMhEGOGHptUTZHcY1FUQk5ByzRGhz8p8pXdTK8zBXr+Jd6w3hyvi5iC
DZzK2qXwHLIsjZ2b1v/73HEv1zambdwC8rdFh/XIpHaByUX3s96MDRrQ5XPj/ipI
1WvbkcGWGp1kfxRzdKuoB7YqL/e9t+D/E2X+x8bKfFA4hEsecfvp5w4JuYmgCYMA
bl4ZQSITmNDPOLkUucr+8M5btu6l/Nr9acknCyuGRX0Ko+za0cxk9+cz0M2WjCEE
69nOPo/4UQ2ABrA=
-----END CERTIFICATE-----
Generated at Sun Oct 19 19:30:13 2025 by rpki-client