Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200660.roa
File: AS200660.roa (raw, json)
Hash identifier: Bi41PrNStWRVsQVeKYIXovRyotrcBejy3lD8+00HWKQ=
Subject key identifier: 03:D6:18:20:08:A5:A1:CD:23:8B:BB:09:36:90:B3:A5:BB:0B:42:00
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 43C86A95A8B9C464DF69641AC1EB15A3620DA6EF
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200660.roa
Signing time: Mon 10 Aug 2026 11:46:26 +0000
ROA not before: Mon 10 Aug 2026 11:41:26 +0000
ROA not after: Mon 09 Aug 2027 11:46:26 +0000
asID: 200660
IP address blocks: 82.21.28.0/24 maxlen: 24
82.22.12.0/24 maxlen: 24
82.25.9.0/24 maxlen: 24
82.25.36.0/24 maxlen: 24
82.27.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:c8:6a:95:a8:b9:c4:64:df:69:64:1a:c1:eb:15:a3:62:0d:a6:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 10 11:41:26 2026 GMT
Not After : Aug 9 11:46:26 2027 GMT
Subject: CN=03D6182008A5A1CD238BBB093690B3A5BB0B4200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:10:63:54:a3:28:b8:a3:89:cc:98:69:66:bc:
f0:cf:83:c3:02:ed:5c:75:62:df:26:f5:12:d6:21:
cb:13:31:9d:7c:8e:a5:31:71:24:96:a5:b9:f0:24:
b3:99:03:84:78:f6:cf:4a:e8:ad:4e:de:12:60:99:
d0:c7:51:1c:3c:8b:64:84:31:fb:a8:4f:a6:1a:c4:
be:a5:5f:75:7f:8f:f7:33:8b:e9:3f:0f:f1:c7:1e:
46:72:f3:54:60:70:86:08:f8:fc:52:4d:f3:43:d8:
7f:6d:c0:8f:e5:c3:5b:bb:25:b8:d3:f7:2e:81:38:
18:7e:ec:d3:2b:2b:52:cb:53:1e:2c:2d:12:b0:98:
01:21:8c:a4:08:d5:8c:45:ce:1c:48:94:74:ab:ac:
96:cc:57:89:bc:56:99:e5:9d:de:e0:de:e3:59:b0:
1b:1d:d6:7b:6e:81:39:a9:57:95:60:f3:7f:ca:2f:
94:f1:d8:fa:76:cf:59:64:30:c4:20:d2:e6:9b:b7:
4d:1f:72:50:c8:c1:a8:fb:6e:de:cc:8d:ef:38:46:
6e:1e:ef:42:99:00:7f:7f:25:7d:39:50:24:f3:68:
ea:22:17:50:71:4a:77:61:f7:3c:64:2b:a2:9a:e8:
4f:bd:2f:f5:65:94:f3:82:4a:33:e5:b1:39:f5:12:
bb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D6:18:20:08:A5:A1:CD:23:8B:BB:09:36:90:B3:A5:BB:0B:42:00
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200660.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.28.0/24
82.22.12.0/24
82.25.9.0/24
82.25.36.0/24
82.27.3.0/24
Signature Algorithm: sha256WithRSAEncryption
83:4a:a1:45:7e:cb:62:a2:bb:07:41:03:7a:80:b8:3a:c9:7e:
4f:1d:17:63:05:34:00:84:5c:62:5d:44:59:e2:0a:29:0e:67:
fa:81:29:88:4f:be:53:aa:9b:0e:88:ab:db:4b:b3:1c:3d:cf:
8d:6e:c9:61:f6:d7:c6:11:1f:2a:a7:88:37:6b:8b:66:a6:b4:
c8:6d:93:82:a9:3b:ae:49:58:06:71:37:8c:18:b6:47:8e:eb:
28:32:51:15:fd:69:0a:3d:ef:fc:bc:6c:50:33:53:22:4e:6d:
45:93:cb:c6:3b:2b:a1:b9:80:f5:0a:30:a5:80:70:67:a1:2b:
1a:b9:fa:c9:43:ba:76:a0:3f:af:e3:85:ed:3e:98:7b:61:62:
4d:a6:dd:39:74:85:b1:ff:7e:08:c5:70:bb:12:31:01:ad:a7:
7b:91:af:97:42:dc:a0:59:32:9b:c1:14:2f:e2:3f:ec:49:b2:
d1:c7:dc:77:e3:f1:ea:3a:53:21:17:78:18:e6:71:28:dd:0d:
69:12:c4:e2:22:35:e7:c1:80:cc:9a:bf:f8:5d:82:05:51:05:
7b:ea:55:c8:bd:60:f0:99:05:13:e9:b3:36:be:6b:32:02:79:
36:45:6a:f0:fb:7a:fb:82:2b:52:4d:60:51:52:a0:bb:17:77:
e8:3d:ef:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:21:58 2026 by rpki-client