Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200819.roa
File: AS200819.roa (raw, json)
Hash identifier: OEvy6It+1TjUb6CywFtL0W08msWsIeYfG5jZ+d+ihH0=
Subject key identifier: 71:C8:7B:37:6B:B0:03:EA:F6:A3:A5:A8:5C:5C:5E:C5:7D:64:F2:C8
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 40D1DFFF35048C5E7C880699DA0C0C836B240EA4
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200819.roa
Signing time: Fri 20 Feb 2026 19:01:52 +0000
ROA not before: Fri 20 Feb 2026 18:56:52 +0000
ROA not after: Fri 19 Feb 2027 19:01:52 +0000
asID: 200819
IP address blocks: 2a13:9500:13b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Feb 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:d1:df:ff:35:04:8c:5e:7c:88:06:99:da:0c:0c:83:6b:24:0e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Feb 20 18:56:52 2026 GMT
Not After : Feb 19 19:01:52 2027 GMT
Subject: CN=71C87B376BB003EAF6A3A5A85C5C5EC57D64F2C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cf:e4:35:e7:8a:1f:f9:e1:f8:0c:5b:43:4e:
06:3e:3d:45:1c:fe:d6:8c:d0:6b:18:5e:3b:fc:9b:
3c:b8:a5:5a:5d:dc:70:2a:75:d0:cb:81:e8:05:16:
a7:65:1c:a1:e6:23:dc:05:7d:0f:04:fd:2d:5a:82:
b5:51:37:ae:82:75:20:3d:14:e9:d6:69:8d:73:95:
1a:37:9c:72:fa:10:4d:f2:bf:d9:a6:d4:0d:cb:2f:
97:8e:45:f0:51:8b:8c:8f:9e:63:37:71:b6:5f:87:
aa:7a:c2:e5:13:91:4a:3d:a7:b7:74:41:45:4f:70:
14:60:66:a5:f3:6f:b6:26:d9:a3:59:60:20:26:d6:
85:8e:4e:79:7e:7c:a8:46:bb:ae:81:5b:bc:24:76:
0c:ca:2c:fd:51:6f:e8:4a:96:6b:e3:b4:f2:45:a7:
a2:51:66:25:fc:52:8f:dd:d6:7e:cb:fb:ac:9e:36:
5f:d8:dc:95:f6:a7:d3:23:37:40:68:44:e0:7e:43:
48:08:33:66:74:f7:09:ab:bf:a9:47:72:9c:db:e4:
b2:6e:c9:af:3b:08:21:4b:9c:8d:61:fb:d7:14:40:
ec:64:6f:3f:8f:8d:15:79:f0:fb:ea:c6:e4:b5:32:
d6:ea:28:27:e6:30:96:c4:02:7e:fb:9b:be:ba:bd:
05:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C8:7B:37:6B:B0:03:EA:F6:A3:A5:A8:5C:5C:5E:C5:7D:64:F2:C8
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200819.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:13b::/48
Signature Algorithm: sha256WithRSAEncryption
4e:de:0f:69:4e:21:94:1b:41:8e:b6:3b:ba:fc:e3:00:8e:3e:
34:12:a8:3a:81:b4:dd:91:a5:be:d8:62:98:22:00:06:76:d8:
1f:1c:d6:0a:19:47:eb:bf:06:5e:09:b1:7a:dc:16:9f:b7:a2:
15:78:0a:08:a6:0e:20:a0:68:18:3e:45:6d:44:4c:c0:3f:49:
1d:3c:1f:df:ea:c5:dc:3b:62:c2:32:29:c0:e5:1c:88:59:10:
96:24:bc:d9:c0:3a:32:36:22:07:60:fb:18:43:de:19:07:ae:
0e:7b:76:02:09:a8:11:fc:42:42:c2:60:9e:f7:85:73:58:e9:
23:90:0a:37:a7:7d:7b:f9:50:08:21:dc:fb:56:9d:bb:90:17:
01:80:23:eb:9b:2d:e7:0a:39:0b:dc:a3:94:3e:12:98:05:c2:
d1:0e:8c:84:4e:e9:e6:0b:4c:10:77:85:15:50:d2:c6:c3:1f:
01:f5:4e:f7:02:bc:d3:18:18:19:77:e7:8a:76:f2:a3:73:79:
0e:03:d2:58:7d:c5:37:96:76:23:08:c0:20:d9:10:0d:d3:81:
d7:68:28:0e:ed:55:a2:80:36:cb:23:77:c0:18:7c:f3:04:a2:
a4:b6:a0:0e:24:6b:8c:f3:6c:09:86:9c:0a:e2:36:f3:e6:66:
10:1e:95:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 09:15:23 2026 by rpki-client