Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS200586.roa
File: AS200586.roa (raw, json)
Hash identifier: ixOkdZf06yGQ4LqPAkLSI4rT0/ILrxBXKA55WBONI3I=
Subject key identifier: 4A:72:EE:83:E4:51:BC:72:4C:80:75:49:06:6F:83:DA:28:99:2D:C4
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 595D616805E117B7B8973A22A14562574C1BD098
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS200586.roa
Signing time: Tue 03 Mar 2026 07:59:38 +0000
ROA not before: Tue 03 Mar 2026 07:54:38 +0000
ROA not after: Tue 02 Mar 2027 07:59:38 +0000
asID: 200586
IP address blocks: 2a14:7583:e600::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Mar 2026 01:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:5d:61:68:05:e1:17:b7:b8:97:3a:22:a1:45:62:57:4c:1b:d0:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Mar 3 07:54:38 2026 GMT
Not After : Mar 2 07:59:38 2027 GMT
Subject: CN=4A72EE83E451BC724C807549066F83DA28992DC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e4:9b:90:45:a6:48:18:49:a6:c8:c6:99:63:
a0:d3:4e:e3:b6:7e:65:77:06:db:0d:d2:27:aa:6c:
b2:60:e1:3b:ae:1e:a9:bb:2b:23:74:df:f0:82:7e:
09:f8:75:96:ba:eb:1e:2d:7f:fa:95:15:c7:c0:69:
63:13:dd:8c:16:fa:0c:0b:34:2d:7d:cb:90:b2:c2:
33:f1:e9:66:88:b4:51:4b:bb:61:9f:05:63:b9:65:
ed:ee:c5:84:cd:43:f7:09:d8:0d:3b:b5:e4:bc:8c:
43:c9:be:54:48:d3:53:5c:43:71:54:61:39:12:a5:
b5:d7:98:c2:f5:2b:5c:38:e3:0b:ae:db:01:41:9e:
0e:9c:53:5e:60:35:87:44:35:ea:48:bc:f7:0e:bb:
6a:4d:a5:23:1f:76:c7:d5:99:57:96:7e:0a:e7:ef:
81:58:5a:af:84:24:b8:47:5e:79:77:46:2c:db:a4:
b4:a4:20:54:a2:3d:d2:83:ed:69:ac:ea:36:04:83:
50:9f:58:ca:a4:ba:2c:98:0e:dc:a6:3d:4d:e9:9d:
c7:8f:b0:73:ae:5a:13:a0:e0:fc:85:c5:ee:8c:aa:
40:c7:8f:28:09:7d:fe:3d:81:56:11:9c:3a:19:dd:
d9:c3:71:f1:45:17:ac:51:53:f3:2c:be:c6:a1:04:
4a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:72:EE:83:E4:51:BC:72:4C:80:75:49:06:6F:83:DA:28:99:2D:C4
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS200586.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:e600::/40
Signature Algorithm: sha256WithRSAEncryption
4f:e5:a3:9f:13:64:e6:94:30:da:58:a6:08:da:d4:d8:7d:97:
70:ee:0d:51:87:a6:f7:f2:88:72:8a:c4:39:f6:26:17:43:32:
ae:4a:27:5f:a0:8a:a3:87:86:9d:3c:f1:81:6c:f3:52:20:75:
4f:b3:e3:39:3b:bb:dd:25:e2:fb:8d:7d:9a:c5:84:44:de:21:
68:d6:4a:b5:5d:ca:41:9b:ac:88:52:2c:94:de:13:a1:5d:e6:
14:1a:e7:d5:58:ff:48:51:18:ff:56:a6:d0:a2:34:ae:60:ee:
d9:14:c0:cd:78:c3:f7:06:c3:c9:31:aa:ad:65:91:fd:fa:cd:
03:3d:29:33:ce:8e:aa:d8:63:a0:bf:05:f8:d1:63:11:ed:2e:
c5:2e:b7:c5:7d:aa:44:10:de:e7:2c:14:4a:57:ab:03:07:bd:
1a:e2:69:3f:59:0f:bc:e7:8e:34:c4:9b:88:a2:b5:1f:db:09:
d9:9a:df:a1:8f:27:21:f8:05:fc:bc:a9:21:13:ec:b6:2c:75:
fc:0e:ce:c2:f8:b4:41:83:86:de:35:4d:b8:9f:06:65:54:af:
1d:a5:19:12:c6:59:6c:fa:90:af:62:36:da:11:b3:53:cc:bb:
09:0e:2e:e0:d5:4e:53:4d:86:67:9e:06:16:b2:c7:7f:35:08:
b8:af:14:37
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgIUWV1haAXhF7e4lzoioUViV0wb0JgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNjAzMDMwNzU0MzhaFw0yNzAzMDIwNzU5MzhaMDMxMTAvBgNV
BAMTKDRBNzJFRTgzRTQ1MUJDNzI0QzgwNzU0OTA2NkY4M0RBMjg5OTJEQzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU5JuQRaZIGEmmyMaZY6DTTuO2
fmV3BtsN0ieqbLJg4TuuHqm7KyN03/CCfgn4dZa66x4tf/qVFcfAaWMT3YwW+gwL
NC19y5CywjPx6WaItFFLu2GfBWO5Ze3uxYTNQ/cJ2A07teS8jEPJvlRI01NcQ3FU
YTkSpbXXmML1K1w44wuu2wFBng6cU15gNYdENepIvPcOu2pNpSMfdsfVmVeWfgrn
74FYWq+EJLhHXnl3RizbpLSkIFSiPdKD7Wms6jYEg1CfWMqkuiyYDtymPU3pnceP
sHOuWhOg4PyFxe6MqkDHjygJff49gVYRnDoZ3dnDcfFFF6xRU/MsvsahBEoDAgMB
AAGjggIMMIICCDAdBgNVHQ4EFgQUSnLug+RRvHJMgHVJBm+D2iiZLcQwHwYDVR0j
BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz
ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16
OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt
NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjAwNTg2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhR1
g+YwDQYJKoZIhvcNAQELBQADggEBAE/lo58TZOaUMNpYpgja1Nh9l3DuDVGHpvfy
iHKKxDn2JhdDMq5KJ1+giqOHhp088YFs81IgdU+z4zk7u90l4vuNfZrFhETeIWjW
SrVdykGbrIhSLJTeE6Fd5hQa59VY/0hRGP9WptCiNK5g7tkUwM14w/cGw8kxqq1l
kf36zQM9KTPOjqrYY6C/BfjRYxHtLsUut8V9qkQQ3ucsFEpXqwMHvRriaT9ZD7zn
jjTEm4iitR/bCdma36GPJyH4Bfy8qSET7LYsdfwOzsL4tEGDht41TbifBmVUrx2l
GRLGWWz6kK9iNtoRs1PMuwkOLuDVTlNNhmeeBhayx381CLivFDc=
-----END CERTIFICATE-----
Generated at Fri Mar 6 10:01:18 2026 by rpki-client