Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS200912.roa
File: AS200912.roa (raw, json)
Hash identifier: tORkSthgdok04qXw+FSuS9LEz9DZmmSsuXBaleHSryE=
Subject key identifier: F3:35:9C:30:3A:EF:78:04:3C:A2:EE:33:03:33:36:B9:A3:D2:96:02
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 7C8084EA092958293FD695799C8C7F3D1D3F8802
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS200912.roa
Signing time: Thu 14 May 2026 14:48:47 +0000
ROA not before: Thu 14 May 2026 14:43:47 +0000
ROA not after: Thu 13 May 2027 14:48:47 +0000
asID: 200912
IP address blocks: 2a14:7585:2000::/48 maxlen: 48
2a14:7585:a200::/48 maxlen: 48
2a14:7585:d500::/44 maxlen: 44
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 May 2026 14:25:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:80:84:ea:09:29:58:29:3f:d6:95:79:9c:8c:7f:3d:1d:3f:88:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: May 14 14:43:47 2026 GMT
Not After : May 13 14:48:47 2027 GMT
Subject: CN=F3359C303AEF78043CA2EE33033336B9A3D29602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:87:ef:5c:f3:48:44:41:72:12:71:65:89:59:
05:f1:de:63:f1:d5:40:bd:6a:a4:ca:8e:b8:08:a0:
96:38:7b:be:58:aa:2e:8d:39:3a:84:45:aa:95:0c:
f0:a1:7f:11:6a:ce:39:5f:62:67:c9:9b:7b:ac:e7:
c7:3a:aa:a4:e4:ab:2b:4e:a4:af:0d:26:cf:83:1b:
7d:cf:ee:cc:23:fc:4b:01:9b:98:b5:f7:cb:6d:c4:
ef:04:4a:62:ca:5a:6a:9d:ff:97:e0:31:45:eb:db:
00:f9:42:8e:60:40:22:fc:de:80:ab:b2:72:16:0a:
eb:33:87:f1:ba:7a:b2:52:2f:15:58:1f:ac:58:2e:
b9:5f:88:48:f2:a6:d9:84:e0:da:fe:ed:06:29:69:
57:6c:ff:1a:fa:1e:32:51:08:f2:0b:3f:05:39:f4:
ee:0e:8a:90:03:c6:11:fe:50:b1:26:5b:4a:eb:79:
60:2e:ea:0a:9e:8f:0f:b2:5b:cc:03:e4:2c:ff:4e:
8b:cf:24:5e:5a:50:9c:df:ec:32:bf:fe:40:a1:62:
11:a6:d1:20:e6:ec:b7:9f:a7:72:17:f8:e1:f5:d9:
39:85:5c:08:1b:48:97:77:d7:2c:10:0a:ab:f2:83:
23:6a:df:81:f6:f0:cf:e0:08:5e:f2:0c:69:08:32:
15:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:35:9C:30:3A:EF:78:04:3C:A2:EE:33:03:33:36:B9:A3:D2:96:02
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS200912.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7585:2000::/48
2a14:7585:a200::/48
2a14:7585:d500::/44
Signature Algorithm: sha256WithRSAEncryption
70:00:8e:27:e0:b7:3b:39:24:72:89:72:26:8a:f5:35:36:eb:
2b:49:77:53:e5:b8:71:0b:9b:d8:37:f3:f2:f7:0b:9c:ec:f4:
f1:6e:de:9a:b3:f4:59:56:9d:5b:ec:05:8f:0e:7a:ed:3b:cc:
3c:fb:c9:2f:4a:ba:25:c7:3b:c4:51:92:af:be:c4:19:87:bb:
81:e0:4b:8e:e5:39:4a:cf:06:80:8d:54:88:d1:8a:9e:a4:88:
9f:3a:65:ab:66:94:46:59:81:cf:dc:d8:a7:dc:6d:ee:86:e6:
c2:13:83:ba:71:fc:f6:7c:cb:f3:b6:c4:aa:fd:21:ed:75:7b:
9d:90:dd:85:db:6f:30:8a:38:0d:fd:e7:f0:ed:3d:21:b5:10:
5d:2b:9b:07:94:fd:21:92:89:35:0a:17:32:c8:b8:b4:0c:10:
33:a6:dc:45:4a:ad:76:16:52:c0:c4:76:9f:e9:b1:94:fb:a2:
41:61:05:d2:63:58:e3:c5:72:cb:f8:b0:ed:1a:3f:f5:ec:1b:
3a:03:7e:7e:60:a3:69:ab:95:a0:7a:b6:a5:73:1a:80:b1:34:
86:4f:a0:ea:bc:f5:10:27:00:98:07:fb:df:3d:61:fe:33:5d:
c3:2a:69:6e:f5:1e:44:ce:f9:e4:89:29:23:41:00:04:03:f4:
3f:46:be:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 27 17:02:18 2026 by rpki-client