Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS200983.roa
File: AS200983.roa (raw, json)
Hash identifier: NY4VIa8dGgJZP3TIa/ZwdOnX0wvbi/+tpd6i2SH8g48=
Subject key identifier: A6:60:AD:8C:74:FF:9C:BF:3D:BB:0A:D0:A7:9B:BF:74:DD:DF:CF:88
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 093CFBB645C9E11E25F48274BB422EE9BEB7CC8F
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS200983.roa
Signing time: Sun 22 Feb 2026 13:23:52 +0000
ROA not before: Sun 22 Feb 2026 13:18:52 +0000
ROA not after: Sun 21 Feb 2027 13:23:52 +0000
asID: 200983
IP address blocks: 2a14:7581:ffc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Feb 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:3c:fb:b6:45:c9:e1:1e:25:f4:82:74:bb:42:2e:e9:be:b7:cc:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Feb 22 13:18:52 2026 GMT
Not After : Feb 21 13:23:52 2027 GMT
Subject: CN=A660AD8C74FF9CBF3DBB0AD0A79BBF74DDDFCF88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:37:00:cd:5f:77:e8:24:d6:90:08:5d:ab:08:
70:16:b6:1c:60:ef:5e:48:d1:41:1e:ef:23:34:e8:
3c:31:2a:0e:88:fe:8c:21:20:63:1a:6a:23:55:b2:
ff:f6:7b:3c:07:98:91:09:ef:8a:89:54:8c:85:f1:
88:ac:d6:82:57:f2:5b:87:44:1e:59:d2:9a:06:ca:
1d:78:15:76:77:e1:0a:96:4e:c8:7c:e9:d9:ea:50:
2e:73:d4:41:44:c1:ae:28:43:0c:a6:49:d8:1e:d0:
f2:18:17:18:bd:bd:09:a2:1d:5e:01:e9:cc:ac:32:
8e:61:d9:ac:a8:12:22:f8:61:98:02:8a:7d:8f:db:
54:50:36:34:66:c0:70:58:43:6d:d3:03:bc:1e:3e:
12:a0:1f:71:05:33:5f:16:a7:54:f1:e7:4c:e4:86:
96:40:b3:6f:18:70:94:df:fe:47:88:6b:af:e0:76:
7f:33:15:df:8e:a2:15:cf:a9:e4:2e:a2:be:77:5c:
a3:d9:76:93:b1:72:a6:05:fe:71:69:9f:91:af:f0:
15:77:04:42:a9:a0:db:33:18:27:fa:3a:c5:0f:64:
8f:a5:41:44:6a:bc:c2:c9:25:15:f1:a2:90:0b:cc:
24:16:70:21:9c:94:44:a2:84:06:05:3b:7d:c7:75:
43:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:60:AD:8C:74:FF:9C:BF:3D:BB:0A:D0:A7:9B:BF:74:DD:DF:CF:88
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS200983.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:ffc::/48
Signature Algorithm: sha256WithRSAEncryption
04:d3:8d:22:54:27:91:be:1c:53:a9:55:2f:3c:3b:94:f1:61:
f2:75:cb:c8:af:cb:da:72:eb:a1:2b:f0:07:88:52:2c:93:57:
ed:a1:79:da:c4:20:2c:2b:f9:4c:e3:b6:8c:f2:86:44:26:38:
2e:ca:26:03:43:c6:04:31:ab:46:ec:06:41:df:70:9a:7d:34:
2d:98:f3:99:23:86:71:98:c7:58:95:99:93:b0:b2:83:8d:48:
2a:21:31:45:f0:9a:5e:fa:93:ea:5a:38:37:60:9d:03:60:e1:
38:f8:99:01:ab:12:0a:48:b0:81:10:48:ee:30:55:61:a3:a5:
b1:97:ef:68:70:f6:6f:a4:ee:a4:8f:75:b5:7f:21:b7:2a:a4:
d0:e6:45:3b:16:21:05:c1:08:0c:de:b4:a7:9b:4e:e2:5f:9a:
45:91:07:13:cb:02:61:42:e5:44:3e:80:7b:53:f6:13:53:59:
ee:1b:1a:e4:4a:12:16:b9:b6:60:50:57:63:81:15:20:ed:9e:
72:ff:b0:2a:c2:39:f2:73:72:90:81:e7:50:fe:43:82:7d:f5:
7b:77:a7:da:32:a5:69:7a:28:51:10:9a:29:28:66:09:6b:dd:
56:b1:bb:47:b8:c8:74:85:73:de:35:56:a3:54:6c:ee:ac:65:
31:82:74:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 09:15:22 2026 by rpki-client