Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS200221.roa
File: AS200221.roa (raw, json)
Hash identifier: wq2b3xHtXN4dSYp5Bmt6FFMdWVMUD26+ZyWf6bIJkoU=
Subject key identifier: 74:86:DD:5F:61:28:C0:EC:52:63:1A:CC:88:E9:BA:AD:1F:12:07:C2
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 245685842E74E76A7D30EE743DF0E8A5D56FC3A1
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS200221.roa
Signing time: Sun 05 Jul 2026 19:00:44 +0000
ROA not before: Sun 05 Jul 2026 18:55:44 +0000
ROA not after: Sun 04 Jul 2027 19:00:44 +0000
asID: 200221
IP address blocks: 78.105.125.0/24 maxlen: 24
188.221.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:56:85:84:2e:74:e7:6a:7d:30:ee:74:3d:f0:e8:a5:d5:6f:c3:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jul 5 18:55:44 2026 GMT
Not After : Jul 4 19:00:44 2027 GMT
Subject: CN=7486DD5F6128C0EC52631ACC88E9BAAD1F1207C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:fa:61:61:55:95:d2:86:d4:77:ea:3e:fd:b0:
96:9b:45:44:9f:65:d4:11:1d:cc:2d:6b:68:b1:28:
23:eb:c4:f6:8f:72:ec:21:13:02:ff:b5:06:ed:c9:
f6:85:46:29:12:04:d1:87:a5:24:73:ea:1b:ac:b9:
e1:67:b5:80:35:8c:c2:cd:07:3a:0d:83:ba:71:35:
fc:4e:99:c5:f9:29:4e:cd:9c:d4:1e:2a:c6:34:09:
2a:b4:4a:df:15:eb:c5:f0:5d:ff:39:83:c9:0f:a1:
aa:60:4d:e1:43:23:dd:11:c0:5b:19:bc:b5:22:82:
5f:25:a6:0e:59:08:7e:4d:e2:ca:cc:79:68:8b:f7:
a1:7f:7a:62:3c:27:93:f0:b0:b1:5a:00:b8:62:57:
84:2a:ba:e8:bf:e6:40:90:cc:3a:fd:8a:2b:f6:6d:
e3:2b:6b:cc:4c:e2:51:a0:c8:ad:b0:0a:4a:a2:4f:
33:07:9f:3d:34:a9:b8:93:23:f3:ad:f2:17:31:b7:
bd:66:45:ea:a6:ba:9b:b5:6f:99:28:97:ed:33:8c:
a6:ad:1e:e7:c0:2a:41:77:3d:6f:ab:cb:d9:bf:11:
ac:a7:1e:da:86:9d:6c:d3:66:71:c1:03:ae:62:28:
99:4c:f9:10:74:0a:2d:0b:1e:5c:e6:2e:a8:1b:11:
b9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:86:DD:5F:61:28:C0:EC:52:63:1A:CC:88:E9:BA:AD:1F:12:07:C2
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS200221.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.105.125.0/24
188.221.14.0/24
Signature Algorithm: sha256WithRSAEncryption
37:f4:76:83:ac:78:5b:89:5d:84:1b:89:d2:4c:f2:4c:26:cd:
b3:ad:80:78:c5:36:1a:86:ea:a6:12:61:9c:a5:31:8c:31:98:
d9:7f:35:f2:96:74:6a:69:60:09:a6:2f:b9:e6:ca:ed:07:de:
56:96:77:e6:2f:16:7f:9e:76:aa:fe:07:20:39:2b:69:df:0b:
dc:48:aa:88:fb:02:fa:8e:b0:51:84:b2:d3:8b:78:7f:de:e5:
e3:09:18:f3:c8:89:01:b4:46:1e:32:58:6d:55:31:ea:98:b2:
f8:de:ad:ee:b1:42:e6:c5:a9:f1:8a:00:f2:97:98:f7:6b:bb:
ba:77:ec:16:c2:b3:3a:ab:75:bf:4c:1f:41:9f:c4:1f:ed:13:
f2:c3:d2:5d:ce:24:a9:f1:84:c0:f6:01:b8:77:e0:f6:ee:b6:
39:3a:51:80:64:fa:64:4d:01:77:68:f4:e3:7a:7a:c7:5d:78:
46:df:f3:03:b0:4e:59:bb:22:6a:eb:4d:f6:80:05:a6:c7:11:
6b:84:77:13:71:49:67:b0:ff:0b:a8:9e:7f:35:ed:16:14:01:
32:00:52:23:6e:52:c4:58:aa:69:f3:5e:70:c4:04:7e:82:92:
5b:d9:9d:45:c5:0b:26:45:23:32:66:40:00:98:9b:b0:61:6d:
87:94:18:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 06:43:36 2026 by rpki-client