Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS200260.roa
File:                     AS200260.roa (raw, json)
Hash identifier:          ypynGZdUSxLwNtkFfem4XrMjjeoSCuXfxbf6lZZ5jkU=
Subject key identifier:   0A:EE:83:53:69:9E:76:18:17:12:AE:39:27:43:6A:F7:C9:83:CE:F6
Certificate issuer:       /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial:       088E5654A20E7166FB51945D4B858A54D4E3AC9D
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS200260.roa
Signing time:             Thu 14 May 2026 19:17:51 +0000
ROA not before:           Thu 14 May 2026 19:12:51 +0000
ROA not after:            Thu 13 May 2027 19:17:51 +0000
asID:                     200260
IP address blocks:        51.241.44.0/22 maxlen: 24
                          51.241.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 Jun 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:8e:56:54:a2:0e:71:66:fb:51:94:5d:4b:85:8a:54:d4:e3:ac:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
        Validity
            Not Before: May 14 19:12:51 2026 GMT
            Not After : May 13 19:17:51 2027 GMT
        Subject: CN=0AEE8353699E76181712AE3927436AF7C983CEF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:79:78:39:bf:0c:a7:45:e9:d0:4b:9b:6a:4c:
                    ba:f3:40:ec:a3:4f:f0:33:20:f8:2d:61:fd:5e:50:
                    74:f0:8a:f5:26:a3:4c:07:65:57:45:3e:3c:e1:c2:
                    e9:ce:f7:71:fd:52:f1:3b:30:bc:56:a3:46:86:e6:
                    19:12:92:80:3e:9d:d4:dd:43:a7:1a:98:9c:14:cf:
                    05:0c:db:2f:a8:31:b2:4c:50:43:57:54:41:de:78:
                    17:8c:99:42:03:37:0c:39:72:dd:60:56:bd:26:b3:
                    5c:8a:99:53:99:cb:2b:45:ab:14:23:3f:e3:9c:06:
                    7e:d8:d8:ca:b2:4d:63:c5:fb:86:76:57:cc:77:1f:
                    77:20:e5:c6:bd:f4:5d:1d:3e:35:c9:90:2c:57:a2:
                    5f:0e:75:c5:73:a9:13:31:9f:e3:01:28:7f:34:9c:
                    20:49:9f:52:38:1b:da:0b:55:85:84:92:0c:a8:1a:
                    36:b7:64:9a:75:a6:fd:b9:98:d7:6e:94:25:81:92:
                    71:ae:59:3c:4e:ed:48:73:e7:0d:de:da:e6:ab:34:
                    2d:ce:a8:50:6b:0d:ec:32:30:1d:1b:bc:ee:42:f8:
                    f9:25:1b:b3:dc:6e:bd:62:87:7e:63:24:cb:c4:9c:
                    1c:25:ee:17:d7:10:fc:c1:47:5c:55:75:81:31:d7:
                    ec:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:EE:83:53:69:9E:76:18:17:12:AE:39:27:43:6A:F7:C9:83:CE:F6
            X509v3 Authority Key Identifier:
                keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS200260.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  51.241.44.0-51.241.51.255

    Signature Algorithm: sha256WithRSAEncryption
         59:30:7d:be:ab:69:c0:59:db:f9:63:64:b9:94:c1:d8:8c:44:
         8e:d9:be:a1:6e:4d:d7:67:52:9b:63:ee:f7:96:d3:dc:0a:13:
         25:73:c5:5a:7f:a0:19:35:27:3c:d6:a0:ea:e2:c1:fb:89:14:
         3e:02:ad:20:4c:36:8c:55:0a:13:94:9a:1b:2a:59:ae:6e:66:
         7c:f0:54:2a:92:65:9c:29:cf:27:59:88:a0:c0:a8:e8:15:1e:
         19:53:16:d6:5f:02:2a:15:18:83:64:b4:61:ce:dd:fe:23:76:
         c6:99:1f:62:88:8c:79:c8:18:66:44:65:56:1a:1c:b2:54:90:
         a4:35:f8:fc:03:9a:0f:c8:62:91:ca:41:b8:52:7f:8d:71:96:
         d2:5c:5c:1c:b4:89:2d:89:3f:f5:34:85:41:3d:6a:14:10:55:
         11:fe:df:2b:8b:3e:22:0a:fb:75:fc:80:7f:7f:9e:df:ae:91:
         4f:46:78:78:46:ab:64:b4:1f:f5:69:e8:e4:bb:a1:11:a7:16:
         ad:15:da:70:84:16:5d:99:ae:40:32:4c:16:54:fe:13:0d:6f:
         f1:4f:66:84:eb:f9:98:b1:08:37:b6:61:1d:07:dc:fe:cb:df:
         90:9a:9e:3e:d3:b9:e6:5d:fa:df:aa:11:5e:6d:01:53:c1:d9:
         cd:48:57:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 08:31:08 2026 by rpki-client