Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS200859.roa
File: AS200859.roa (raw, json)
Hash identifier: LrTXpHeT22jYt/qu5Y1ID61a4iqXvMrO62IGFyf66JI=
Subject key identifier: E9:1D:8D:FA:5F:99:84:F9:02:2D:41:AE:06:C6:DD:B4:85:B6:A7:49
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 0357AB75365C36FCDA8E034819FD33A363F16B79
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS200859.roa
Signing time: Sun 23 Aug 2026 23:20:54 +0000
ROA not before: Sun 23 Aug 2026 23:15:54 +0000
ROA not after: Sun 22 Aug 2027 23:20:54 +0000
asID: 200859
IP address blocks: 51.146.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:57:ab:75:36:5c:36:fc:da:8e:03:48:19:fd:33:a3:63:f1:6b:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 23 23:15:54 2026 GMT
Not After : Aug 22 23:20:54 2027 GMT
Subject: CN=E91D8DFA5F9984F9022D41AE06C6DDB485B6A749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:62:a4:9f:26:6b:cd:cd:6c:ff:1e:e4:d4:a9:
fe:8e:b2:4f:74:9b:dc:e3:65:58:ba:0f:80:3b:a1:
1b:15:9f:d6:7b:d5:b2:36:83:ed:73:1c:38:db:91:
38:e6:a6:a4:10:7b:10:ae:1a:7b:92:fd:f0:65:cc:
f3:24:6d:57:37:66:76:58:16:aa:13:51:91:08:10:
92:0a:b8:9d:5e:10:60:01:88:9a:73:df:74:c6:2f:
5b:fe:88:30:2c:b0:eb:a1:49:e7:de:ef:3b:5c:22:
87:e3:a5:6d:9a:69:90:f7:13:36:81:e7:27:22:b1:
19:07:3d:5c:65:d9:f6:a4:f4:95:9a:a0:90:15:4e:
38:53:b2:b8:4f:9b:85:4c:6c:f7:7d:77:89:22:86:
e3:48:0e:c0:e0:04:14:c9:41:4d:66:e6:d8:c2:1b:
19:af:5b:73:11:dc:28:99:24:a1:79:00:29:1b:30:
86:63:64:c1:13:c5:f8:73:57:36:1e:7a:9c:79:1f:
21:ab:63:df:d5:99:b5:72:b7:ff:ec:7b:11:5e:dc:
aa:52:1c:8a:49:78:ec:eb:36:40:6f:1b:27:d6:8a:
fe:6c:99:d4:94:7a:78:ac:f2:12:d4:d6:d1:15:a9:
9e:06:73:a9:20:93:4d:95:c1:44:6a:2e:da:14:38:
10:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:1D:8D:FA:5F:99:84:F9:02:2D:41:AE:06:C6:DD:B4:85:B6:A7:49
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS200859.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.18.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:f8:61:09:fb:54:01:5e:d4:06:04:b1:8b:d3:62:36:37:75:
cb:32:21:49:01:bc:02:77:f0:f6:80:65:c1:fe:7f:5c:22:97:
be:6d:d3:6f:ac:ae:75:3b:95:5a:71:42:6d:f1:4f:f9:1e:5f:
f9:13:e2:1d:06:01:76:30:32:b7:4d:5b:b4:8e:84:5e:61:81:
b2:0a:1d:e3:b7:e4:3f:46:04:2b:c2:5c:fa:b1:90:ea:ae:95:
2d:0e:b0:7c:42:74:ba:0d:38:34:78:0f:41:e9:b8:7d:11:5e:
ca:05:5e:86:fd:22:4d:12:15:ea:af:d3:d6:6e:38:47:80:c3:
00:cb:aa:59:77:94:38:d0:49:96:71:72:d2:39:f0:e2:1b:b2:
b5:36:db:40:50:9b:3f:fd:e9:3b:25:fa:ba:eb:f5:20:79:40:
65:5d:4c:f2:c9:d3:df:39:95:e3:c9:5e:c5:4e:d0:de:19:21:
b3:86:4c:bd:b1:5d:80:0a:9e:28:68:f6:99:91:76:4b:8e:80:
87:eb:a7:8b:cf:9e:e6:be:6c:5e:48:cd:ca:e3:6a:81:dc:ba:
63:12:a8:ed:9a:b6:13:96:a4:d0:18:b1:b7:cb:06:c8:d5:bf:
ce:1b:fe:7c:af:9a:ed:75:04:57:51:a4:b0:3a:bb:6d:be:7e:
cc:ac:1f:a3
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUA1erdTZcNvzajgNIGf0zo2Pxa3kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA4MjMyMzE1NTRaFw0yNzA4MjIyMzIwNTRaMDMxMTAvBgNV
BAMTKEU5MUQ4REZBNUY5OTg0RjkwMjJENDFBRTA2QzZEREI0ODVCNkE3NDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5YqSfJmvNzWz/HuTUqf6Osk90
m9zjZVi6D4A7oRsVn9Z71bI2g+1zHDjbkTjmpqQQexCuGnuS/fBlzPMkbVc3ZnZY
FqoTUZEIEJIKuJ1eEGABiJpz33TGL1v+iDAssOuhSefe7ztcIofjpW2aaZD3EzaB
5ycisRkHPVxl2fak9JWaoJAVTjhTsrhPm4VMbPd9d4kihuNIDsDgBBTJQU1m5tjC
GxmvW3MR3CiZJKF5ACkbMIZjZMETxfhzVzYeepx5HyGrY9/VmbVyt//sexFe3KpS
HIpJeOzrNkBvGyfWiv5smdSUenis8hLU1tEVqZ4Gc6kgk02VwURqLtoUOBCbAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQU6R2N+l+ZhPkCLUGuBsbdtIW2p0kwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMjAwODU5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAM5IS
MA0GCSqGSIb3DQEBCwUAA4IBAQB9+GEJ+1QBXtQGBLGL02I2N3XLMiFJAbwCd/D2
gGXB/n9cIpe+bdNvrK51O5VacUJt8U/5Hl/5E+IdBgF2MDK3TVu0joReYYGyCh3j
t+Q/RgQrwlz6sZDqrpUtDrB8QnS6DTg0eA9B6bh9EV7KBV6G/SJNEhXqr9PWbjhH
gMMAy6pZd5Q40EmWcXLSOfDiG7K1NttAUJs//ek7Jfq66/UgeUBlXUzyydPfOZXj
yV7FTtDeGSGzhky9sV2ACp4oaPaZkXZLjoCH66eLz57mvmxeSM3K42qB3LpjEqjt
mrYTlqTQGLG3ywbI1b/OG/58r5rtdQRXUaSwOrttvn7MrB+j
-----END CERTIFICATE-----
Generated at Thu Sep 3 08:28:41 2026 by rpki-client