Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS200169.roa
File: AS200169.roa (raw, json)
Hash identifier: pJenvPFa/wEnmxhoQiHxqv5RLzqNzTdP/9ztSFrFHcs=
Subject key identifier: BD:F3:A0:FB:35:E8:33:55:8E:A4:2C:0B:8A:19:B8:B2:2F:35:76:FE
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 136EFA15752BAD5E5B6151E61D9A15A1771AAC4B
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS200169.roa
Signing time: Fri 31 Jul 2026 19:16:58 +0000
ROA not before: Fri 31 Jul 2026 19:11:58 +0000
ROA not after: Fri 30 Jul 2027 19:16:58 +0000
asID: 200169
IP address blocks: 141.11.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 15:45:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:6e:fa:15:75:2b:ad:5e:5b:61:51:e6:1d:9a:15:a1:77:1a:ac:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jul 31 19:11:58 2026 GMT
Not After : Jul 30 19:16:58 2027 GMT
Subject: CN=BDF3A0FB35E833558EA42C0B8A19B8B22F3576FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bb:df:21:c3:50:73:09:c5:1f:13:6d:c6:6a:
cf:ec:98:d2:49:c9:db:93:91:8b:83:2a:5b:5b:f9:
97:f1:e5:d6:96:43:7e:79:94:75:fc:82:05:a5:ce:
07:b6:3a:1b:a6:18:25:fd:73:ad:64:34:fd:78:ce:
9e:3a:77:71:0e:11:b9:79:0d:86:da:43:35:98:a4:
7b:63:9f:8a:5b:a7:da:7a:5e:4a:52:db:47:b5:d5:
ab:9e:ba:fc:ce:c0:db:9b:c0:dd:ed:63:fa:e8:ca:
2d:d0:de:93:89:db:2f:86:22:06:1f:90:67:69:b1:
3e:a1:b6:c1:57:2a:a9:c9:6b:00:7a:2d:a8:61:6b:
d9:4e:66:43:96:35:c7:59:e5:32:2c:80:c2:92:86:
63:c1:f0:6e:b6:b6:34:8b:65:3a:ad:70:3f:7b:13:
c5:cd:ec:8b:23:dd:d3:b1:3e:82:6e:02:ff:85:7d:
ef:56:a1:ff:fe:3a:81:19:09:61:6a:56:6d:4f:5f:
bb:a8:af:c3:ee:8a:20:47:36:4c:a9:34:ae:81:d1:
1d:fd:6c:13:a4:fe:4b:d9:3d:05:da:a4:f8:8c:da:
93:60:c3:05:86:53:11:21:9e:de:cc:de:4d:60:1c:
dd:3c:f0:32:b4:97:ec:81:12:ed:40:40:6e:60:dc:
5b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F3:A0:FB:35:E8:33:55:8E:A4:2C:0B:8A:19:B8:B2:2F:35:76:FE
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS200169.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.93.0/24
Signature Algorithm: sha256WithRSAEncryption
11:76:a1:7a:8f:1b:ea:4f:ec:77:2e:27:80:8c:a5:83:87:ef:
37:83:0f:d0:71:55:1c:82:ed:0c:e7:11:f0:4b:5c:a8:5c:69:
98:92:82:df:61:e8:3d:48:8d:21:d2:07:4a:9b:91:5c:d4:d3:
4c:bb:09:39:ef:f5:85:ca:f1:4f:22:5f:fb:20:5e:bd:7f:45:
d7:e0:22:9d:d8:2b:d0:26:ae:ef:d9:9d:8a:90:c1:f6:7f:7d:
1d:1e:84:7b:54:92:a3:43:d2:09:c8:32:ed:a8:b2:f2:8e:1e:
f3:42:a5:46:f6:85:cd:d8:c2:da:4b:a3:b1:d6:92:a0:1c:07:
64:bd:7a:f7:30:d9:f0:3a:0f:8e:88:d0:d7:a4:77:2e:26:8e:
cf:e1:80:9d:08:6a:46:d0:ec:f4:9b:19:00:80:a4:b9:be:83:
73:8b:78:13:a0:19:29:65:3e:b3:4b:39:2a:68:7f:8c:4e:9e:
4d:a0:ef:d6:7d:2a:00:34:65:9e:3e:26:ed:f4:9d:1f:3e:b8:
65:cd:75:84:c0:5a:ea:12:b1:27:2a:99:bb:e7:9b:d1:c1:77:
d5:f9:0f:c9:b0:0b:e5:46:c7:d9:b9:bd:11:e8:67:75:9a:ee:
c5:18:d0:59:de:fd:54:23:a2:f9:21:17:ad:91:7c:5a:d5:70:
d6:b1:67:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:34:15 2026 by rpki-client