Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS200213.roa
File: AS200213.roa (raw, json)
Hash identifier: vw7AuReQ3ydSHwdmWtrfax38S9eK62oy5eEl6eKsLsY=
Subject key identifier: 31:15:DF:53:77:CA:A3:1C:32:D1:FA:CE:F8:FF:C0:77:2F:B0:59:BC
Certificate issuer: /CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Certificate serial: 7868AF86FED5166411319826114916C12DB64FC2
Authority key identifier: 39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS200213.roa
Signing time: Mon 26 Oct 2026 17:33:16 +0000
ROA not before: Mon 26 Oct 2026 17:28:16 +0000
ROA not after: Mon 25 Oct 2027 17:33:16 +0000
asID: 200213
IP address blocks: 177.29.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 15:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:68:af:86:fe:d5:16:64:11:31:98:26:11:49:16:c1:2d:b6:4f:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Validity
Not Before: Oct 26 17:28:16 2026 GMT
Not After : Oct 25 17:33:16 2027 GMT
Subject: CN=3115DF5377CAA31C32D1FACEF8FFC0772FB059BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:10:78:07:1c:95:a7:14:be:c9:0f:85:6d:74:
ce:4f:2d:4a:08:fc:37:ea:c7:9f:af:96:62:67:61:
56:64:80:c9:59:66:94:f5:13:b4:52:64:36:a5:a4:
e1:b0:b7:02:d4:99:6f:13:fa:3b:91:5f:1f:e0:b1:
ee:a1:f3:ea:6e:d3:b2:7e:fa:97:8a:b0:b3:2c:91:
41:44:de:76:0a:bf:d8:d6:ad:56:91:c0:76:84:34:
d8:a1:61:4c:cc:bb:0f:ca:48:a3:dc:1e:a2:d0:63:
07:60:d4:fe:f1:8d:29:d7:de:90:ac:87:06:82:7b:
bc:0d:e9:2c:e4:bc:27:ab:e7:d7:7a:59:fd:bd:a8:
46:c9:b2:91:01:bc:24:a1:6d:90:6b:f6:7b:d9:9e:
b1:4f:75:15:0c:82:82:60:73:43:9d:03:b6:f8:60:
a2:cf:ab:14:a8:a3:e6:62:e9:ca:f5:a7:e6:93:ba:
74:61:33:60:8d:a3:f0:43:36:c1:8a:62:d4:da:40:
8a:32:5f:99:b5:99:07:66:44:cd:b8:cd:7d:a6:a1:
27:77:c8:72:fb:45:e7:94:c2:aa:61:05:1a:8e:33:
23:a6:7f:01:59:51:68:b7:00:ae:96:3d:22:e6:6d:
df:42:cb:c3:90:d7:7c:88:62:4c:d7:69:5a:24:48:
11:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:15:DF:53:77:CA:A3:1C:32:D1:FA:CE:F8:FF:C0:77:2F:B0:59:BC
X509v3 Authority Key Identifier:
keyid:39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS200213.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.29.248.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:8e:7e:21:86:fb:e3:75:38:0e:a4:90:46:5e:93:19:e9:dd:
e2:04:30:4a:54:7f:1f:f9:ae:4a:95:1d:72:52:b4:05:8a:df:
9d:da:ba:64:e8:b6:93:a1:0b:ab:39:29:7b:3e:30:6e:d8:a7:
42:0b:8f:4a:5d:42:af:62:92:51:c2:b1:25:c7:a9:4d:cc:50:
8c:b9:3e:ca:de:e6:54:2d:cc:9d:6d:c5:00:02:cc:77:56:7a:
4a:16:b2:a8:03:1f:4e:05:66:6a:65:bb:bf:f9:0a:f7:1b:23:
71:28:64:61:d5:cb:fc:fa:06:4e:65:ef:c2:fe:92:f4:64:dc:
11:06:11:25:eb:92:3b:46:0d:ae:b9:2b:4d:de:16:ef:d1:4f:
99:89:30:5e:e1:de:b9:7a:f1:da:54:bd:f7:0c:40:42:e6:59:
c8:6c:65:6d:29:cc:9e:2d:4a:7f:18:a8:56:b5:43:48:44:e9:
fd:79:88:a8:06:6c:ba:3a:0e:33:a0:ff:28:83:23:61:2d:71:
b5:7e:f0:c1:0e:9d:a9:45:56:57:e9:3e:5e:d1:52:20:e1:06:
be:fb:d7:55:5e:9b:60:25:ca:01:43:74:0c:a1:1c:3e:c1:c5:
14:ed:cc:b1:f3:23:0b:86:15:9f:cd:98:75:e7:80:7c:d4:62:
e2:52:43:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 23:55:33 2026 by rpki-client