Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS200213.roa
File: AS200213.roa (raw, json)
Hash identifier: mt0oKV4vKyzTLnTVvTz1WTT70/R8SpHLCy/OBAgeu/8=
Subject key identifier: 25:02:D5:A5:E7:37:D6:F0:83:23:2A:0C:A8:C5:6D:89:BE:69:5C:F4
Certificate issuer: /CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Certificate serial: 3F40D23C0759543B6DEBD2EECB3FDC0E0A040052
Authority key identifier: 39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS200213.roa
Signing time: Thu 30 Jul 2026 16:43:18 +0000
ROA not before: Thu 30 Jul 2026 16:38:18 +0000
ROA not after: Thu 29 Jul 2027 16:43:18 +0000
asID: 200213
IP address blocks: 177.29.248.0/24 maxlen: 24
177.29.250.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Aug 2026 10:41:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:40:d2:3c:07:59:54:3b:6d:eb:d2:ee:cb:3f:dc:0e:0a:04:00:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Validity
Not Before: Jul 30 16:38:18 2026 GMT
Not After : Jul 29 16:43:18 2027 GMT
Subject: CN=2502D5A5E737D6F083232A0CA8C56D89BE695CF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:7c:79:ca:c4:69:ac:5e:b5:7b:d6:58:ff:b9:
a0:3b:2a:3b:aa:56:4e:30:cb:15:b6:0e:7b:91:4d:
66:d7:88:f8:49:ab:df:f7:12:51:a7:88:e4:ca:4d:
b5:b1:95:08:d9:38:28:e0:d2:e8:54:65:e9:98:46:
22:af:b0:6b:40:3d:77:af:dc:44:35:f8:39:ab:44:
56:8c:7e:eb:06:21:44:29:2a:b6:e2:f7:62:c6:f4:
2d:b5:87:dd:01:46:59:05:a7:ba:d5:85:73:49:51:
f7:73:50:f5:24:e2:6d:5e:19:0a:3a:4a:a4:e6:e1:
9b:89:b8:4f:78:af:71:9c:d2:c8:52:d7:84:2c:eb:
bf:ae:1f:13:84:49:2c:98:e8:fd:f6:fd:ac:8a:80:
46:88:52:e8:60:3d:7b:48:e0:dd:45:cc:8f:99:31:
60:ff:e4:fe:89:15:1e:ab:17:7e:c8:b4:28:b6:b9:
32:84:5a:9c:13:9e:6e:dd:57:3e:96:cf:0c:9b:80:
00:64:b9:d5:7b:0f:0a:ff:37:ca:92:a6:ee:f8:d6:
92:14:a6:e9:0f:5b:62:3a:ff:37:99:21:6f:6f:e7:
cc:09:12:b4:1c:95:7b:35:47:e7:fc:7d:dc:9a:f6:
49:94:98:b4:9b:ab:d8:74:57:3e:f7:ff:e1:6a:25:
77:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:02:D5:A5:E7:37:D6:F0:83:23:2A:0C:A8:C5:6D:89:BE:69:5C:F4
X509v3 Authority Key Identifier:
keyid:39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS200213.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.29.248.0/24
177.29.250.0/23
Signature Algorithm: sha256WithRSAEncryption
93:74:b4:5c:1c:82:73:a2:c3:6d:8e:8c:71:cf:98:b8:7d:69:
29:74:2f:47:e9:1f:0a:91:16:36:fa:dd:4b:c6:0e:96:28:13:
1a:07:3f:c1:88:0f:18:f4:ee:da:42:cc:4f:54:88:77:35:21:
3c:e2:ad:b3:ca:ad:66:37:a3:c2:0f:49:4c:ae:35:55:f5:ac:
b1:10:40:5a:90:de:18:2f:c4:8e:65:b1:f7:14:d2:27:ed:84:
11:00:9e:3f:80:22:92:0f:dd:b3:97:5c:69:ce:38:8b:73:36:
53:10:bc:20:49:da:36:aa:60:21:79:c0:6f:c3:bf:40:51:c1:
d3:79:3c:dd:8b:cd:83:73:ab:ed:bc:5e:b0:c3:1e:a8:f4:c7:
c0:25:8c:d3:73:ee:29:2d:f0:87:7f:19:6c:14:78:38:bd:ac:
07:e7:ea:80:50:be:1c:dd:6b:6c:32:3f:7d:d0:5b:3a:42:02:
b7:11:35:15:52:aa:c7:fe:0f:62:1b:0a:2d:cf:a5:62:da:07:
ce:f9:f0:e4:bf:b7:26:b3:40:75:12:16:cc:ae:bc:6c:3b:13:
7d:7d:85:66:18:ef:f1:50:34:35:51:19:e1:9f:c3:40:49:10:
2e:d8:70:11:34:ac:ca:e6:4f:26:1e:13:94:a4:05:fb:78:fe:
92:01:f9:99
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUP0DSPAdZVDtt69Luyz/cDgoEAFIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzk5YTdiZjJiOTBhYjhjYmZkMjRjYzRmOGJhZGVhNzg3
N2Y4ZTQ5NTAeFw0yNjA3MzAxNjM4MThaFw0yNzA3MjkxNjQzMThaMDMxMTAvBgNV
BAMTKDI1MDJENUE1RTczN0Q2RjA4MzIzMkEwQ0E4QzU2RDg5QkU2OTVDRjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1fHnKxGmsXrV71lj/uaA7Kjuq
Vk4wyxW2DnuRTWbXiPhJq9/3ElGniOTKTbWxlQjZOCjg0uhUZemYRiKvsGtAPXev
3EQ1+DmrRFaMfusGIUQpKrbi92LG9C21h90BRlkFp7rVhXNJUfdzUPUk4m1eGQo6
SqTm4ZuJuE94r3Gc0shS14Qs67+uHxOESSyY6P32/ayKgEaIUuhgPXtI4N1FzI+Z
MWD/5P6JFR6rF37ItCi2uTKEWpwTnm7dVz6WzwybgABkudV7Dwr/N8qSpu741pIU
pukPW2I6/zeZIW9v58wJErQclXs1R+f8fdya9kmUmLSbq9h0Vz73/+FqJXcZAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUJQLVpec31vCDIyoMqMVtib5pXPQwHwYDVR0j
BBgwFoAUOZp78rkKuMv9JMxPi63qeHf45JUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYmU0MTcwNGYtNzgxNS00ZjJjLWE1MDMtNThhZTA4ZTU1
NmI2LzQvMzk5QTdCRjJCOTBBQjhDQkZEMjRDQzRGOEJBREVBNzg3N0Y4RTQ5NS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL09acDc4cmtLdU12OUpNeFBpNjNxZUhm
NDVKVS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2JlNDE3MDRmLTc4MTUt
NGYyYy1hNTAzLTU4YWUwOGU1NTZiNi80L0FTMjAwMjEzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAsR34
AwQBsR36MA0GCSqGSIb3DQEBCwUAA4IBAQCTdLRcHIJzosNtjoxxz5i4fWkpdC9H
6R8KkRY2+t1Lxg6WKBMaBz/BiA8Y9O7aQsxPVIh3NSE84q2zyq1mN6PCD0lMrjVV
9ayxEEBakN4YL8SOZbH3FNIn7YQRAJ4/gCKSD92zl1xpzjiLczZTELwgSdo2qmAh
ecBvw79AUcHTeTzdi82Dc6vtvF6wwx6o9MfAJYzTc+4pLfCHfxlsFHg4vawH5+qA
UL4c3WtsMj990Fs6QgK3ETUVUqrH/g9iGwotz6Vi2gfO+fDkv7cms0B1EhbMrrxs
OxN9fYVmGO/xUDQ1URnhn8NASRAu2HARNKzK5k8mHhOUpAX7eP6SAfmZ
-----END CERTIFICATE-----
Generated at Wed Aug 5 12:34:12 2026 by rpki-client