Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS200257.roa
File: AS200257.roa (raw, json)
Hash identifier: I+skwLkRlVPVeQQ6Adenf6WeGiDsnJ6U6RHx22Fnzw4=
Subject key identifier: F2:84:B3:51:B2:27:3F:53:86:5F:D7:BC:45:C8:47:FA:55:35:A9:26
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 2CA7B780A7CAD48A522695804D19CEFBAA887EBB
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS200257.roa
Signing time: Wed 11 Mar 2026 07:16:37 +0000
ROA not before: Wed 11 Mar 2026 07:11:37 +0000
ROA not after: Wed 10 Mar 2027 07:16:37 +0000
asID: 200257
IP address blocks: 147.79.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:a7:b7:80:a7:ca:d4:8a:52:26:95:80:4d:19:ce:fb:aa:88:7e:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 11 07:11:37 2026 GMT
Not After : Mar 10 07:16:37 2027 GMT
Subject: CN=F284B351B2273F53865FD7BC45C847FA5535A926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:aa:ad:10:b9:2f:66:8a:25:28:9f:92:24:60:
52:fc:80:24:ba:f3:aa:7f:7f:3f:ed:fa:b0:e0:d2:
31:4f:1f:73:04:b4:9d:83:9c:ab:8d:da:47:8f:bc:
b5:35:24:13:f5:43:61:36:45:cf:61:d4:43:dd:ac:
0b:c7:f3:30:60:56:02:32:80:65:b9:8b:16:03:dc:
fa:4b:b1:5f:6c:3c:ec:e8:73:3b:0e:2e:1c:ac:9d:
cf:42:ed:fe:a0:65:eb:a4:68:87:7a:73:8c:95:78:
94:15:cd:5e:ff:35:ac:f3:dd:8a:77:96:4a:ff:0b:
d1:73:9b:b7:9e:ba:c2:fd:18:da:01:5a:de:d7:0c:
12:61:f9:6c:40:ea:e5:3b:38:e0:2b:da:6c:71:8c:
b2:5d:3e:c7:cf:9e:c5:e7:67:6c:7e:8d:98:b4:9b:
30:9c:38:21:52:39:06:5d:4c:33:de:3c:fc:cc:4c:
99:d6:f2:5d:3f:64:e1:ca:4e:17:a4:b5:43:60:fb:
e1:c9:46:d9:29:e7:d9:3c:d9:48:40:c4:78:48:bf:
13:8b:38:8f:d9:0b:54:d5:26:08:9a:77:87:64:b0:
12:b2:e4:13:52:6a:af:d7:cd:c3:d3:ff:f1:2b:ef:
7b:9a:71:a1:5f:82:0a:36:8c:ef:21:d4:30:7e:6d:
b5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:84:B3:51:B2:27:3F:53:86:5F:D7:BC:45:C8:47:FA:55:35:A9:26
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS200257.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.79.18.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:56:4a:42:e9:ec:0c:6f:0a:a1:1f:2d:c3:60:10:9f:0b:a2:
f5:3f:b5:64:56:df:7a:b9:3c:5e:10:68:f0:a3:51:02:c4:0e:
2c:b8:8a:c8:7b:2c:f2:a0:c1:45:e3:2b:de:18:77:9b:b5:c5:
83:b4:44:6f:c1:a7:cf:be:8e:a9:9b:88:7b:d7:8a:79:5c:90:
c2:54:31:24:8b:11:b2:77:dd:c4:66:8b:80:e9:12:38:9f:91:
cb:f0:bd:e2:4f:3a:a3:20:29:8c:49:d9:e6:da:bc:de:c5:11:
ca:f4:88:ac:ec:82:34:a0:ed:e6:56:d5:90:b3:dc:73:52:d8:
7a:c1:63:5b:2b:8f:69:f7:2c:7b:ef:63:a8:35:63:1f:2e:66:
54:fb:07:04:8d:81:51:e5:43:e9:a4:5c:63:9f:6b:a7:fd:62:
69:2f:33:47:5b:36:61:98:a7:5b:78:87:02:11:7b:b5:f8:5e:
67:7a:a8:a1:47:69:2e:6a:a4:51:94:a9:9f:70:0f:7c:16:51:
e3:96:ff:06:01:67:31:4d:6e:48:5a:d6:9c:a4:63:79:eb:45:
2b:eb:be:5a:5d:1f:d7:50:1c:77:d1:6c:39:6a:05:3f:19:0e:
a7:72:c6:a2:c9:b3:bb:b6:fb:c3:71:5d:d3:26:7a:ec:56:a1:
ca:5f:9c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:14:13 2026 by rpki-client