Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS200223.roa
File: AS200223.roa (raw, json)
Hash identifier: KxVPD0GaxOEy8kSCMyje2qwsDVyvyBUWsQx+KSJuFuU=
Subject key identifier: 24:7A:EA:FF:5A:25:C0:61:F9:52:00:41:33:F1:67:1E:F3:63:D6:A1
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 08AC6758800104C63775C0115E3027B371B35458
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS200223.roa
Signing time: Wed 04 Nov 2026 09:49:39 +0000
ROA not before: Wed 04 Nov 2026 09:44:39 +0000
ROA not after: Wed 03 Nov 2027 09:49:39 +0000
asID: 200223
IP address blocks: 5.181.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:53:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:ac:67:58:80:01:04:c6:37:75:c0:11:5e:30:27:b3:71:b3:54:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Nov 4 09:44:39 2026 GMT
Not After : Nov 3 09:49:39 2027 GMT
Subject: CN=247AEAFF5A25C061F952004133F1671EF363D6A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b3:df:1c:5b:2d:07:2a:8c:9f:1e:fb:ae:40:
88:53:2b:2e:89:c0:96:88:76:39:b3:21:3d:df:a4:
ab:a1:b6:cd:d2:b8:a3:2f:79:70:be:f0:88:13:c2:
c6:54:a1:7b:1d:44:be:6a:f8:b9:42:96:f0:af:9d:
d9:a8:24:a9:15:f5:3d:b0:41:16:36:fa:d2:d8:0b:
20:50:8a:e7:78:44:e4:1a:86:48:74:ce:07:14:e3:
cf:4e:6b:fc:7e:b5:f0:74:39:3a:6f:b6:b5:a4:7d:
17:ff:71:4b:e9:c0:cf:38:6b:32:aa:0b:8d:70:e1:
ae:a3:5d:77:3b:dd:e2:85:e3:75:fd:40:c3:8d:f0:
49:32:42:b2:23:f7:82:25:1f:e9:7f:83:0c:6a:32:
d8:ee:f2:be:f9:ff:ab:fe:0d:d1:9c:0e:83:bd:30:
ee:44:c7:9e:ba:b5:c2:38:51:62:2d:da:d5:54:25:
b1:54:e2:d4:42:fc:3f:89:7a:aa:87:81:91:2c:ed:
a8:3b:e6:a0:3b:85:db:3d:f2:7a:5c:a1:fa:dc:2e:
1a:9f:fa:77:9c:1e:1f:dd:ba:da:fd:7c:b3:ef:64:
52:0b:40:52:18:b6:da:f4:2e:cf:55:0a:6a:9a:a2:
a5:15:7c:18:5a:f7:1a:73:f1:a5:d2:ab:68:ba:8b:
88:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:7A:EA:FF:5A:25:C0:61:F9:52:00:41:33:F1:67:1E:F3:63:D6:A1
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS200223.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.134.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:69:96:8c:0e:78:35:21:93:89:d6:ac:34:d9:90:31:10:f7:
65:61:46:b8:d1:21:6b:92:99:fb:1c:2e:49:1a:7e:04:f8:85:
b2:a5:63:66:6e:93:d8:67:69:56:22:de:50:9e:c9:7d:40:b7:
6e:53:72:35:dd:fb:c5:97:72:e4:d4:5e:cc:d9:49:80:a0:7e:
af:96:bf:03:de:c0:c9:05:51:ed:71:6b:12:3c:d2:92:d6:dc:
46:64:c6:8c:3f:24:87:ed:84:80:26:e1:d4:6f:11:5e:8d:78:
85:29:2e:b1:5c:1b:5d:12:0f:6c:88:cc:f6:69:78:45:e3:5b:
80:dd:ec:5e:61:29:67:a2:52:20:08:f6:cd:43:a9:13:38:ec:
87:ad:5f:e4:35:0f:a4:9a:51:92:ce:14:1f:ed:7a:e8:5f:a1:
7a:c6:3e:86:0d:7a:db:6c:44:e5:b8:81:b7:28:e9:8a:41:5a:
83:df:b3:31:f3:53:ca:04:0c:d0:31:af:23:ca:09:13:c9:68:
f8:28:c5:e5:e6:76:73:55:81:c8:31:7c:bb:5f:b6:ec:3d:a4:
21:4c:9e:0a:0e:05:86:e1:15:c3:dd:9a:73:4f:6a:76:06:87:
c9:42:a2:9d:03:b7:14:c1:62:fb:85:0e:0d:bb:d6:68:c6:40:
39:80:86:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:47:04 2026 by rpki-client