Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS200193.roa
File: AS200193.roa (raw, json)
Hash identifier: IO6/8QT7FhbUIbLTQLo4f63IaNK7g6CQHAi1Hw7z+Z4=
Subject key identifier: 84:1B:A4:C5:F5:F0:3E:FF:52:36:D2:85:55:CC:BD:C3:7A:22:85:C3
Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial: 5F4F3BC116E4EA3A06633F76DE8499B64D4A61EC
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS200193.roa
Signing time: Wed 29 Apr 2026 09:58:49 +0000
ROA not before: Wed 29 Apr 2026 09:53:49 +0000
ROA not after: Wed 28 Apr 2027 09:58:49 +0000
asID: 200193
IP address blocks: 5.133.100.0/24 maxlen: 24
193.111.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:4f:3b:c1:16:e4:ea:3a:06:63:3f:76:de:84:99:b6:4d:4a:61:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Validity
Not Before: Apr 29 09:53:49 2026 GMT
Not After : Apr 28 09:58:49 2027 GMT
Subject: CN=841BA4C5F5F03EFF5236D28555CCBDC37A2285C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:87:bc:5c:0f:5f:52:ac:4d:e9:05:13:04:ea:
f8:a3:73:b3:e9:76:87:4a:85:b0:d0:a0:d5:dd:80:
6a:e2:dc:14:cf:50:d7:b0:35:23:80:55:59:54:6e:
1a:fd:d0:41:ab:73:92:ca:85:43:84:ce:17:8d:e8:
9c:52:a4:18:6e:61:1d:f3:4e:37:f0:ed:df:d9:62:
17:a4:d6:c9:38:22:ee:c1:7f:96:52:42:d4:56:1a:
f9:f6:fd:b2:f1:da:7d:82:71:aa:19:a3:d6:e8:b9:
b6:eb:70:6b:36:7b:92:03:f8:ba:f9:55:9a:48:2c:
88:3a:ce:96:85:77:81:70:0f:18:f8:25:e5:9e:d0:
59:fd:f6:be:cc:f4:f8:3f:aa:ef:89:62:85:bd:2c:
ee:36:a5:94:43:98:75:61:6f:ce:ce:8b:a8:bf:26:
14:09:1e:00:5f:22:b6:72:19:dd:4c:cc:15:6c:d5:
48:45:32:b9:e2:24:b4:8f:dc:84:02:c2:62:6a:9a:
81:fe:81:9a:e9:37:a8:d4:bd:0c:90:44:a1:d0:9b:
f3:d5:c4:4d:4a:fc:19:5f:13:fe:1f:f6:f8:25:21:
f3:ee:0c:a4:88:29:16:4b:b9:e8:3f:6a:84:f1:47:
f9:40:a5:a6:08:9a:18:29:38:a4:c0:cc:17:37:26:
d9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:1B:A4:C5:F5:F0:3E:FF:52:36:D2:85:55:CC:BD:C3:7A:22:85:C3
X509v3 Authority Key Identifier:
keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS200193.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.100.0/24
193.111.76.0/24
Signature Algorithm: sha256WithRSAEncryption
07:aa:8e:11:f4:3a:04:48:80:ae:ad:d5:31:d5:80:1e:32:4e:
84:eb:0f:e0:63:a1:d4:cc:2a:9a:9d:da:03:79:c4:b5:ea:2d:
92:6e:c1:36:b9:5b:f5:ab:ba:0d:f6:c4:37:1c:b1:4f:92:e7:
94:ff:77:2c:19:03:51:1f:d2:6b:29:1d:ee:44:bc:83:af:18:
c4:30:f1:ce:67:59:b9:95:c0:3a:75:b0:af:e3:66:d9:86:cf:
53:02:67:2a:2a:b6:f0:c9:44:9c:ce:e3:cb:0a:05:2e:16:24:
c2:99:0f:81:c6:1c:04:76:f6:da:9f:64:54:29:ff:c3:95:45:
98:3c:92:f4:1e:16:c0:e6:2c:06:ad:d6:ec:b7:1d:7c:c3:de:
60:cd:b5:93:7e:69:6d:2e:8f:71:db:38:41:fa:cc:63:ee:37:
a8:a1:fe:f1:34:04:65:1b:78:2a:99:98:62:ac:09:2e:99:37:
59:d7:e8:fd:d5:a5:b6:90:4c:b3:d8:0c:23:16:08:23:37:55:
37:8e:65:9a:44:ec:0a:44:46:85:f7:27:d7:6c:9f:47:7b:3e:
48:b6:e9:03:47:34:a5:e7:46:d8:e6:cc:bb:a7:87:60:6e:cf:
c5:13:c5:70:a2:bd:7d:06:a2:f7:32:80:1f:8c:9d:dd:ef:3c:
a1:5c:23:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:31:41 2026 by rpki-client