Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS200239.roa
File: AS200239.roa (raw, json)
Hash identifier: CP/8BsH/76bSR+3p6QiLZdZEOnPXSbyF6RfZky/AZu4=
Subject key identifier: 02:22:9F:01:1F:7B:28:C3:C7:54:8A:DF:82:63:52:DC:B3:FC:7A:E5
Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial: 5E3C43A67068285EC8D77BF125CAD18AA3BA18A0
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS200239.roa
Signing time: Thu 16 Jul 2026 12:57:16 +0000
ROA not before: Thu 16 Jul 2026 12:52:16 +0000
ROA not after: Thu 15 Jul 2027 12:57:16 +0000
asID: 200239
IP address blocks: 5.133.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:3c:43:a6:70:68:28:5e:c8:d7:7b:f1:25:ca:d1:8a:a3:ba:18:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Validity
Not Before: Jul 16 12:52:16 2026 GMT
Not After : Jul 15 12:57:16 2027 GMT
Subject: CN=02229F011F7B28C3C7548ADF826352DCB3FC7AE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6f:f9:e3:b7:ad:de:ea:6c:51:68:be:4e:35:
88:54:31:fc:46:b1:7e:a0:c9:4c:ee:8e:0f:90:3c:
f1:6b:ee:fe:f4:27:72:df:b0:7d:a9:27:0d:f5:74:
cf:a9:75:04:d4:98:1e:3a:ea:07:7f:13:c5:be:a4:
17:d1:c3:38:2e:79:b8:5a:16:ba:f6:73:f4:a1:7b:
70:b1:7f:59:f6:96:3d:0f:17:2a:bb:d8:f6:65:de:
6c:76:8d:f7:3d:6d:e8:fb:15:a6:0d:88:51:84:d7:
d5:6d:d2:a4:33:45:a0:63:61:30:8c:4b:e6:f8:fc:
26:3c:be:7c:48:93:09:80:ba:cb:f8:43:9d:7a:2b:
ea:0b:80:e2:41:be:9d:47:a8:6d:06:cc:4f:8c:7c:
2e:f9:e1:df:85:05:41:a0:a7:e0:93:b7:4e:8c:68:
49:3d:05:7f:63:e3:a7:bf:91:10:3d:87:95:69:3a:
07:0e:5c:dc:cc:98:30:fd:7b:15:a4:0c:ee:30:48:
06:a2:fd:3f:ac:1a:c5:89:fd:1d:d6:db:bc:e7:de:
13:8e:6e:e9:44:a6:a3:0b:8a:0e:d3:d7:48:b6:b2:
5a:b0:4b:a5:03:13:eb:0c:7e:7d:3c:46:1c:b6:dc:
a9:99:a8:4d:76:62:7f:e0:27:25:2a:30:ac:ce:1b:
e1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:22:9F:01:1F:7B:28:C3:C7:54:8A:DF:82:63:52:DC:B3:FC:7A:E5
X509v3 Authority Key Identifier:
keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS200239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.101.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:92:b7:85:c9:4d:d9:ed:2b:b0:62:42:00:b9:06:3b:6a:a0:
09:df:6d:c7:8c:42:d9:ed:5b:1b:c0:6e:b5:63:b5:ad:c0:8b:
88:8f:d7:03:3e:0c:9f:17:a5:18:56:2a:68:f6:6c:2d:bf:86:
11:06:1f:aa:b7:e3:7c:80:dd:5a:d7:03:fc:37:00:d4:d7:01:
4f:16:29:91:83:13:c5:b5:d0:3e:fc:6b:ac:b2:f5:51:6d:b5:
ca:10:71:86:5b:25:26:5a:35:77:28:6e:d4:f3:11:5e:2a:69:
d8:be:5b:21:f1:0c:18:9d:8d:d6:28:57:39:48:71:25:97:b5:
a0:29:39:d8:de:73:0e:08:e9:e5:48:fe:dd:0d:99:d3:4b:d8:
5d:c3:bf:54:06:ba:48:be:9c:76:f0:30:8d:3c:62:60:7e:44:
dd:e1:9a:20:a5:b2:1f:de:c2:5b:8f:52:1c:c7:24:c1:86:b4:
89:73:af:a2:a0:6a:3a:f3:08:b5:83:2b:36:2c:64:52:ba:b3:
32:91:f8:f9:f3:68:f6:13:f2:42:42:0d:f4:85:d7:e1:76:6a:
a0:96:99:78:13:9c:c9:3b:8a:67:57:83:b5:ef:ad:21:f4:27:
7f:b3:9f:03:45:68:4e:d5:bd:7d:1c:13:d9:71:69:11:3f:fd:
6e:6c:64:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:01:27 2026 by rpki-client