Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200105.roa
File: AS200105.roa (raw, json)
Hash identifier: JgCtlbyZEV1VaD2gNm/c9cApxjs3HlA4OMabQFabVLA=
Subject key identifier: DC:2C:03:F6:47:FC:99:84:5E:50:F4:6B:F2:5E:A8:E1:33:DB:9E:05
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1137011F61CFABBE95A90DE45533AD2C7408C50A
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200105.roa
Signing time: Tue 22 Sep 2026 08:33:16 +0000
ROA not before: Tue 22 Sep 2026 08:28:16 +0000
ROA not after: Tue 21 Sep 2027 08:33:16 +0000
asID: 200105
IP address blocks: 82.27.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:37:01:1f:61:cf:ab:be:95:a9:0d:e4:55:33:ad:2c:74:08:c5:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 22 08:28:16 2026 GMT
Not After : Sep 21 08:33:16 2027 GMT
Subject: CN=DC2C03F647FC99845E50F46BF25EA8E133DB9E05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:56:64:3f:fa:0d:ad:a6:aa:32:6c:f6:58:83:
f0:9d:9e:e4:19:cc:d3:91:2e:aa:04:0e:81:c0:bf:
bf:48:e2:2d:c5:cf:81:1a:fd:82:ef:e1:d5:7f:43:
bc:ee:80:97:64:b5:24:95:cb:7c:f8:fa:23:9e:6e:
39:a0:12:cf:83:a9:f0:20:37:ab:21:fa:29:c9:b9:
b7:57:25:54:f7:e4:0e:59:54:a7:76:4d:81:ff:d5:
e9:e5:c7:1b:1a:4a:20:86:33:57:ab:a4:e2:92:c0:
64:7d:b6:3c:72:c6:eb:43:84:81:cd:24:bf:96:46:
21:4d:66:c7:b4:b0:4c:a1:f3:68:54:0e:2a:56:01:
aa:0e:d9:2f:7a:8a:e9:01:e0:ae:8a:c4:a3:12:86:
ee:03:8c:5f:ad:4e:c0:69:e4:b7:fd:7d:d9:d7:b5:
6c:6b:9a:ba:40:a8:64:47:37:94:6d:e9:61:d9:59:
21:0c:ac:3d:a4:33:c5:16:26:26:ca:45:3c:b2:09:
85:09:dc:47:2e:99:b0:c2:23:f9:e5:ae:f0:f5:a6:
20:bb:4a:13:82:cc:cc:dd:3a:41:27:80:17:c7:90:
0a:34:3c:e9:5b:4b:2e:8d:e1:4a:95:d0:8e:9d:3a:
c7:77:d8:61:bb:14:d3:08:2b:9b:dc:0f:5d:20:c7:
b2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:2C:03:F6:47:FC:99:84:5E:50:F4:6B:F2:5E:A8:E1:33:DB:9E:05
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200105.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.27.110.0/24
Signature Algorithm: sha256WithRSAEncryption
04:2e:bf:bf:a0:7e:7b:f2:51:92:54:74:ba:ea:84:1b:f3:87:
fa:00:b3:d7:ef:8d:c6:0d:96:7c:2a:fb:77:a4:fb:5a:4d:70:
0b:39:0c:e0:5b:ae:90:c7:65:ac:65:75:ef:62:58:c7:b8:9c:
b7:e9:2f:a5:80:1c:e1:29:12:9d:2f:a1:6a:c1:b0:e7:d1:19:
69:7e:35:a1:32:e6:45:4b:19:a3:8d:ee:aa:8d:eb:82:1a:d2:
25:ea:3a:73:d2:04:3c:9c:ab:69:c3:47:6a:89:3d:15:2e:ec:
36:19:9f:21:04:c5:47:17:0a:e0:4f:ff:a7:2e:7d:4f:dd:9e:
18:5d:c6:63:eb:db:41:dc:c6:f5:47:f5:d4:b7:a1:84:21:0d:
49:bf:40:66:6a:d4:58:84:e2:0e:b6:dd:4d:0f:30:11:da:f2:
2f:93:2f:97:ca:ff:47:05:77:de:aa:67:cb:91:5b:92:55:81:
bb:fa:79:75:73:8d:2c:32:8f:01:1e:45:5a:e0:23:a1:f9:9f:
61:15:66:03:a6:15:2f:04:01:38:0e:48:7c:3d:b3:71:94:87:
49:e4:a7:77:6e:92:12:20:09:89:06:d1:d0:45:76:80:ef:57:
df:91:34:f6:36:bb:07:0e:58:05:ba:e7:6a:d1:3c:ed:c2:1d:
fe:82:fa:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:21:15 2026 by rpki-client