Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200105.roa
File: AS200105.roa (raw, json)
Hash identifier: PBj6NmaWgkPzBgAi1roHw20ZzhRfdT3un2O1FPAdavI=
Subject key identifier: 50:48:5B:F7:F1:28:7A:6D:AD:52:3E:78:6B:41:5F:85:A1:0D:0A:09
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0A178C1A829492511B82A3E3319F811056EE0665
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200105.roa
Signing time: Wed 29 Apr 2026 18:36:25 +0000
ROA not before: Wed 29 Apr 2026 18:31:25 +0000
ROA not after: Wed 28 Apr 2027 18:36:25 +0000
asID: 200105
IP address blocks: 84.75.130.0/24 maxlen: 24
84.75.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:17:8c:1a:82:94:92:51:1b:82:a3:e3:31:9f:81:10:56:ee:06:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 29 18:31:25 2026 GMT
Not After : Apr 28 18:36:25 2027 GMT
Subject: CN=50485BF7F1287A6DAD523E786B415F85A10D0A09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1e:89:14:6b:72:c4:c2:9a:c1:69:98:35:08:
59:fc:28:e0:1a:a5:7a:ff:fd:a0:10:9d:91:d9:b0:
6d:63:63:32:b9:89:bf:87:0f:f2:b7:1e:ac:16:bb:
28:8d:ee:8c:95:9d:cc:7b:e9:83:45:8a:69:5c:a8:
4c:04:2d:5e:56:c1:7e:da:cc:ff:01:31:d5:13:19:
17:3b:67:3e:b1:ed:9b:a3:2d:6a:84:28:29:85:9b:
62:a9:29:c8:81:76:a5:69:b0:b6:93:ec:9a:de:ac:
47:5c:de:1d:5f:c5:13:59:df:34:96:5b:9b:59:ff:
3e:ad:a4:0a:1c:21:b7:38:a9:8c:0d:22:a6:55:c3:
60:db:1b:ee:0a:4e:73:06:f5:2b:30:26:16:f6:c6:
7e:88:db:48:e4:f4:7c:cc:dd:b6:4f:ce:e3:e0:70:
7d:f2:07:1f:a8:81:66:a2:a0:b8:06:63:da:fc:0b:
98:e5:fc:24:12:86:a2:fe:de:6a:d8:83:99:37:31:
c2:b9:85:e2:29:7e:17:d0:9c:a7:32:2d:75:3f:b6:
2e:66:1d:f7:48:03:fe:29:df:84:b8:bf:d5:e4:6d:
34:d7:7d:11:81:49:cc:83:25:07:bb:db:8b:e5:78:
79:6c:14:be:7c:27:48:52:96:d6:d9:1a:a8:38:b7:
af:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:48:5B:F7:F1:28:7A:6D:AD:52:3E:78:6B:41:5F:85:A1:0D:0A:09
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200105.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.75.130.0/24
84.75.135.0/24
Signature Algorithm: sha256WithRSAEncryption
25:19:f9:b4:24:21:74:c5:41:e0:4d:1f:c3:ba:b4:d9:31:0e:
84:6a:03:b5:ba:1e:55:e3:bc:63:d2:6c:be:94:69:12:76:c0:
f7:74:3c:3c:35:61:29:6e:69:79:4c:b5:e9:45:cd:c3:14:ae:
95:e5:ff:f0:28:8f:52:87:a0:1c:e1:0e:c5:81:d1:fb:50:50:
5e:fa:20:6c:dc:51:3f:d4:a3:83:14:b8:20:2c:47:7d:12:bb:
a1:32:6e:9e:c7:8e:d0:d3:aa:8d:f0:14:6c:58:7d:1c:0d:6c:
b8:8f:c3:13:ab:fa:e4:1c:a4:5c:a8:79:02:38:53:fd:21:a7:
10:e5:6e:70:a6:c1:dd:dd:26:3c:3c:0a:75:62:cd:d9:86:0f:
a0:80:c6:30:1f:e6:ee:e5:5f:3d:f0:af:bf:7f:aa:05:a2:a8:
98:79:9d:30:6b:7c:ec:6c:20:6e:0c:ed:66:3e:3b:bb:a1:66:
d3:71:6e:05:62:fe:cf:22:44:96:8c:56:ce:d8:fe:32:6c:c1:
ee:88:66:8b:9c:e6:84:15:d5:f5:3b:37:95:07:6b:43:4b:63:
a9:50:0e:eb:78:ce:ec:61:50:76:40:63:1c:78:32:97:40:04:
4c:a0:80:06:be:35:df:30:8a:87:1f:9d:91:2e:05:db:bf:30:
6a:ed:83:8a
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUCheMGoKUklEbgqPjMZ+BEFbuBmUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA0MjkxODMxMjVaFw0yNzA0MjgxODM2MjVaMDMxMTAvBgNV
BAMTKDUwNDg1QkY3RjEyODdBNkRBRDUyM0U3ODZCNDE1Rjg1QTEwRDBBMDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6HokUa3LEwprBaZg1CFn8KOAa
pXr//aAQnZHZsG1jYzK5ib+HD/K3HqwWuyiN7oyVncx76YNFimlcqEwELV5WwX7a
zP8BMdUTGRc7Zz6x7ZujLWqEKCmFm2KpKciBdqVpsLaT7JrerEdc3h1fxRNZ3zSW
W5tZ/z6tpAocIbc4qYwNIqZVw2DbG+4KTnMG9SswJhb2xn6I20jk9HzM3bZPzuPg
cH3yBx+ogWaioLgGY9r8C5jl/CQShqL+3mrYg5k3McK5heIpfhfQnKcyLXU/ti5m
HfdIA/4p34S4v9XkbTTXfRGBScyDJQe724vleHlsFL58J0hSltbZGqg4t69DAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUUEhb9/Eoem2tUj54a0FfhaENCgkwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjAwMTA1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVEuC
AwQAVEuHMA0GCSqGSIb3DQEBCwUAA4IBAQAlGfm0JCF0xUHgTR/DurTZMQ6EagO1
uh5V47xj0my+lGkSdsD3dDw8NWEpbml5TLXpRc3DFK6V5f/wKI9Sh6Ac4Q7FgdH7
UFBe+iBs3FE/1KODFLggLEd9EruhMm6ex47Q06qN8BRsWH0cDWy4j8MTq/rkHKRc
qHkCOFP9IacQ5W5wpsHd3SY8PAp1Ys3Zhg+ggMYwH+bu5V898K+/f6oFoqiYeZ0w
a3zsbCBuDO1mPju7oWbTcW4FYv7PIkSWjFbO2P4ybMHuiGaLnOaEFdX1OzeVB2tD
S2OpUA7reM7sYVB2QGMceDKXQARMoIAGvjXfMIqHH52RLgXbvzBq7YOK
-----END CERTIFICATE-----
Generated at Wed May 13 01:12:00 2026 by rpki-client