Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200135.roa
File: AS200135.roa (raw, json)
Hash identifier: wHPq+1DL+x4SEO36Dej/PklEPKFewSfnI6GhWJ/ddeA=
Subject key identifier: D0:21:80:63:1C:E8:6E:9C:54:D2:A3:9C:85:15:56:B0:79:63:CA:E9
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0A1E4EDE7FBC7284078B44838D0F76B44DCBC3FE
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200135.roa
Signing time: Tue 17 Mar 2026 13:07:34 +0000
ROA not before: Tue 17 Mar 2026 13:02:34 +0000
ROA not after: Tue 16 Mar 2027 13:07:34 +0000
asID: 200135
IP address blocks: 82.24.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:1e:4e:de:7f:bc:72:84:07:8b:44:83:8d:0f:76:b4:4d:cb:c3:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 17 13:02:34 2026 GMT
Not After : Mar 16 13:07:34 2027 GMT
Subject: CN=D02180631CE86E9C54D2A39C851556B07963CAE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c0:e6:aa:85:55:b4:09:3e:f8:44:7c:44:d1:
41:87:1f:5b:1d:b5:3e:23:55:fe:17:5e:6a:20:24:
95:5b:e9:91:72:58:55:a0:6d:65:83:8f:d5:7d:a9:
cc:88:04:ac:a1:b7:ff:7e:d7:89:e2:53:ce:82:1a:
27:8a:fc:cc:d5:b0:be:4a:59:67:18:f2:1d:5b:be:
53:52:ca:34:26:77:79:7d:3b:41:3f:d5:04:44:e6:
b8:80:21:3a:84:17:13:17:cb:8f:5e:b6:ba:d8:2c:
67:ad:24:c7:3c:da:84:c2:18:bf:68:c7:06:fd:9c:
65:0e:08:02:8f:ac:21:4f:5f:22:44:14:d8:f9:22:
bb:e5:f0:3b:b2:80:b7:7d:85:4d:c4:0b:15:21:24:
53:33:31:77:10:28:6f:6b:f1:6c:88:ef:8b:ff:aa:
13:6c:2e:93:f8:a5:af:42:e8:72:81:cb:ce:6e:57:
57:32:26:9d:38:20:bc:45:0e:a6:0a:0d:6a:d3:b2:
dd:26:e4:07:d0:d3:32:0a:32:e6:68:66:f0:cf:21:
89:82:2e:24:07:e6:87:11:2b:37:fd:f9:6f:65:e0:
6d:42:ee:fb:6d:bc:fc:d0:64:b4:96:43:30:cf:7f:
a9:a3:c8:13:96:e1:d8:54:bd:39:9d:e1:6f:75:38:
6b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:21:80:63:1C:E8:6E:9C:54:D2:A3:9C:85:15:56:B0:79:63:CA:E9
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.24.79.0/24
Signature Algorithm: sha256WithRSAEncryption
99:33:ea:56:92:7e:8a:f4:73:3b:62:a6:06:f7:7e:a6:4c:a9:
c9:8f:77:4c:05:60:80:6b:19:11:d7:b2:16:4f:fd:09:4a:a8:
c2:39:71:8d:5d:40:d4:ab:99:f6:2c:7a:b5:1b:31:65:4f:ab:
97:45:ff:26:37:3f:9c:67:c8:b2:67:46:b4:d1:ff:71:2f:14:
56:c2:63:3a:0c:f0:c5:31:b1:b3:b9:7f:12:2e:01:c7:a9:47:
19:cd:c3:c9:34:e1:15:e0:ed:37:0c:3d:90:55:a8:6b:ae:f5:
5c:f5:49:f1:db:6f:73:14:c7:30:83:dc:58:14:e4:cb:af:e9:
03:ab:30:77:3c:fe:16:6f:77:6d:29:ba:b0:35:49:4d:c5:b7:
6c:42:eb:98:d6:3e:90:60:75:e8:be:33:93:63:12:29:cb:14:
e8:21:fa:33:c9:29:62:05:d6:b0:35:f9:e4:55:80:7f:45:18:
90:98:c6:5c:3b:b3:ca:4e:49:01:f3:49:78:ee:8c:34:ae:77:
62:28:47:2c:1b:79:19:eb:4f:07:61:66:e0:db:a6:bf:d7:16:
61:e5:0d:8e:15:69:2c:87:4f:2d:c1:44:e1:7c:72:59:42:fe:
0d:61:c8:2b:f2:9a:3e:bc:a2:40:f3:17:6b:df:79:5a:c0:d3:
e9:a1:c6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:34:42 2026 by rpki-client