Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200282.roa
File: AS200282.roa (raw, json)
Hash identifier: ov147HNCjY0AKIqgLozrg9mpLFelan16Jkcc2hf/qys=
Subject key identifier: 2C:42:F0:8C:EE:F5:83:00:61:5E:E7:0D:2A:19:92:C1:A3:87:30:5F
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 2734A70DBF58C524D30894FBFC898EB59B8432A5
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200282.roa
Signing time: Fri 13 Mar 2026 16:29:55 +0000
ROA not before: Fri 13 Mar 2026 16:24:55 +0000
ROA not after: Fri 12 Mar 2027 16:29:55 +0000
asID: 200282
IP address blocks: 2a13:9500:14b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:34:a7:0d:bf:58:c5:24:d3:08:94:fb:fc:89:8e:b5:9b:84:32:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 13 16:24:55 2026 GMT
Not After : Mar 12 16:29:55 2027 GMT
Subject: CN=2C42F08CEEF58300615EE70D2A1992C1A387305F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c1:56:ba:e0:93:07:8d:06:f7:45:18:b9:3d:
d5:8c:b3:62:86:4a:e2:45:79:8f:5e:72:bf:a2:b8:
d7:68:ec:d6:41:53:90:a4:cf:5e:91:80:bc:42:4e:
fb:ae:b5:49:c4:ec:92:35:68:8c:10:9a:d4:c9:ce:
c6:5f:81:d7:09:ed:b5:2d:63:34:53:14:19:51:3c:
f8:46:18:c7:33:d8:0b:b7:54:e6:84:09:7f:fe:a9:
d6:2c:ee:ce:9c:93:11:ae:1d:8a:56:78:9f:d0:fd:
40:fd:a8:e8:18:52:59:21:49:3d:57:f7:65:dd:50:
32:2e:b4:14:e2:64:1a:2a:69:22:f7:8b:bf:d2:9a:
1d:6b:65:cf:13:aa:f9:86:cc:e7:24:b0:d6:99:7e:
e9:ac:8d:90:ae:01:d4:aa:50:5b:63:b1:b1:3e:7d:
4f:b7:6f:f5:e8:0f:48:06:62:19:8d:84:4b:c8:24:
cc:6c:b4:d2:cc:8a:34:cf:be:60:bd:d0:7f:5f:65:
84:25:d8:0b:9c:9f:7b:a5:dc:77:5b:df:e2:41:d7:
7d:a7:5b:dd:75:29:5d:66:c6:7a:be:76:42:2c:dc:
cd:5e:91:63:92:8d:2d:fa:0b:03:ae:ff:5e:67:96:
34:50:9c:58:86:7e:11:6c:19:cf:c5:fe:e8:9d:37:
02:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:42:F0:8C:EE:F5:83:00:61:5E:E7:0D:2A:19:92:C1:A3:87:30:5F
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200282.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:14b::/48
Signature Algorithm: sha256WithRSAEncryption
52:9a:79:74:dc:4b:16:31:0d:f3:3c:cb:df:00:c0:97:a2:3a:
dc:a4:dd:21:fb:b6:1c:8c:63:c6:3a:92:db:57:88:a8:28:8e:
27:12:08:d5:ff:93:31:e3:db:9d:75:69:90:76:c1:5b:39:65:
06:60:ab:35:85:24:13:09:1a:b8:10:f6:0a:03:20:8f:72:a2:
1d:8a:55:81:48:81:66:92:41:b4:9d:ed:14:c0:de:0d:9d:79:
ae:2a:03:f3:58:ce:e5:62:09:3b:97:82:c2:29:86:d3:1a:0d:
77:4e:68:cb:25:aa:36:ed:b6:ef:d4:28:31:06:fa:c2:15:25:
d5:65:f7:e4:e2:08:7b:56:e7:f1:2c:23:c2:1d:8c:3e:4d:ae:
04:73:b3:ef:2b:d9:4e:74:89:b0:ea:98:a8:53:e0:39:eb:12:
e1:31:fe:54:65:64:08:69:b9:a3:83:6c:8a:46:30:6e:15:2e:
df:c8:2c:15:e3:cb:a0:8e:89:51:32:d0:a2:05:53:eb:ce:ab:
3c:8b:cf:dc:1a:a2:95:c0:d7:c9:fc:56:bc:81:7d:2c:ed:1f:
cf:4b:26:d4:ec:2a:b4:b6:83:2f:69:1a:f6:1f:62:c5:d8:ad:
ae:40:fc:31:06:d0:65:06:e9:73:e8:63:cd:78:65:87:d0:39:
95:83:c8:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:34:44 2026 by rpki-client