Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200651.roa
File: AS200651.roa (raw, json)
Hash identifier: VSud0zufuaqKTMuEpl3438Yg9oo8SPHr9XCbW/W/ue4=
Subject key identifier: 73:8B:C1:D6:E9:8B:BD:1E:67:6B:AF:8A:7D:09:BE:8D:5D:CF:43:ED
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 71DC353B7B16DB62055C4DD1F3522A4E044B4D5A
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200651.roa
Signing time: Mon 11 May 2026 11:57:10 +0000
ROA not before: Mon 11 May 2026 11:52:10 +0000
ROA not after: Mon 10 May 2027 11:57:10 +0000
asID: 200651
IP address blocks: 178.83.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:dc:35:3b:7b:16:db:62:05:5c:4d:d1:f3:52:2a:4e:04:4b:4d:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 11 11:52:10 2026 GMT
Not After : May 10 11:57:10 2027 GMT
Subject: CN=738BC1D6E98BBD1E676BAF8A7D09BE8D5DCF43ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d0:a4:ab:59:bf:62:91:23:e0:50:7a:0c:0e:
e8:c5:ab:0f:e9:40:3e:f5:66:05:cc:2a:cc:f5:ca:
f9:d0:09:21:d3:fd:36:a2:33:31:d4:51:b8:04:9f:
fb:c4:32:8d:59:5b:0b:4e:ef:17:9b:02:60:7c:cc:
ae:e0:33:93:d2:6c:1c:dc:ed:b2:93:e2:c1:15:79:
3e:6d:fa:21:0e:10:97:3b:8d:82:c4:e5:ab:4c:12:
42:c1:b3:46:6e:8e:f9:92:d8:0b:ac:d7:d2:ac:dc:
d3:42:2e:5e:9c:b6:e1:d6:fc:52:b4:6a:e8:b4:f3:
62:71:4a:af:2d:77:15:85:01:6c:39:ce:7d:96:16:
24:5f:25:78:45:3b:c5:8d:89:6c:c5:6a:ed:da:66:
32:b5:28:6b:12:3d:c8:fe:83:a7:82:48:ac:18:93:
66:30:ab:04:11:dd:95:90:53:5f:8e:14:b9:db:24:
93:c1:93:1c:55:c2:63:4b:2c:9a:85:4c:d8:db:9f:
0e:ec:6c:8e:f3:37:98:35:26:61:c5:1b:ad:b4:46:
a9:cf:41:32:21:62:fe:fc:46:d1:59:7c:38:2f:a2:
92:eb:ff:65:a0:42:9c:69:ed:b8:48:db:b0:39:16:
69:27:02:1e:72:90:17:ea:3a:91:db:74:0c:c6:0c:
25:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8B:C1:D6:E9:8B:BD:1E:67:6B:AF:8A:7D:09:BE:8D:5D:CF:43:ED
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200651.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.99.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:0d:bf:78:90:e5:9a:1f:d4:6f:e1:6d:68:e9:90:0c:0a:80:
6c:d4:f9:90:70:4a:c6:54:25:4b:53:c5:13:d6:24:8c:fd:64:
ff:c1:a4:d6:6d:17:4f:b7:80:e7:50:80:e8:10:eb:66:c0:ec:
eb:74:3d:fa:aa:f0:26:61:6c:7f:0c:a4:b4:5c:aa:27:da:26:
0f:dd:d1:45:2d:d0:8f:27:52:40:fa:ac:00:52:3c:36:0f:9d:
80:8d:e1:af:25:9c:96:d5:e1:db:67:26:72:57:aa:9c:82:a9:
f5:ab:69:6a:00:61:22:62:6a:fb:1f:74:63:8c:59:89:39:73:
39:da:96:6f:5a:f2:bf:96:8f:1d:7d:27:ef:02:a3:cf:bd:b4:
5c:bb:19:40:ba:e1:19:15:5a:cd:f1:34:55:26:70:af:45:9a:
10:cf:02:82:d3:34:4f:01:d7:9f:69:c9:91:8f:4c:6e:7e:b2:
32:3b:9e:12:23:17:89:99:53:fa:0c:1a:e5:06:84:77:90:4a:
04:ca:7f:1a:ad:7e:99:2e:42:d3:3e:47:34:23:b3:6b:a0:59:
c1:f9:6c:1a:e6:9d:fa:f2:63:43:81:9f:1c:40:04:99:12:e9:
9d:e1:66:0e:c5:05:6f:b4:3a:51:d6:a8:9a:b6:cd:9e:16:6e:
80:d7:76:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:15:31 2026 by rpki-client