Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200841.roa
File: AS200841.roa (raw, json)
Hash identifier: +hbEg3rhZ05V94JTupyejH0ngk74dFV1UNzk2mcLbZY=
Subject key identifier: 11:45:EF:FA:5D:1A:30:FA:BF:F3:87:C1:5F:C1:F3:46:52:8B:6D:20
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 5A5B194A53DEACA9B11EEC2482367143E1E6BEBC
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200841.roa
Signing time: Sat 28 Mar 2026 09:09:56 +0000
ROA not before: Sat 28 Mar 2026 09:04:56 +0000
ROA not after: Sat 27 Mar 2027 09:09:56 +0000
asID: 200841
IP address blocks: 178.83.7.0/24 maxlen: 24
178.83.8.0/24 maxlen: 24
178.83.20.0/24 maxlen: 24
178.83.21.0/24 maxlen: 24
178.83.124.0/24 maxlen: 24
178.83.125.0/24 maxlen: 24
178.83.126.0/24 maxlen: 24
178.83.127.0/24 maxlen: 24
178.83.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:5b:19:4a:53:de:ac:a9:b1:1e:ec:24:82:36:71:43:e1:e6:be:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 28 09:04:56 2026 GMT
Not After : Mar 27 09:09:56 2027 GMT
Subject: CN=1145EFFA5D1A30FABFF387C15FC1F346528B6D20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:72:26:4c:06:55:d4:a2:75:b9:3b:43:dc:cb:
45:af:64:92:cc:6d:67:dd:88:86:47:3f:67:51:94:
94:f1:2d:34:25:be:58:1a:9d:fb:a4:90:d4:6c:78:
3c:cb:44:53:d8:f6:d7:44:25:78:d3:30:d2:70:16:
56:04:f1:17:e8:59:de:c6:66:87:02:18:12:ba:82:
d0:51:0b:22:48:4e:9f:96:8d:44:65:bd:d2:8c:29:
ae:92:f7:fa:32:59:5f:2b:41:ae:19:31:63:ce:12:
c4:a1:3b:28:10:b2:d1:dc:0b:93:2b:de:34:24:aa:
7c:8e:be:70:45:80:f1:07:c0:6c:7c:f1:51:e6:ad:
4f:79:c3:f3:6e:d9:73:3c:4d:de:cc:19:db:c0:9f:
39:aa:9e:c0:cd:62:a1:d5:80:97:dd:d8:7d:0a:dc:
b1:9a:f1:5c:52:26:5c:ff:c2:b5:63:6a:24:8c:1b:
f4:98:07:6a:4b:d0:19:a2:a7:f4:b4:2c:de:e7:70:
6d:ff:a9:2d:e4:24:ed:1e:05:f8:88:dc:40:cc:a5:
52:be:96:1b:15:9c:b0:dc:52:f6:8e:4e:94:a6:34:
bd:de:1b:f2:58:8e:b0:67:51:f6:70:b5:bb:f8:f6:
16:4f:73:ac:90:31:12:78:6b:e9:dd:93:ea:3a:fa:
b7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:45:EF:FA:5D:1A:30:FA:BF:F3:87:C1:5F:C1:F3:46:52:8B:6D:20
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200841.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.7.0-178.83.8.255
178.83.20.0/23
178.83.124.0/22
178.83.244.0/24
Signature Algorithm: sha256WithRSAEncryption
25:d5:a9:91:c7:1b:e4:39:b7:3b:63:de:83:6d:74:d4:c1:25:
5e:38:57:d4:3e:86:ea:41:64:9e:42:b1:29:62:f1:89:19:10:
9f:51:45:f3:cd:19:c8:6a:cb:a8:7b:93:d0:e3:01:ba:81:bc:
47:e0:88:88:ec:2c:37:5e:4a:a4:53:e0:07:09:fc:5d:36:6a:
7f:9f:99:e8:02:b8:38:6f:74:a7:b2:2d:80:e7:8a:41:d5:74:
ff:98:0a:d6:b9:06:7f:bc:09:aa:7b:1d:c1:5b:71:66:77:14:
1f:c6:00:b9:0a:d8:20:b1:35:3d:fa:bd:39:ac:72:ad:25:f4:
32:1b:b7:f0:c1:d2:86:78:98:f0:27:a1:7d:d8:8f:17:95:40:
f4:5a:f5:d2:c3:ac:4e:60:ab:f5:c6:20:09:28:c6:87:97:10:
29:95:0c:c1:db:68:1d:da:e1:b2:48:ce:46:6b:9f:4e:2d:a4:
2c:fb:b5:2b:39:c0:f5:c1:73:7a:3c:bf:71:67:1a:b9:f8:07:
51:68:27:e5:18:c8:2f:1a:8e:ae:74:8e:5e:f5:06:6b:af:be:
97:33:4d:25:36:8d:e7:f3:7b:5e:e5:50:d0:a1:bb:65:04:81:
42:b8:f6:0c:44:4b:b4:41:7b:0a:46:44:58:73:83:47:2f:87:
0c:11:19:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 20:21:59 2026 by rpki-client