Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS200558.roa
File: AS200558.roa (raw, json)
Hash identifier: FwbJwAFoeTJPsXIsIUnxulWK4qPaDquA+Jk8kNsa7zQ=
Subject key identifier: E7:9E:32:40:89:E0:0E:A3:56:70:AD:74:BD:96:95:7A:64:57:1E:EC
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 6A3D29D4944128D950C3DF66A13B84FC44856D31
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS200558.roa
Signing time: Mon 23 Mar 2026 00:37:24 +0000
ROA not before: Mon 23 Mar 2026 00:32:24 +0000
ROA not after: Mon 22 Mar 2027 00:37:24 +0000
asID: 200558
IP address blocks: 2a0f:85c1:e42::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:3d:29:d4:94:41:28:d9:50:c3:df:66:a1:3b:84:fc:44:85:6d:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Mar 23 00:32:24 2026 GMT
Not After : Mar 22 00:37:24 2027 GMT
Subject: CN=E79E324089E00EA35670AD74BD96957A64571EEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:46:44:61:1c:4f:19:e8:dd:09:a8:c3:2c:00:
b2:ea:11:ff:c3:64:64:dd:30:e5:92:2e:5d:80:e2:
67:22:b5:ae:a2:48:cf:be:50:cd:a2:87:91:39:9d:
61:9f:51:8e:89:59:4c:ab:86:0e:0d:e7:42:19:5e:
a6:88:4a:5a:ca:19:f1:c3:d3:35:c5:5a:93:8e:92:
2b:ed:1e:f2:a7:db:5e:42:5c:96:81:4f:a4:78:68:
35:bd:f9:88:c7:60:d0:81:33:52:ec:11:91:77:13:
ea:23:98:41:2a:c9:a4:70:fc:4c:59:38:df:67:5b:
7d:fa:eb:78:c7:9b:82:d0:0d:a6:b5:40:ba:b6:8a:
22:0f:8d:db:43:39:7c:db:5b:40:45:81:0b:b6:c6:
f4:5e:6e:ea:5d:cc:6f:ff:3a:eb:bf:25:dc:02:bd:
d0:96:c8:45:d6:ce:2d:b5:55:b0:73:ca:36:5f:5e:
ee:1a:26:25:dd:c2:5a:5b:21:14:13:30:0d:55:13:
32:c5:b0:9e:66:0e:03:8e:b5:1a:75:1a:73:b1:58:
20:10:d2:32:72:8f:2e:5c:ea:21:ed:9e:61:b3:dd:
1a:cd:ea:f8:8f:56:bf:c6:e6:b7:0c:e8:0d:c4:f7:
f1:15:63:89:5a:a3:dd:77:97:30:7b:82:58:96:8c:
e7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:9E:32:40:89:E0:0E:A3:56:70:AD:74:BD:96:95:7A:64:57:1E:EC
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS200558.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:e42::/48
Signature Algorithm: sha256WithRSAEncryption
6f:75:a0:82:1a:bd:33:48:6a:05:8b:f4:07:be:f2:d5:93:b8:
c0:b8:4c:4e:bf:c4:07:d5:ff:2b:97:f2:b1:cb:2a:37:66:16:
c2:c2:95:82:0a:2c:70:d0:37:94:cd:b3:e5:af:2b:46:4c:89:
6b:91:97:5e:00:1a:a3:6e:7a:8f:40:dc:94:d9:e3:6e:52:e2:
0c:ff:40:4d:18:d3:7e:7c:8f:46:ac:da:52:c4:ed:dd:59:b5:
b3:dc:8f:c2:e4:67:b1:01:c9:aa:71:ba:42:53:80:79:ab:02:
15:b7:e3:d1:b1:89:31:92:d5:51:9f:90:b0:73:ad:2b:91:30:
30:89:76:ad:4b:a8:7a:7d:88:01:6a:f5:8b:a8:3e:cc:cb:3d:
2a:e4:26:31:30:a1:17:8d:61:9e:81:62:a2:ca:3b:3b:21:dc:
0d:a8:bb:66:ae:25:87:e4:99:bb:b2:e8:85:b5:e7:1c:05:d3:
ae:b9:c9:3b:34:49:02:83:cf:0e:8f:c9:70:d4:d5:f0:fc:07:
1f:66:23:b9:6e:4e:cb:27:9c:b7:df:5b:97:fd:0e:b8:06:9a:
6f:5e:30:b4:bb:93:09:42:03:72:46:96:37:0b:03:1f:33:29:
30:ee:c0:2f:bb:cf:86:1a:c7:b9:3e:4c:9e:c2:32:43:2b:aa:
de:c5:64:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:55:25 2026 by rpki-client