Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS200950.roa
File: AS200950.roa (raw, json)
Hash identifier: qGz2Jejh/NSs3QeIdFVUFY7a3dMe2geF3Mj+jHls8Vk=
Subject key identifier: 8D:CA:88:D0:24:22:29:A3:A1:A5:8D:A5:3D:BB:87:84:90:2A:8B:AC
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 3A24758D5F795A12E0907B03767D5E5016BD418F
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS200950.roa
Signing time: Sat 11 Oct 2025 15:07:57 +0000
ROA not before: Sat 11 Oct 2025 15:02:57 +0000
ROA not after: Sat 10 Oct 2026 15:07:57 +0000
asID: 200950
IP address blocks: 2a0f:85c1:8d0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:24:75:8d:5f:79:5a:12:e0:90:7b:03:76:7d:5e:50:16:bd:41:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Oct 11 15:02:57 2025 GMT
Not After : Oct 10 15:07:57 2026 GMT
Subject: CN=8DCA88D0242229A3A1A58DA53DBB8784902A8BAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:1f:80:dc:e8:fb:77:55:8c:97:1b:9d:f7:08:
1a:c8:fc:d4:6b:3e:8b:67:f6:69:01:d6:ac:8b:33:
bc:9d:2f:40:e0:c3:b6:a7:7f:ce:a1:67:63:de:9a:
b8:ca:ca:5a:29:e3:68:ca:02:28:4c:0f:ab:a1:d9:
10:5a:e4:ce:55:40:02:93:eb:1f:de:96:35:b8:4f:
71:15:54:53:92:87:98:2f:07:be:4e:e3:e7:70:cf:
7e:15:7e:b7:aa:ce:42:ac:16:8f:79:a4:76:8c:65:
cc:ac:69:89:43:c6:13:82:04:20:1b:09:5d:49:53:
e2:8b:bd:5f:5d:5c:5d:c9:e0:60:d1:56:6b:30:31:
32:da:67:87:5d:c8:3e:2a:53:c7:06:4b:b6:5a:df:
28:58:e5:15:d8:1c:d8:d7:c9:8d:ae:6f:6f:08:5d:
85:29:b9:ac:78:3f:e0:54:12:84:af:8c:03:55:cf:
e3:eb:d0:47:19:ae:14:09:5e:f4:56:ff:43:57:1b:
32:8e:e1:53:11:8f:b5:db:fb:38:09:ba:f7:95:cd:
e0:5e:93:41:73:6a:87:d1:96:9e:7a:4d:cb:a0:5a:
ef:ae:99:fa:dc:cd:f4:31:7a:81:fd:a9:cd:5b:94:
48:ab:52:f2:96:cb:41:a3:e6:a3:29:c7:18:6a:05:
d6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:CA:88:D0:24:22:29:A3:A1:A5:8D:A5:3D:BB:87:84:90:2A:8B:AC
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS200950.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:8d0::/44
Signature Algorithm: sha256WithRSAEncryption
0c:a2:e4:9d:73:3d:98:60:a2:27:f6:42:70:72:3e:de:23:6b:
75:85:44:c4:a2:4c:bb:f8:fc:c8:53:0c:fc:c5:40:ae:43:fe:
34:6d:6e:e2:1d:a7:57:33:c0:56:bc:bf:1d:7b:97:3a:22:9a:
eb:71:c9:ea:d2:c5:63:75:b3:22:02:71:fe:2a:df:8c:a7:07:
66:55:b3:df:04:98:14:e3:37:00:5a:88:d9:8d:ca:8a:cb:74:
a4:56:f4:7a:dd:92:f9:fc:f4:3e:bf:ef:0c:a4:71:0f:d3:8c:
e7:80:ab:20:0e:45:84:2d:6f:97:67:00:5a:0f:b2:a1:66:44:
15:97:af:7e:89:20:ca:8a:66:b8:59:87:77:6d:05:73:b8:41:
b0:57:9b:ee:42:52:15:af:15:24:8c:33:c8:fa:0d:af:f9:0c:
2e:ae:19:10:4a:b3:58:07:7f:f0:98:dc:5c:fc:52:62:a3:74:
5f:fe:4f:0b:bd:95:72:bb:40:89:61:b6:55:5d:ca:cf:7c:7f:
4f:29:01:ff:26:e0:ab:a7:47:3e:ee:d5:6d:ab:80:97:29:b6:
54:4b:80:99:72:b7:dd:21:e0:20:b8:97:ea:74:ff:26:0a:8d:
38:84:4c:e3:f1:0e:98:f1:65:ce:bf:33:7a:bf:66:9e:16:e4:
e5:66:76:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:47:55 2025 by rpki-client