Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS200623.roa
File: AS200623.roa (raw, json)
Hash identifier: m0nySDCa7+KyMfhHKRIGP86QAmXNivn/1QOgtJ+UGHg=
Subject key identifier: 20:1D:CB:D4:D0:37:53:FC:1C:24:A0:64:79:2E:1C:F5:4B:00:F9:DB
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 5CAB6E8528641ADA096CAAE68821AD642823A0D2
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS200623.roa
Signing time: Wed 25 Mar 2026 03:05:32 +0000
ROA not before: Wed 25 Mar 2026 03:00:32 +0000
ROA not after: Wed 24 Mar 2027 03:05:32 +0000
asID: 200623
IP address blocks: 2a14:7583:e900::/40 maxlen: 40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:06:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:ab:6e:85:28:64:1a:da:09:6c:aa:e6:88:21:ad:64:28:23:a0:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Mar 25 03:00:32 2026 GMT
Not After : Mar 24 03:05:32 2027 GMT
Subject: CN=201DCBD4D03753FC1C24A064792E1CF54B00F9DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a8:aa:1b:a2:04:7f:03:34:d8:8c:ea:3b:b0:
82:41:bc:5e:49:70:4b:45:ea:0e:c5:8a:04:c9:38:
60:25:3e:0b:e7:3d:b4:38:5e:3b:df:5a:a4:6a:d3:
98:98:1d:44:79:11:87:31:5a:10:df:a7:d5:29:1c:
16:8f:78:09:f0:cc:4b:aa:4c:bd:be:d8:c5:73:15:
69:8a:de:57:25:b3:55:c4:24:dc:11:98:bf:ed:5d:
00:ff:1a:e7:c5:b1:93:b9:c8:6d:83:c9:df:58:82:
ab:d6:79:a0:ec:bb:0d:4d:22:f9:af:7a:4e:7c:89:
7c:b3:8a:06:9a:ad:2a:37:0e:ac:b3:48:47:53:a2:
60:3e:e3:0e:7b:a3:4c:20:4c:9a:bd:4f:3d:48:2b:
9e:db:16:ae:96:ed:b1:72:01:38:99:16:fc:33:2f:
a8:78:9a:0e:fb:7e:2f:1b:6c:ce:a6:01:8f:d8:44:
ef:21:47:fd:a8:fb:aa:7c:3c:d1:b6:4c:1a:b6:54:
14:82:fe:83:5c:5b:99:36:fe:a5:79:59:7a:3e:30:
01:e9:73:d2:28:c8:be:c6:44:69:64:81:2a:f0:db:
6c:14:b7:77:41:1a:5c:71:68:2f:97:c5:89:95:a5:
85:34:1d:34:d1:9b:c2:3b:b7:a2:a8:ed:10:24:fa:
62:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:1D:CB:D4:D0:37:53:FC:1C:24:A0:64:79:2E:1C:F5:4B:00:F9:DB
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS200623.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:e900::/40
Signature Algorithm: sha256WithRSAEncryption
65:f9:d0:6b:67:0a:5c:28:f1:39:8a:24:20:66:e9:94:5c:0c:
78:5d:33:41:06:d3:7e:a1:e4:31:bd:32:0d:ab:5d:61:a4:26:
2f:51:a7:71:fb:e1:3c:21:7f:66:a8:e8:4b:2a:26:05:dd:39:
0a:8f:17:c4:ea:6a:d9:ea:cf:90:cf:9e:50:ef:86:e5:51:12:
96:4b:ba:e8:54:e6:2e:83:a2:2f:e1:93:a9:2e:eb:0a:d0:88:
68:02:5c:23:00:e1:3a:10:84:5b:97:da:7a:4b:03:99:d6:4d:
bb:e9:ea:1f:2d:12:fd:f4:89:41:a1:e1:db:b3:0c:e4:7b:a9:
9e:29:e4:e9:c5:83:65:bc:20:97:c3:70:83:ac:eb:36:fc:9d:
9a:21:0d:12:7a:92:08:1c:5d:3d:18:f2:e0:97:7f:0b:00:bd:
27:ad:21:d0:57:b9:f5:20:be:3d:0d:d7:16:28:25:b9:3a:c0:
2f:27:84:e7:ba:a7:82:f9:55:eb:85:11:4b:d9:ee:e8:d6:55:
96:f8:45:ed:a6:32:94:e9:5c:7e:16:80:34:d3:65:2e:79:e6:
2e:9c:5b:cb:72:44:9a:9c:27:fc:58:25:cf:ba:11:3e:4c:f6:
04:3e:67:3f:38:d8:c6:24:9e:c4:8f:e3:93:5d:c1:04:0e:10:
9f:77:cb:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:04:23 2026 by rpki-client