Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS200993.roa
File: AS200993.roa (raw, json)
Hash identifier: a1wMJ9YosecxrqXks1ro66iOIcsnfz6W+KhG88NAj5s=
Subject key identifier: 09:60:6E:B6:18:F6:AD:9F:03:81:00:87:24:CB:7E:8F:E8:88:2E:1E
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 2F009F1EE58C44202A8322E2D7CB73D34C4A714D
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS200993.roa
Signing time: Fri 20 Mar 2026 14:15:54 +0000
ROA not before: Fri 20 Mar 2026 14:10:54 +0000
ROA not after: Fri 19 Mar 2027 14:15:54 +0000
asID: 200993
IP address blocks: 2a14:7583:e304::/46 maxlen: 46
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:00:9f:1e:e5:8c:44:20:2a:83:22:e2:d7:cb:73:d3:4c:4a:71:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Mar 20 14:10:54 2026 GMT
Not After : Mar 19 14:15:54 2027 GMT
Subject: CN=09606EB618F6AD9F0381008724CB7E8FE8882E1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:61:cf:53:b4:fd:56:23:84:b4:26:d5:4f:1c:
88:6b:4a:ff:a1:7c:07:de:07:91:33:06:70:ac:29:
27:f3:fe:cf:c3:ee:af:45:35:4c:fc:63:8c:64:0e:
dd:8e:e4:93:8d:f0:59:70:e0:08:88:cf:75:0d:5b:
ca:e1:51:74:0a:e8:bb:0a:9b:ad:f3:e1:fb:c5:5d:
5c:cf:88:de:98:a1:7c:9e:88:0c:a9:94:6f:94:28:
48:d3:09:fb:bb:d0:1e:1d:a6:60:c5:7a:ed:cb:7e:
9c:97:31:91:2b:e3:ce:69:f5:98:ef:d8:ee:20:db:
32:26:3c:ba:3c:a5:04:52:bd:b3:84:77:6c:4a:12:
dc:90:18:22:6e:47:97:fc:42:6e:d2:3e:3d:de:f4:
7f:e3:57:09:14:fb:32:84:f8:56:37:e9:ee:45:67:
67:a9:66:fe:91:a9:ac:bf:40:4b:39:dc:8c:9c:8e:
35:ba:9a:53:f4:70:7c:f7:87:9b:f9:c9:da:16:7a:
6c:c1:4e:5c:16:85:dd:b6:de:42:8a:ef:bd:3c:56:
e3:af:98:16:7f:85:33:43:bc:93:ef:6c:20:58:77:
c0:9d:7b:41:95:8d:ce:87:5b:e0:ea:02:c2:bc:c3:
9d:5b:a3:01:cc:ed:0b:c5:7f:3f:df:13:43:7d:3d:
02:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:60:6E:B6:18:F6:AD:9F:03:81:00:87:24:CB:7E:8F:E8:88:2E:1E
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS200993.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:e304::/46
Signature Algorithm: sha256WithRSAEncryption
41:b7:47:f6:33:f5:96:dd:c1:73:73:98:31:2a:12:ed:e5:0f:
dc:69:ee:38:fe:5e:1c:86:b6:8b:fb:4e:5d:df:66:57:f3:eb:
6c:2e:20:fa:b4:3e:61:99:54:73:c6:9e:df:b1:85:0c:3d:a4:
55:55:16:8e:ed:f1:cb:7d:f4:c5:77:d5:d4:d0:bc:fe:6c:b2:
dd:4a:15:3f:da:8a:54:74:eb:86:19:7f:f9:24:3d:84:53:19:
0d:b3:0c:d7:ad:74:9e:4c:71:42:3e:4e:b6:0f:13:da:b3:a0:
d7:20:0d:b7:4d:15:30:81:72:c3:3c:4a:6e:af:e3:9b:9a:71:
3e:de:b5:4a:b5:df:f9:79:8a:9f:35:e5:22:32:48:b3:16:4a:
a8:11:67:7c:13:59:2e:1a:3a:19:18:f7:83:6d:b9:7e:fc:b7:
f4:c5:11:c5:0a:c2:90:f1:34:db:6f:12:8b:09:6e:a6:7f:44:
6f:7a:d3:35:7f:44:2b:57:4d:9e:45:01:cb:8c:f2:b2:57:c2:
ec:7d:3a:43:2c:e8:a6:d1:33:94:f1:50:ea:24:e4:f8:f6:cd:
c1:57:1a:1d:c7:df:ee:62:ec:f2:f8:e9:a8:93:d1:f3:4f:42:
53:b2:38:13:df:b0:82:10:c0:3b:0c:ee:5a:1e:a4:65:4b:3e:
6b:13:4d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:15:43 2026 by rpki-client