Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/AS200455.roa
File: AS200455.roa (raw, json)
Hash identifier: vwSkZ/DgYLIs104JkJIeK9Gpn7Fble8Wi8xDtv90wWY=
Subject key identifier: 73:DF:86:29:BC:97:1C:03:63:21:E1:0E:43:4F:81:C7:0C:19:0E:8E
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 3FD2A18FFBC426F9AB5AE008FB1C266E04CA5CD7
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/AS200455.roa
Signing time: Thu 12 Nov 2026 08:25:12 +0000
ROA not before: Thu 12 Nov 2026 08:20:12 +0000
ROA not after: Thu 11 Nov 2027 08:25:12 +0000
asID: 200455
IP address blocks: 2a0f:1cc5:1a00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:d2:a1:8f:fb:c4:26:f9:ab:5a:e0:08:fb:1c:26:6e:04:ca:5c:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Nov 12 08:20:12 2026 GMT
Not After : Nov 11 08:25:12 2027 GMT
Subject: CN=73DF8629BC971C036321E10E434F81C70C190E8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ea:62:da:f7:10:c2:d2:be:8c:9b:4b:ed:f0:
b2:9d:2e:2d:c2:cb:5e:99:f8:37:29:b4:d6:9c:6f:
35:e6:27:59:d7:63:e2:93:ca:84:85:22:1c:40:ec:
24:31:56:7c:32:b1:02:a1:66:31:f6:c8:7f:9c:a4:
c7:71:f4:e2:c2:a5:62:39:da:a9:87:21:13:91:78:
56:b1:92:7e:68:67:cd:f1:24:44:21:d3:27:de:bc:
e3:f9:54:96:63:36:e1:13:cc:07:e4:ac:4c:13:19:
25:f8:4d:e6:e9:e2:14:2f:c4:cf:16:07:30:73:a2:
3f:47:dc:6a:99:fe:b0:83:f0:50:24:86:4c:69:28:
33:10:fb:61:93:0a:52:48:46:a0:f5:2b:9e:3b:14:
98:e4:db:59:0b:19:88:1b:df:a3:46:17:b9:40:11:
2c:57:d7:cc:4a:8f:4f:09:ae:45:6a:cd:9c:7a:f1:
54:36:3e:f8:24:60:96:45:48:27:2e:21:b9:d1:8a:
3d:ca:b8:ee:4f:1c:45:fc:08:df:8c:a3:2b:13:f7:
df:43:95:f7:a9:94:30:5d:5e:6e:1f:7d:ec:08:38:
31:41:dd:36:44:a1:1d:e0:f3:6f:22:a6:fe:35:37:
87:fd:cc:fd:40:e1:b9:e4:b5:f7:e1:56:95:39:3b:
7c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:DF:86:29:BC:97:1C:03:63:21:E1:0E:43:4F:81:C7:0C:19:0E:8E
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/AS200455.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:1a00::/40
Signature Algorithm: sha256WithRSAEncryption
80:4c:de:11:86:db:f3:00:9e:04:16:22:3d:22:51:cb:cb:48:
19:4d:61:95:67:fe:2d:2c:89:14:73:ae:58:84:b4:2f:7f:0a:
bb:5a:d2:14:cc:9a:3f:70:09:e7:2a:9a:91:be:b9:5b:68:14:
db:93:c3:4a:05:09:c5:69:46:d5:1b:10:91:cd:d4:24:ee:8e:
2e:d2:92:7a:29:14:52:28:bb:b3:8f:bb:94:ce:46:a6:43:e9:
f9:cc:48:00:55:71:65:33:fb:e8:a9:ce:7e:2d:0d:90:d4:0f:
84:c8:47:ea:44:a3:8e:16:6b:0d:f0:93:ba:b2:d2:b6:eb:1c:
f6:00:ef:48:d0:57:dc:00:47:50:e9:fa:61:d8:4c:cf:4b:e4:
e2:7f:33:0c:13:2c:3d:b5:80:4b:d5:09:2b:ed:4e:a0:03:35:
aa:30:2b:d9:d4:a8:44:75:10:3c:21:bf:5d:ca:4a:71:df:9f:
44:58:33:15:06:28:a6:72:00:7a:77:b7:11:f2:a5:00:d4:91:
6b:95:ba:2c:e5:05:ef:23:c0:58:f8:c2:af:82:83:54:a6:93:
cb:97:8c:7e:88:af:a6:90:e1:73:5e:2c:03:35:d9:89:35:7c:
9b:fd:50:ef:f6:4c:03:61:e2:2f:77:ce:72:bf:f4:76:c3:5f:
aa:b4:3f:af
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgIUP9Khj/vEJvmrWuAI+xwmbgTKXNcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMWJlMjQwMDIxYTI4N2YyOTg5NzNkOWVhMjhkZmM4MDcz
NWZkNTgwMDAeFw0yNjExMTIwODIwMTJaFw0yNzExMTEwODI1MTJaMDMxMTAvBgNV
BAMTKDczREY4NjI5QkM5NzFDMDM2MzIxRTEwRTQzNEY4MUM3MEMxOTBFOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD6mLa9xDC0r6Mm0vt8LKdLi3C
y16Z+DcptNacbzXmJ1nXY+KTyoSFIhxA7CQxVnwysQKhZjH2yH+cpMdx9OLCpWI5
2qmHIROReFaxkn5oZ83xJEQh0yfevOP5VJZjNuETzAfkrEwTGSX4Tebp4hQvxM8W
BzBzoj9H3GqZ/rCD8FAkhkxpKDMQ+2GTClJIRqD1K547FJjk21kLGYgb36NGF7lA
ESxX18xKj08JrkVqzZx68VQ2PvgkYJZFSCcuIbnRij3KuO5PHEX8CN+MoysT999D
lfeplDBdXm4ffewIODFB3TZEoR3g828ipv41N4f9zP1A4bnktffhVpU5O3zjAgMB
AAGjggIMMIICCDAdBgNVHQ4EFgQUc9+GKbyXHANjIeEOQ0+BxwwZDo4wHwYDVR0j
BBgwFoAUG+JAAhoofymJc9nqKN/IBzX9WAAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOGFmYjVmZTItM2MyYS00OTM5LTk1ZTktMDA3N2I4MGI0
ZjBlLzAvMUJFMjQwMDIxQTI4N0YyOTg5NzNEOUVBMjhERkM4MDczNUZENTgwMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0ctSkFBaG9vZnltSmM5bnFLTl9JQnpY
OVdBQS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzhhZmI1ZmUyLTNjMmEt
NDkzOS05NWU5LTAwNzdiODBiNGYwZS8wL0FTMjAwNDU1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg8c
xRowDQYJKoZIhvcNAQELBQADggEBAIBM3hGG2/MAngQWIj0iUcvLSBlNYZVn/i0s
iRRzrliEtC9/Crta0hTMmj9wCecqmpG+uVtoFNuTw0oFCcVpRtUbEJHN1CTuji7S
knopFFIou7OPu5TORqZD6fnMSABVcWUz++ipzn4tDZDUD4TIR+pEo44Waw3wk7qy
0rbrHPYA70jQV9wAR1Dp+mHYTM9L5OJ/MwwTLD21gEvVCSvtTqADNaowK9nUqER1
EDwhv13KSnHfn0RYMxUGKKZyAHp3txHypQDUkWuVuizlBe8jwFj4wq+Cg1Smk8uX
jH6Ir6aQ4XNeLAM12Yk1fJv9UO/2TANh4i93znK/9HbDX6q0P68=
-----END CERTIFICATE-----
Generated at Sun Nov 15 10:54:25 2026 by rpki-client