Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS200213.roa
File: AS200213.roa (raw, json)
Hash identifier: Iko4NcC8QWLEhY1c0Swxg3mpa1QKdkriLZfAU3wL7Mc=
Subject key identifier: D1:BA:72:D9:18:8C:0F:88:98:49:4E:CE:41:29:F4:F4:A9:A6:44:E4
Certificate issuer: /CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Certificate serial: 63591959CCCBB27EEFDA505CA3CD2E62F168AD50
Authority key identifier: 39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS200213.roa
Signing time: Sun 19 Jul 2026 16:47:00 +0000
ROA not before: Sun 19 Jul 2026 16:42:00 +0000
ROA not after: Sun 18 Jul 2027 16:47:00 +0000
asID: 200213
IP address blocks: 177.29.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 18:56:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:59:19:59:cc:cb:b2:7e:ef:da:50:5c:a3:cd:2e:62:f1:68:ad:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Validity
Not Before: Jul 19 16:42:00 2026 GMT
Not After : Jul 18 16:47:00 2027 GMT
Subject: CN=D1BA72D9188C0F8898494ECE4129F4F4A9A644E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2b:31:9a:b4:a0:b1:7e:f9:f9:86:1a:4a:0b:
b6:fa:fc:83:b0:97:2d:51:a9:9a:4c:d3:eb:9f:4e:
dc:38:17:95:5e:6f:e2:24:e2:30:a6:d1:dc:8a:5e:
c5:71:18:12:48:a6:ac:28:08:16:8d:16:1c:48:14:
95:f7:a3:39:fd:3d:20:d0:5a:bc:d7:cf:f0:5d:8b:
a9:43:fb:99:5f:68:58:bf:bb:c6:9d:91:54:4f:b9:
45:45:74:27:1b:ae:ef:12:e5:fc:75:d0:4b:8b:cd:
60:40:87:b6:a3:b7:83:f0:81:35:0c:6c:9e:b4:0f:
41:f6:97:15:76:2e:14:b8:58:ff:79:bd:36:c3:d7:
5a:5f:b0:5d:e7:fe:8d:33:11:eb:78:91:16:e0:b9:
c8:02:30:7c:c4:b4:90:50:77:57:53:a9:c8:64:f2:
52:9b:ef:17:fc:53:d3:55:6b:f6:ee:60:27:f4:86:
de:10:d3:fb:f3:a1:fb:e8:ea:6f:55:7c:24:f5:61:
28:0e:d3:58:39:a9:79:72:0b:e6:9c:e5:65:4e:0c:
eb:fb:f6:ff:c6:ed:f6:f1:03:ef:13:d1:31:60:ef:
c6:8a:74:e9:49:53:5a:58:5d:11:3f:db:48:bb:f0:
52:7a:7c:82:c7:3a:e6:e5:65:9d:28:27:54:e6:8b:
27:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:BA:72:D9:18:8C:0F:88:98:49:4E:CE:41:29:F4:F4:A9:A6:44:E4
X509v3 Authority Key Identifier:
keyid:39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS200213.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.29.248.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:7d:ff:25:65:63:2a:a6:43:dd:39:8a:95:32:52:a1:3e:26:
4d:45:ed:b6:1a:c9:2c:2c:38:d6:d5:9d:6d:60:bf:e0:f5:f3:
34:5c:3a:1b:cd:d5:87:08:0e:cc:55:f0:d2:38:1d:cf:92:0a:
62:19:99:56:99:67:82:7e:5d:5f:61:8b:ad:c2:be:73:b7:5f:
2a:a8:20:3f:98:73:7a:00:03:d0:91:cd:d9:a1:c3:a4:39:1a:
51:09:bf:cb:e5:42:8a:e7:18:66:dc:46:e8:37:36:bd:31:62:
76:a7:f4:ae:1d:8b:1c:ab:f1:2f:00:5d:af:90:0e:55:33:72:
88:8c:81:c1:9f:70:b1:3d:95:fa:e4:7f:3f:60:fe:a7:c7:09:
10:82:1c:b7:f7:7e:8b:97:8e:15:a9:82:02:52:1a:af:5d:ee:
a2:e1:cd:bc:f7:ed:55:a6:89:e5:c4:38:bb:a6:28:3a:7a:4d:
88:a5:d0:e9:29:d4:25:d6:ba:1f:2e:a1:eb:ba:79:57:76:6a:
e3:46:fd:8f:bb:ac:ef:da:84:52:7e:7e:c4:ec:5f:c8:66:a3:
19:9a:66:32:ef:2d:a5:b7:ea:ba:54:92:35:e7:64:e4:8c:5b:
4b:04:58:3d:f4:69:47:e6:43:0f:fa:13:ae:c9:de:83:1f:49:
fe:7c:fa:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:35:31 2026 by rpki-client