Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS200017.roa
File: AS200017.roa (raw, json)
Hash identifier: Yx2siBPiYBGDku6Sye6++Gold0qnKEidxmEuStN77nw=
Subject key identifier: FC:40:E2:26:86:17:63:B6:59:72:27:66:1C:F3:E5:6D:E3:4E:D0:C4
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 67F80FC323FA978F949B63F7B0844337ECB780AD
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS200017.roa
Signing time: Wed 01 Apr 2026 13:46:57 +0000
ROA not before: Wed 01 Apr 2026 13:41:57 +0000
ROA not after: Wed 31 Mar 2027 13:46:57 +0000
asID: 200017
IP address blocks: 146.103.36.0/24 maxlen: 24
150.241.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:f8:0f:c3:23:fa:97:8f:94:9b:63:f7:b0:84:43:37:ec:b7:80:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 1 13:41:57 2026 GMT
Not After : Mar 31 13:46:57 2027 GMT
Subject: CN=FC40E226861763B6597227661CF3E56DE34ED0C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:de:6e:76:b8:5a:ba:c0:fe:c8:81:98:12:a3:
3d:98:93:b7:a7:15:81:49:97:5c:11:e7:6a:72:cb:
2c:40:ae:e0:f2:29:e7:63:cb:82:f8:b6:01:c4:17:
ce:9f:0f:ba:c9:13:06:a3:25:69:45:b8:1b:34:c7:
0e:6e:be:c2:c0:e3:5e:3c:cd:30:66:82:8c:82:ac:
55:19:3e:5a:ce:6d:ff:ea:73:f4:4f:34:71:64:c5:
0e:78:1d:e4:5e:b3:4b:e0:4f:49:4d:75:0f:21:27:
8f:84:c9:b5:a7:fc:e3:12:63:2a:41:47:38:76:ec:
b3:65:9a:59:c6:96:33:ed:5d:70:68:ce:7d:e2:fb:
3a:fd:f9:28:69:9e:5f:25:32:42:57:f1:40:82:9f:
15:b1:98:42:7b:91:39:6c:78:3f:37:e9:2e:f4:c1:
b3:d5:f4:35:53:e8:78:c2:a4:9f:0e:f4:20:78:64:
bd:83:f0:b9:43:52:ec:46:36:de:81:23:d0:5d:7e:
55:0e:9a:22:2b:2d:2a:5d:d4:cd:92:12:b9:d9:fd:
cc:f8:7f:2d:09:fa:1b:2e:52:4b:a2:36:9a:8b:60:
7d:05:4e:aa:0e:75:10:ee:78:72:5c:00:a7:57:31:
96:14:91:80:d2:af:28:8c:6e:38:56:35:f3:11:c9:
2b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:40:E2:26:86:17:63:B6:59:72:27:66:1C:F3:E5:6D:E3:4E:D0:C4
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS200017.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.36.0/24
150.241.145.0/24
Signature Algorithm: sha256WithRSAEncryption
60:0a:58:5e:e1:50:19:f7:e4:7e:35:0a:4b:73:5c:32:70:be:
db:28:26:45:8b:df:eb:51:9c:70:6d:eb:2c:27:5b:81:f8:a4:
05:d6:b2:4a:7d:b4:f8:b7:ad:9c:b6:6a:5a:c5:f2:27:06:e5:
6c:70:57:43:03:e4:44:63:a3:de:e9:d2:51:57:83:6e:74:63:
41:11:05:3f:53:b4:c0:16:de:02:aa:6c:b4:6e:2c:d7:34:8b:
e8:a7:30:9a:38:7a:2d:d4:f6:25:fb:02:0e:e3:65:0e:ca:95:
31:8e:8b:e4:cb:82:a8:52:d2:6c:55:93:a1:54:46:39:b8:35:
2e:f5:3f:fe:99:3f:d6:fc:17:c4:8d:8f:ba:78:1b:0e:10:ef:
6e:99:30:a3:7a:5d:fe:72:f8:1d:eb:ce:12:db:e4:ae:a4:66:
b5:65:7c:2b:88:69:ae:48:7a:00:d3:6e:a3:74:05:90:85:39:
da:9a:cd:51:d3:bd:60:00:b9:c9:3e:42:6a:27:56:16:d2:25:
1a:1b:fa:e0:ad:73:f3:0c:2c:96:46:b6:c2:c3:f3:04:9c:df:
24:5c:01:17:8c:09:4a:35:0b:bf:81:d1:a3:a6:fa:d9:e3:2f:
33:09:9c:cc:01:1e:2f:8f:56:a7:7c:cf:1a:1e:c6:3d:21:85:
9b:01:fa:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:11:27 2026 by rpki-client