Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS200774.roa
File: AS200774.roa (raw, json)
Hash identifier: yDnh69si5d4C/aR6TXYG3m+2CCI7nz0bKDlzb3379DM=
Subject key identifier: FE:C9:3B:33:FB:58:03:32:56:5C:57:57:70:E4:06:06:DF:A5:FF:8A
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 6B3E01AE9AE29E8FA5A897E7BD559477A41D8273
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS200774.roa
Signing time: Wed 16 Sep 2026 07:25:20 +0000
ROA not before: Wed 16 Sep 2026 07:20:20 +0000
ROA not after: Wed 15 Sep 2027 07:25:20 +0000
asID: 200774
IP address blocks: 212.74.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:3e:01:ae:9a:e2:9e:8f:a5:a8:97:e7:bd:55:94:77:a4:1d:82:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Sep 16 07:20:20 2026 GMT
Not After : Sep 15 07:25:20 2027 GMT
Subject: CN=FEC93B33FB580332565C575770E40606DFA5FF8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a1:70:fc:78:11:d7:91:4c:a0:53:72:57:f0:
41:d8:62:20:dc:58:0d:72:91:39:a8:d5:14:72:9b:
28:9d:1a:da:e2:e0:95:2d:5a:96:38:d8:81:1e:cf:
f2:e2:29:52:b2:b1:70:e4:2f:eb:ce:4e:57:b7:84:
f3:08:3c:07:48:8b:6e:02:1f:c1:c9:84:80:d0:f4:
a9:b7:e6:8d:08:3c:f3:59:ab:65:52:53:e8:98:97:
2f:03:b9:e7:54:d2:77:89:2d:dd:39:1e:6d:14:c8:
99:f6:da:e8:00:3d:d6:59:6d:f4:c9:46:f5:c0:1f:
93:ff:3e:40:10:f5:d2:07:64:10:02:c2:08:20:f8:
11:f6:f0:25:d8:4d:a7:e0:63:f3:40:19:29:ff:98:
b0:4b:6c:26:03:61:f8:df:7b:ac:a2:46:ee:3b:50:
6f:9c:6d:37:a6:fd:02:ec:40:e5:6c:fd:50:28:e2:
9e:ed:39:ab:3c:f8:88:b4:f7:7a:7a:0a:0d:f8:b9:
9e:73:12:6f:24:34:f2:79:b8:70:5c:5e:df:44:72:
3d:d4:ec:ab:bc:44:44:9e:87:74:fa:b3:68:bc:4c:
72:9e:57:83:35:ff:0c:3e:24:be:f6:8c:9a:73:79:
13:8e:ef:e4:2e:88:90:90:d5:40:0c:47:f2:fb:8a:
e6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C9:3B:33:FB:58:03:32:56:5C:57:57:70:E4:06:06:DF:A5:FF:8A
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS200774.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.74.41.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:3a:42:ed:84:8b:c2:7f:55:a7:65:13:6f:a2:39:de:c7:8e:
ac:71:b8:a8:b5:bd:0b:57:cb:f9:0f:f5:19:be:fa:7f:94:dd:
dc:d5:7b:35:7e:d0:09:54:54:ec:f9:4c:dd:df:e4:cb:5c:ee:
24:b8:3d:c1:66:02:fa:d6:f8:7c:79:1f:97:78:f0:28:4d:c3:
29:b2:b2:6a:82:c0:b2:be:6a:1c:1e:71:3f:4e:13:66:9a:57:
ce:f7:88:41:0a:6c:8f:4b:f7:f5:44:d4:c0:93:05:9f:81:ef:
48:ee:ca:70:1d:63:4d:a5:b7:9a:c6:95:e3:48:ec:c2:d8:3b:
40:6d:56:9f:5f:ba:99:12:d8:89:a8:42:46:ec:6f:a9:c7:72:
89:bb:10:97:64:4f:2e:8a:ca:36:46:db:65:c7:d4:d1:1f:51:
1f:cf:26:c9:29:62:36:78:33:4b:c8:80:85:11:fa:76:eb:87:
28:22:14:6f:c1:f9:64:7e:01:31:72:c0:4d:da:d7:20:49:ae:
0c:34:69:3d:fc:7d:aa:38:6b:47:6f:0c:cf:ff:f6:bb:bd:97:
83:5b:91:73:30:e7:7d:34:bb:5c:2f:a2:06:9d:67:a4:47:3c:
20:8b:2b:d9:df:6f:03:7c:8e:a8:89:f0:d5:45:72:fb:c5:bd:
bf:ea:25:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:13:43 2026 by rpki-client