Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS200017.roa
File: AS200017.roa (raw, json)
Hash identifier: ms0rd8Xr6f40j057x9mwyBH59JOcg38SQJdwA/8Wgns=
Subject key identifier: CE:CD:95:51:31:90:2F:42:2E:24:83:3F:42:DD:05:66:82:43:AE:3D
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 4B7E47D62A40CF5F75BD7C8052A7D0736ECB0F39
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS200017.roa
Signing time: Wed 08 Apr 2026 12:47:03 +0000
ROA not before: Wed 08 Apr 2026 12:42:03 +0000
ROA not after: Wed 07 Apr 2027 12:47:03 +0000
asID: 200017
IP address blocks: 5.45.39.0/24 maxlen: 24
181.215.26.0/24 maxlen: 24
185.170.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:7e:47:d6:2a:40:cf:5f:75:bd:7c:80:52:a7:d0:73:6e:cb:0f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Apr 8 12:42:03 2026 GMT
Not After : Apr 7 12:47:03 2027 GMT
Subject: CN=CECD955131902F422E24833F42DD05668243AE3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ce:07:2a:ba:19:a6:de:c4:ea:c2:15:53:77:
86:2f:52:7e:8d:07:46:ec:59:9f:7f:12:91:1d:4c:
a4:91:24:3f:b9:7d:06:59:1b:f6:02:5d:23:aa:17:
ec:90:f6:49:86:cf:b4:eb:14:45:20:89:9a:95:c4:
a3:49:b8:24:ac:f8:f0:da:d5:65:8d:3b:b3:cf:50:
6f:08:6d:06:f6:25:c6:aa:77:f1:29:1a:50:9c:57:
d2:92:d6:6d:73:e6:ee:37:ca:69:19:c4:4d:49:c4:
21:b4:eb:9c:65:1a:e6:bd:dd:26:85:c7:42:38:9e:
3c:d6:46:6f:78:40:2f:44:88:72:94:3b:6c:fe:a7:
c3:a3:34:2b:4d:f1:0b:7f:92:e5:1b:45:8f:90:22:
4b:4a:22:61:f4:c5:2e:d9:1f:ab:aa:96:e3:54:00:
66:18:94:5b:cb:b3:5e:06:c6:af:39:e0:57:38:30:
f6:c6:12:6e:57:33:02:3c:2f:9e:e3:b6:28:d7:39:
69:fb:1d:e4:d3:c6:c4:df:48:ca:6c:7f:5c:1c:f7:
74:59:ec:48:31:dc:e5:cf:ad:f7:92:7f:d4:50:af:
a2:de:53:49:2f:47:05:bc:2e:43:3e:ae:98:d7:07:
1a:03:01:90:1d:d3:7a:7d:ac:db:8b:9d:0a:69:05:
bd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:CD:95:51:31:90:2F:42:2E:24:83:3F:42:DD:05:66:82:43:AE:3D
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS200017.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.45.39.0/24
181.215.26.0/24
185.170.41.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:6c:c5:70:92:92:7b:72:6d:c7:45:08:75:8b:5e:86:a9:7a:
6d:bd:ee:cc:c1:1d:34:77:43:62:4d:6e:3e:bd:0d:4f:94:c8:
34:71:66:a5:8f:a6:9a:0a:68:37:fd:4a:c8:fe:98:40:21:3e:
eb:2f:07:c4:b7:e0:7e:9f:ef:1c:c3:3a:76:7b:30:d5:f7:6c:
2b:e3:6d:0f:64:c8:55:59:4c:5f:3f:a2:9b:58:3d:a5:96:6b:
f1:95:70:0a:20:aa:db:fb:de:92:9d:2b:92:c9:34:b9:9f:67:
4c:3f:5f:79:eb:09:95:93:cb:41:12:66:18:a6:a6:15:20:63:
12:dd:61:d3:59:ef:0f:99:e8:96:72:2b:a1:18:c1:ef:6a:ce:
54:8f:df:8c:9a:8d:b7:56:5c:0a:5c:ab:38:57:3e:5d:8c:de:
a7:2c:c4:97:fd:f2:45:1a:5d:74:92:94:6d:c6:a6:5e:0e:5c:
68:5a:07:37:eb:b6:db:4d:31:8d:36:81:4a:dc:1b:25:77:01:
c9:d4:94:7d:b3:5e:95:06:20:4a:99:6a:dc:a0:d9:be:c9:2f:
0e:6a:41:24:c1:03:29:e9:5a:a9:4e:04:99:11:fc:b5:a3:b3:
0d:84:93:51:f4:79:66:b8:83:cb:df:9e:dd:f3:d1:6c:06:a4:
27:23:24:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:35:50 2026 by rpki-client