Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS200216.roa
File: AS200216.roa (raw, json)
Hash identifier: GlueP0oc5O7pbHBqL3y3rIiG4qOXoTk4Qc6TyqUvmJ4=
Subject key identifier: B1:3A:02:9E:88:10:6B:EA:DF:2E:EE:01:0B:8E:E9:11:0C:00:9F:9B
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 3B76346D1B722747869FAEB7A273A512D445563D
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS200216.roa
Signing time: Thu 12 Jun 2025 14:16:47 +0000
ROA not before: Thu 12 Jun 2025 14:11:47 +0000
ROA not after: Thu 11 Jun 2026 14:16:47 +0000
asID: 200216
IP address blocks: 2a0b:8703::/32 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 12:46:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:76:34:6d:1b:72:27:47:86:9f:ae:b7:a2:73:a5:12:d4:45:56:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jun 12 14:11:47 2025 GMT
Not After : Jun 11 14:16:47 2026 GMT
Subject: CN=B13A029E88106BEADF2EEE010B8EE9110C009F9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:01:0d:90:ba:43:f4:f7:0d:b1:f0:c9:a4:ef:
f9:12:c7:5c:9f:64:b7:71:fe:1d:68:e9:e8:32:b0:
c4:1f:20:16:11:88:de:87:86:b6:09:d4:97:15:35:
92:f0:2d:bd:1f:ef:d7:ac:f8:3a:a7:bd:da:c9:eb:
39:a1:3a:7c:0e:b5:92:00:b9:a7:64:fb:8a:6d:05:
8b:fb:5d:15:b3:b8:5d:39:14:81:e6:26:f9:4c:54:
cf:f6:30:a1:d7:82:90:65:0e:07:d1:39:34:e0:62:
9e:e6:68:3a:31:89:58:b5:60:07:d0:44:67:4d:64:
ab:d8:80:73:df:11:d6:6c:82:11:00:dd:7a:60:0f:
ca:2a:13:63:70:12:d9:b8:95:95:dd:31:e5:3d:97:
c0:93:69:62:d5:0b:60:90:d2:c5:43:fe:f7:40:19:
f4:77:05:b1:57:5c:72:ec:6f:c1:7a:0a:5e:4f:e7:
2c:c5:61:5e:13:55:59:73:28:cb:7f:ac:60:af:f4:
58:06:75:02:92:0e:d6:1c:fb:58:cb:be:79:40:84:
32:f5:1b:2c:83:09:d7:64:42:56:1b:e8:b3:fa:66:
a2:7b:e8:46:f9:dc:f9:af:81:17:d5:01:54:89:20:
e4:b3:6a:11:3b:64:f8:b3:72:c6:e4:1d:76:e0:92:
93:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:3A:02:9E:88:10:6B:EA:DF:2E:EE:01:0B:8E:E9:11:0C:00:9F:9B
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS200216.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:8703::/32
Signature Algorithm: sha256WithRSAEncryption
08:4b:00:5b:03:3b:68:04:16:c8:a3:4b:15:aa:1c:f0:33:5b:
8b:22:1e:b2:af:25:bf:f3:60:e1:cd:e8:04:2c:e0:46:7c:73:
47:6f:e9:da:1c:85:59:d6:62:c9:13:4e:a2:e3:66:51:e7:82:
70:cd:60:37:a4:e9:0f:f2:e5:07:67:e1:4b:23:1c:c7:46:2a:
1e:00:2d:de:2f:f9:12:d7:a7:cd:5c:6c:57:8a:49:8f:c8:c5:
0d:f0:31:44:16:c7:f3:65:06:46:ee:32:d7:90:a9:82:ff:66:
7d:8e:2d:ec:6b:f3:b6:7d:cc:b0:c1:14:64:2f:e4:a1:19:27:
07:75:25:85:5d:44:d4:47:64:b5:9d:2f:2c:59:b3:9d:01:b4:
d4:e9:39:c3:51:d3:b9:8e:76:ac:3a:c4:d2:36:78:ff:65:85:
ce:bb:bd:20:9f:d2:7d:e7:ab:32:0b:2a:6f:4c:94:5a:4a:0c:
76:13:6c:32:e4:5c:83:43:bc:81:29:10:c2:a4:17:75:02:3a:
de:79:64:e7:ad:d5:47:70:6c:9d:9f:12:8c:67:9b:51:c0:92:
49:87:47:69:8b:e0:47:ab:ce:31:75:38:8b:cc:d9:66:0b:d9:
12:cc:79:68:72:3b:88:a6:a6:61:a4:16:f9:4c:13:a7:a2:88:
fa:d1:02:d1
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIUO3Y0bRtyJ0eGn663onOlEtRFVj0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNTA2MTIxNDExNDdaFw0yNjA2MTExNDE2NDdaMDMxMTAvBgNV
BAMTKEIxM0EwMjlFODgxMDZCRUFERjJFRUUwMTBCOEVFOTExMEMwMDlGOUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYAQ2QukP09w2x8Mmk7/kSx1yf
ZLdx/h1o6egysMQfIBYRiN6HhrYJ1JcVNZLwLb0f79es+DqnvdrJ6zmhOnwOtZIA
uadk+4ptBYv7XRWzuF05FIHmJvlMVM/2MKHXgpBlDgfROTTgYp7maDoxiVi1YAfQ
RGdNZKvYgHPfEdZsghEA3XpgD8oqE2NwEtm4lZXdMeU9l8CTaWLVC2CQ0sVD/vdA
GfR3BbFXXHLsb8F6Cl5P5yzFYV4TVVlzKMt/rGCv9FgGdQKSDtYc+1jLvnlAhDL1
GyyDCddkQlYb6LP6ZqJ76Eb53PmvgRfVAVSJIOSzahE7ZPizcsbkHXbgkpMPAgMB
AAGjggILMIICBzAdBgNVHQ4EFgQUsToCnogQa+rfLu4BC47pEQwAn5swHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjAwMjE2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKguH
AzANBgkqhkiG9w0BAQsFAAOCAQEACEsAWwM7aAQWyKNLFaoc8DNbiyIesq8lv/Ng
4c3oBCzgRnxzR2/p2hyFWdZiyRNOouNmUeeCcM1gN6TpD/LlB2fhSyMcx0YqHgAt
3i/5EtenzVxsV4pJj8jFDfAxRBbH82UGRu4y15Cpgv9mfY4t7Gvztn3MsMEUZC/k
oRknB3UlhV1E1EdktZ0vLFmznQG01Ok5w1HTuY52rDrE0jZ4/2WFzru9IJ/Sfeer
Mgsqb0yUWkoMdhNsMuRcg0O8gSkQwqQXdQI63nlk563VR3BsnZ8SjGebUcCSSYdH
aYvgR6vOMXU4i8zZZgvZEsx5aHI7iKamYaQW+UwTp6KI+tEC0Q==
-----END CERTIFICATE-----
Generated at Sun Jun 15 16:51:37 2025 by rpki-client