Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS200240.roa
File: AS200240.roa (raw, json)
Hash identifier: TUB0a2j9dYB4DtwG399CBXAeUZ+EtQGKqiTSKb1COP4=
Subject key identifier: F1:08:CA:EE:D9:8B:7C:26:6E:83:3D:ED:86:EC:A6:47:37:D4:18:F5
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 485951385D651E4F45253E1C7C4F9F0B9E095093
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS200240.roa
Signing time: Wed 04 Nov 2026 20:32:54 +0000
ROA not before: Wed 04 Nov 2026 20:27:54 +0000
ROA not after: Wed 03 Nov 2027 20:32:54 +0000
asID: 200240
IP address blocks: 2a0e:8f02:f052::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:59:51:38:5d:65:1e:4f:45:25:3e:1c:7c:4f:9f:0b:9e:09:50:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 20:27:54 2026 GMT
Not After : Nov 3 20:32:54 2027 GMT
Subject: CN=F108CAEED98B7C266E833DED86ECA64737D418F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:58:aa:12:25:8c:82:ae:00:4d:90:6d:cf:e4:
f8:18:9e:ca:91:a4:92:a8:30:25:b6:7f:11:d3:75:
17:1a:12:2d:68:f2:1f:4a:c8:0b:b2:5c:e4:23:37:
81:bd:b5:c6:f6:e8:cc:2c:e8:8a:72:e9:18:f8:4b:
4e:97:69:21:53:cf:ae:5f:6d:16:32:80:91:58:b4:
25:bb:03:b0:d9:6f:44:05:5f:22:fd:fb:ca:cb:22:
23:14:f8:80:8a:cf:c3:ff:ae:9d:06:24:ee:e1:44:
0d:b2:66:5f:f8:69:24:be:5f:a0:4d:5a:54:e4:30:
b9:37:c1:81:d3:e4:d4:17:a3:e7:4c:3d:d1:46:f6:
65:4e:51:6d:0f:7b:2a:02:9f:de:95:5d:7d:35:3f:
56:3b:6b:4b:e3:8b:ed:65:7f:b6:04:00:04:85:45:
e6:a6:0d:d3:4d:18:b2:5d:65:2b:9f:4a:f5:40:0e:
9c:db:93:31:73:b0:a7:5a:dd:1c:4e:a1:cc:4c:fe:
10:b5:20:ce:c8:02:b6:23:27:9c:d6:f1:f0:86:99:
4a:af:ae:e0:cc:7f:7d:cf:f2:82:84:63:10:51:77:
a8:a7:4f:cc:ac:88:1c:67:63:90:d9:fd:e4:07:cc:
e4:bf:e4:c7:5a:04:df:c3:a6:1a:a7:f9:97:da:9d:
c7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:08:CA:EE:D9:8B:7C:26:6E:83:3D:ED:86:EC:A6:47:37:D4:18:F5
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS200240.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f052::/48
Signature Algorithm: sha256WithRSAEncryption
2a:0a:f2:f3:41:72:0d:b2:e1:83:cc:05:c6:27:63:1b:4a:4f:
8a:8f:64:35:da:cb:02:93:f1:d0:64:a3:22:59:da:d1:17:10:
54:49:1b:8f:89:ca:be:46:f3:ab:f9:4e:1b:d0:05:a7:da:44:
fc:45:1a:c9:26:18:02:5a:91:91:6e:a1:21:e9:c5:39:bd:af:
ca:28:c0:d0:8f:ac:fd:b5:36:bb:10:40:3a:ed:ae:83:50:8b:
ad:a6:ec:d5:8a:56:ad:19:2d:5b:fc:24:c2:40:c3:77:98:4d:
df:04:64:32:d9:71:05:05:2a:e1:3a:3e:b8:89:ca:ad:b2:d2:
4b:a2:50:91:2d:5d:6e:47:e2:8c:68:34:09:c7:e0:7a:80:d6:
8b:d1:d3:6a:80:4f:42:1f:a6:e3:bc:26:d1:81:66:7a:8b:6b:
d1:9e:f3:bf:27:65:6c:24:25:dc:d2:bb:10:fa:a0:84:23:3f:
7c:c5:b9:d5:fe:ba:71:c5:0d:9b:22:d2:24:b3:42:4e:1c:bb:
05:2f:7a:41:64:a4:9e:cc:69:43:3e:24:6f:4d:8e:9d:bf:92:
b0:c6:e0:17:a7:d0:0c:42:ff:c1:40:18:9d:d4:3a:0d:aa:d4:
a1:0c:5b:00:5e:45:21:f3:2b:83:87:3d:64:e7:cd:fe:1e:50:
fd:de:72:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 07:59:09 2026 by rpki-client