Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS200728.roa
File: AS200728.roa (raw, json)
Hash identifier: N8a8nIccthfro6JB6mb+sPO814NvQThfvo7GWOpXfHo=
Subject key identifier: 21:EF:96:8B:F2:BE:7F:44:8E:41:AC:EC:E4:21:54:57:8D:B0:C4:CB
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 443F6662626E25DF8F10B8E84ECCA13E9D78BF51
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS200728.roa
Signing time: Wed 04 Nov 2026 20:32:50 +0000
ROA not before: Wed 04 Nov 2026 20:27:50 +0000
ROA not after: Wed 03 Nov 2027 20:32:50 +0000
asID: 200728
IP address blocks: 2a0e:8f02:2180::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 00:14:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:3f:66:62:62:6e:25:df:8f:10:b8:e8:4e:cc:a1:3e:9d:78:bf:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 20:27:50 2026 GMT
Not After : Nov 3 20:32:50 2027 GMT
Subject: CN=21EF968BF2BE7F448E41ACECE42154578DB0C4CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:43:fc:9a:fb:d2:f6:fc:63:75:9c:1b:56:c8:
70:b0:8c:b6:8d:36:55:71:7a:a4:1b:77:e9:01:e7:
93:a0:07:92:77:8d:0d:96:15:56:df:3e:92:8d:82:
2c:fe:91:af:0a:ff:77:0e:f9:c2:a0:77:0d:52:06:
52:4f:d9:a1:ce:ff:2b:1a:a3:71:d7:d8:2f:95:1e:
e2:1c:25:ce:18:04:f4:52:2e:2f:87:43:fb:d7:47:
dd:e4:42:ec:ed:36:ea:63:2a:79:aa:2e:4d:02:e7:
f0:69:f3:fe:1a:79:0e:8f:92:c6:f7:f7:0c:b2:f5:
2b:39:b3:1c:ca:32:6b:ab:14:41:a3:c2:6e:70:7b:
d7:65:36:d5:0e:97:db:9e:d8:84:9e:40:56:82:14:
2c:69:f7:0a:9e:07:d0:49:ca:d4:dd:ca:27:c8:9f:
ec:ea:76:e7:49:ba:34:46:4d:41:78:54:62:1a:52:
e5:d7:77:51:ef:03:46:9c:8f:76:f0:38:07:9e:cc:
b6:64:52:41:9a:55:1b:13:25:ad:0d:60:3b:0b:8d:
42:c0:f4:2d:e3:4e:16:aa:41:4a:73:ac:b2:f2:7d:
95:ca:1d:e0:96:d4:5f:22:27:06:6a:0b:57:5f:25:
79:71:83:e1:f6:ca:5c:28:21:ab:2d:b2:99:7a:5f:
1d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:EF:96:8B:F2:BE:7F:44:8E:41:AC:EC:E4:21:54:57:8D:B0:C4:CB
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS200728.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:2180::/44
Signature Algorithm: sha256WithRSAEncryption
62:ab:6c:15:8f:8a:a1:39:0f:b3:d1:61:18:a0:38:51:04:b6:
8b:11:88:87:c9:84:f9:b0:a0:79:0f:86:34:50:03:93:9c:1a:
16:4b:aa:3b:5c:44:d2:cc:c4:7a:a3:a3:91:f7:f4:42:59:f6:
65:f3:f8:10:a9:c0:31:ec:b9:9a:1d:85:e3:eb:8e:e8:62:6f:
c4:b7:71:6f:07:b5:47:12:9b:ac:12:c7:15:be:10:68:83:cb:
a0:b4:fc:16:92:dc:9e:da:6e:1d:17:6a:39:ea:25:6d:4b:c4:
8b:78:74:e6:95:87:b1:66:7e:bc:48:44:7c:cf:25:db:10:e0:
2e:20:c2:a1:cd:92:d5:f9:c5:63:d7:20:a5:f8:87:e6:e6:83:
a1:dc:41:d6:cc:e0:2a:a7:90:bb:a3:f3:be:6e:c7:80:1a:29:
19:72:47:a0:f9:d6:17:51:11:ff:2d:60:1d:39:5d:45:51:ba:
84:4c:35:33:e4:11:9a:5e:f1:e0:d2:27:05:b4:88:09:62:79:
d6:db:79:88:7d:ca:e9:e4:6e:b9:4f:18:23:a2:6a:52:7e:6f:
ca:4b:a7:92:e5:6c:2e:95:e8:d9:ac:67:1f:7f:22:c3:fe:50:
80:f0:d2:c7:76:e9:41:fe:af:9a:14:8f:36:83:48:4b:d9:fd:
80:59:a3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 12:31:42 2026 by rpki-client