Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200105.roa
File: AS200105.roa (raw, json)
Hash identifier: L816ZlAYNWbI2K1oRY1sa/oRa6Uol/FQaEI5vj/Krkc=
Subject key identifier: 6A:A7:17:2B:A2:F6:C7:6D:BC:36:8B:F0:99:B4:05:D8:97:D3:3C:A8
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 53C5ABA62977B27D1DF578ABB3035D4DE69A7C8A
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200105.roa
Signing time: Tue 07 Apr 2026 13:28:37 +0000
ROA not before: Tue 07 Apr 2026 13:23:37 +0000
ROA not after: Tue 06 Apr 2027 13:28:37 +0000
asID: 200105
IP address blocks: 82.39.160.0/24 maxlen: 24
82.41.198.0/24 maxlen: 24
82.41.232.0/24 maxlen: 24
84.75.130.0/24 maxlen: 24
84.75.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:c5:ab:a6:29:77:b2:7d:1d:f5:78:ab:b3:03:5d:4d:e6:9a:7c:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 7 13:23:37 2026 GMT
Not After : Apr 6 13:28:37 2027 GMT
Subject: CN=6AA7172BA2F6C76DBC368BF099B405D897D33CA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:67:cf:82:08:2f:a6:cb:fe:50:a4:29:50:50:
c9:80:1d:4a:9e:c6:eb:fd:4a:fe:0e:fa:af:6c:7e:
10:6b:52:f4:fb:63:bb:42:d0:88:58:b1:f4:f5:ed:
c0:bd:2c:c6:31:b7:9a:12:e7:8c:2a:f3:4e:29:3a:
f6:f3:a3:6f:cb:0a:7a:d0:ff:82:66:b1:3a:19:f9:
85:57:59:b4:21:34:9f:24:86:37:b5:40:88:d9:6a:
60:59:fb:79:9b:60:ea:ef:c0:e4:e6:f8:41:22:47:
21:f5:c7:ab:e6:b2:32:7f:28:57:26:0c:c6:d7:1a:
fc:9d:01:38:79:42:62:24:41:ef:51:60:80:ff:5c:
52:1b:3d:9d:34:2b:25:be:ce:08:99:00:7a:f6:12:
16:cc:e8:7f:70:05:50:ca:5b:a1:5a:46:ab:c7:31:
81:02:cb:ed:d4:d9:35:b8:50:07:63:28:bc:69:a3:
0f:96:a0:8a:2a:5c:94:88:0c:c1:92:51:6e:3f:a0:
22:12:3c:e4:34:d1:db:a2:8f:6c:62:f8:4e:be:6b:
44:3e:ac:97:72:87:be:fe:05:4d:07:cd:90:cb:ea:
56:fa:94:0c:0f:e6:98:0e:c9:e1:32:98:51:6a:7c:
e8:41:a0:a0:66:4f:a2:cd:56:cb:85:a1:5d:ea:e0:
40:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A7:17:2B:A2:F6:C7:6D:BC:36:8B:F0:99:B4:05:D8:97:D3:3C:A8
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200105.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.39.160.0/24
82.41.198.0/24
82.41.232.0/24
84.75.130.0/24
84.75.135.0/24
Signature Algorithm: sha256WithRSAEncryption
60:21:06:a9:43:c6:2e:75:f8:35:53:19:28:bf:23:3d:20:c6:
8d:4f:79:6b:6a:5b:2c:27:75:e3:5e:b2:dd:3e:f2:1f:40:5d:
a3:53:7c:92:cd:fd:ef:05:c5:bc:c5:9f:63:5a:4d:76:6a:ca:
75:35:59:78:f3:f5:04:72:95:e2:b7:9b:72:8b:03:23:b3:d7:
3c:58:25:72:8f:0d:00:ce:04:e8:33:15:72:a1:97:d8:cb:68:
9c:55:a8:74:94:f8:df:4c:48:8d:93:2d:77:16:df:80:ea:e7:
4d:e5:5b:63:bb:4f:bc:16:32:a4:82:5d:0b:a1:d1:66:98:2d:
66:10:c6:16:e4:46:b8:db:43:b5:6c:d9:0e:0c:ce:9c:bc:56:
0d:86:23:78:36:93:e7:6f:33:8c:d5:3e:d2:4a:4c:fe:0d:a3:
2a:58:97:b9:3a:1a:c8:c6:f5:eb:6b:03:b9:74:ea:5d:6e:aa:
ab:24:5b:86:a9:22:45:79:1a:f3:48:62:c4:ad:9e:96:3a:ca:
1a:8a:63:9b:b3:1e:e7:64:d4:a7:1f:49:c8:ca:c5:30:89:8d:
d2:61:6a:11:48:a1:82:52:a9:c6:7c:f5:63:c9:c9:e0:e6:36:
72:de:93:d1:da:69:11:d0:70:c3:31:b3:30:ed:a5:f9:ce:c2:
97:33:3f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:00:07 2026 by rpki-client