Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200221.roa
File: AS200221.roa (raw, json)
Hash identifier: NWZgYrnVXq2Ns/VKuVfhLErf7Jo1ax3EXdFexg8sP98=
Subject key identifier: DC:E6:AA:C3:57:D1:1B:7F:8D:33:34:C3:41:CA:51:79:A5:4D:D8:42
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 527A749F21B451B90C5E6ED4558597561C5E9595
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200221.roa
Signing time: Fri 05 Jun 2026 07:43:50 +0000
ROA not before: Fri 05 Jun 2026 07:38:50 +0000
ROA not after: Fri 04 Jun 2027 07:43:50 +0000
asID: 200221
IP address blocks: 82.47.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 15:07:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:7a:74:9f:21:b4:51:b9:0c:5e:6e:d4:55:85:97:56:1c:5e:95:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 5 07:38:50 2026 GMT
Not After : Jun 4 07:43:50 2027 GMT
Subject: CN=DCE6AAC357D11B7F8D3334C341CA5179A54DD842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:01:81:f5:5b:d0:05:8b:64:df:51:cd:a9:78:
f0:10:96:66:ac:30:0e:a2:7d:42:00:c0:49:37:25:
42:d6:9b:84:de:11:3b:03:e4:83:de:12:54:c7:2a:
c6:ab:cd:d8:e9:70:67:cb:75:f7:db:f9:32:e9:c8:
55:30:9a:1f:99:e9:ec:0d:24:71:47:ae:32:26:3d:
42:f9:30:5a:18:07:81:ea:5d:55:ae:b9:c4:9a:3f:
25:66:31:e8:b7:b9:af:01:bb:e9:f4:1d:67:15:3c:
0e:b2:23:f5:81:90:c6:21:08:a7:1f:eb:f9:1b:53:
a1:4a:3a:96:19:6c:3a:95:32:32:bd:be:3b:a9:fb:
c0:b5:3f:41:7d:ac:93:8c:a8:9c:e6:81:3c:df:5c:
fe:e6:e8:d3:a5:fc:ea:a5:f5:c0:4b:7c:0f:d1:2b:
5d:fa:2a:97:68:b7:ff:60:f6:0d:ec:5d:64:35:8c:
31:7b:5f:c8:e9:77:1a:61:17:43:5d:55:6e:80:37:
bb:97:01:5c:f4:a5:51:af:34:ef:7c:75:f3:77:d5:
c6:15:b7:f7:8a:fd:33:17:52:d4:39:99:c1:02:b4:
36:89:0d:b2:ce:4b:9c:bd:13:28:da:c8:5c:a1:38:
cb:f9:d9:3c:35:dd:ca:81:30:01:cc:09:e9:44:bb:
88:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E6:AA:C3:57:D1:1B:7F:8D:33:34:C3:41:CA:51:79:A5:4D:D8:42
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200221.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.47.195.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:c5:41:c7:35:d4:de:64:2b:2d:69:7f:4d:cf:af:d7:14:de:
12:64:43:f0:c6:9e:4a:e4:7a:e8:e2:09:bf:19:63:db:41:0a:
ca:49:cc:ed:15:dc:d2:f9:df:f5:5d:48:5f:21:84:e5:df:8d:
55:16:da:e4:b1:9d:72:29:2f:b4:2a:c8:46:1f:2c:1c:69:e1:
75:95:0d:5c:dc:b3:bc:18:e6:28:6b:2e:02:80:d2:28:d7:0d:
42:0e:ff:e2:57:ca:ab:1d:a1:41:67:eb:b7:b7:7e:c4:c2:80:
21:a4:f9:fc:b2:30:14:f4:98:ff:f2:32:d2:86:88:15:ae:f8:
65:66:16:76:8d:79:19:c0:a1:0b:c3:e9:de:47:ba:2a:62:18:
31:a0:ca:bc:27:c3:3b:63:b5:2c:83:01:f8:c7:62:18:40:e2:
90:be:71:a6:84:2e:fe:a0:46:63:4a:62:f7:ad:e9:8c:82:8a:
6b:5b:a2:4c:98:b3:9f:70:ae:5a:08:35:f5:22:2b:3d:99:88:
84:90:73:b2:b9:f7:e9:8c:1e:89:23:fa:02:f9:99:1b:14:f4:
c4:5e:09:d7:e0:d1:a9:2c:2e:a3:ac:03:1c:e6:f7:4e:4f:18:
43:78:ae:32:ec:92:6d:ef:68:a1:74:99:87:5e:f4:b1:81:f6:
f2:81:c1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:34:50 2026 by rpki-client