Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200636.roa
File: AS200636.roa (raw, json)
Hash identifier: yDja3XkRwk8bOUQw0q0n6NoV0mxfp+PiTmJflAXFtdM=
Subject key identifier: 32:56:AA:00:7D:F3:5D:CE:81:E7:28:4E:B7:2C:0E:20:44:28:59:98
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 64298D84D940A11FF18F011A26DFB1A2F15E4E7E
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200636.roa
Signing time: Mon 09 Nov 2026 08:49:41 +0000
ROA not before: Mon 09 Nov 2026 08:44:41 +0000
ROA not after: Mon 08 Nov 2027 08:49:41 +0000
asID: 200636
IP address blocks: 82.24.85.0/24 maxlen: 24
82.24.111.0/24 maxlen: 24
82.24.113.0/24 maxlen: 24
2a13:9500:e1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 16:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:29:8d:84:d9:40:a1:1f:f1:8f:01:1a:26:df:b1:a2:f1:5e:4e:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Nov 9 08:44:41 2026 GMT
Not After : Nov 8 08:49:41 2027 GMT
Subject: CN=3256AA007DF35DCE81E7284EB72C0E2044285998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:79:b7:4f:65:20:87:e5:6d:2b:2d:4c:80:a5:
2f:9e:a1:c5:3a:b4:91:75:33:b0:1e:41:15:dd:bc:
2e:23:74:65:0d:02:35:0b:e7:54:70:ec:6b:0b:19:
58:18:f4:6a:a3:48:51:3b:1c:be:a7:01:a3:13:62:
2c:64:21:3e:53:06:48:4e:97:51:eb:08:5e:51:d6:
ca:b4:60:ec:6a:e3:d3:57:f0:92:ff:b7:45:d8:da:
f4:57:e8:ba:9d:5f:dc:a4:eb:20:bb:9f:3b:19:60:
44:75:a0:84:79:3b:33:24:cd:62:6c:92:b9:f1:de:
87:12:cd:1d:a2:df:99:51:ac:9b:16:c8:a4:69:8d:
d9:e0:b0:51:1e:bf:de:1d:95:c1:12:94:bf:f6:a7:
90:98:a0:58:ed:9b:79:bc:df:29:0b:cc:f4:bd:74:
1f:8a:36:23:6f:7c:ec:8c:d5:88:0f:b9:b8:07:22:
4b:09:b8:86:8a:c9:16:74:1e:9c:71:bf:a1:ca:06:
a7:49:92:fe:b1:d3:c3:d4:19:2a:de:e1:75:c9:9e:
06:97:63:98:7a:12:fb:89:7d:df:f8:a4:ce:65:3c:
10:76:06:e2:0c:b0:97:ac:d7:28:30:7a:1e:c8:cc:
ac:b2:97:89:5f:0c:ef:fd:6e:1a:37:c4:b9:2e:09:
64:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:56:AA:00:7D:F3:5D:CE:81:E7:28:4E:B7:2C:0E:20:44:28:59:98
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.24.85.0/24
82.24.111.0/24
82.24.113.0/24
IPv6:
2a13:9500:e1::/48
Signature Algorithm: sha256WithRSAEncryption
63:8c:56:9a:8e:f5:20:ab:70:39:92:dd:1e:07:3d:d8:3f:43:
f4:9e:24:b5:e6:bd:a4:37:87:42:0b:45:b9:93:06:8b:7e:8c:
82:29:98:b1:e4:cb:4d:e4:6c:7c:ef:79:48:fe:2a:1c:63:f9:
af:2e:9e:e2:9b:73:6b:44:ca:98:c4:65:38:a7:f4:00:4b:45:
7c:81:ba:ff:fd:a4:44:fe:bf:65:71:17:8d:11:e9:2f:38:01:
89:4f:2d:0d:34:b9:28:44:22:77:8a:31:2f:91:25:6f:4b:67:
0c:ff:77:4f:91:05:8a:f8:96:30:35:37:14:b8:78:28:cf:d2:
df:44:4f:aa:06:10:f5:a3:ed:93:c1:a9:bf:f8:e5:c4:f4:c9:
81:e4:21:ba:75:d8:23:a8:93:48:83:6f:75:06:82:c2:25:93:
20:67:59:ca:10:95:2f:c6:b7:b5:aa:ad:e3:eb:88:85:8b:a8:
d2:8b:a5:8d:11:80:e9:4a:fa:61:07:95:88:38:c0:95:35:3d:
4e:c7:2c:54:6b:6f:3f:99:6b:89:13:4c:cc:25:eb:24:f9:2e:
e0:00:40:c2:76:ca:2b:86:fe:e0:fe:51:3c:f1:b6:4f:c2:cb:
f1:c7:79:59:2c:8c:e0:91:87:43:ad:a2:4e:b9:1c:e5:7a:a6:
f0:bd:98:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 20:10:22 2026 by rpki-client