Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200660.roa
File: AS200660.roa (raw, json)
Hash identifier: +eSDIeE9vPvgFp/Roc3q7x/D8OCVjZhxdTyk7ruqiCY=
Subject key identifier: DF:20:EC:62:5B:42:B4:AB:39:73:43:02:C1:F6:1F:62:10:E5:D5:3E
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 3054B6DAB98DEF36C44B10BCDAE8C35DB2F8F89D
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200660.roa
Signing time: Tue 28 Jul 2026 13:28:37 +0000
ROA not before: Tue 28 Jul 2026 13:23:37 +0000
ROA not after: Tue 27 Jul 2027 13:28:37 +0000
asID: 200660
IP address blocks: 82.25.36.0/24 maxlen: 24
82.27.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:54:b6:da:b9:8d:ef:36:c4:4b:10:bc:da:e8:c3:5d:b2:f8:f8:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 28 13:23:37 2026 GMT
Not After : Jul 27 13:28:37 2027 GMT
Subject: CN=DF20EC625B42B4AB39734302C1F61F6210E5D53E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:1d:67:cf:88:8e:cf:0d:c6:6a:4b:5b:8b:da:
d2:4b:f0:49:44:6c:1d:ce:d6:24:1c:fd:3b:0f:42:
93:1f:31:eb:ca:b4:b7:80:a1:00:73:7e:3a:9f:2f:
45:0e:0e:3a:09:6c:c2:7a:ce:36:b1:23:f0:fc:12:
10:ff:e3:af:8b:0b:0e:bd:04:59:6c:11:2d:15:a2:
62:d1:60:44:91:6f:8d:03:95:09:57:c1:e5:64:82:
0c:6c:0c:a7:00:9f:46:0f:11:de:b2:7b:52:b1:fb:
9b:7d:e5:0b:10:ac:c8:ab:bc:88:09:c4:94:d0:e5:
3c:e5:83:bd:e9:78:25:2c:ad:1a:ee:e9:b6:e6:aa:
fd:97:a7:90:06:b7:ad:a0:e7:52:7d:bd:9d:fe:42:
06:0b:5d:97:8f:78:a7:8d:76:c4:23:08:99:3c:32:
c8:bf:de:2f:1a:19:8c:62:bd:87:1c:6b:76:63:3e:
69:63:af:e5:f2:ca:1f:09:df:e2:c3:c0:b7:49:9e:
5c:18:14:fc:56:71:aa:71:a9:30:e0:f4:bd:e2:3f:
66:db:2e:c0:62:27:ae:9a:4a:cd:6a:f0:aa:33:20:
07:6f:29:5a:aa:95:34:3f:0f:50:de:a9:b5:df:33:
fb:65:e2:6e:6c:24:69:c5:5e:b0:7e:d2:70:01:7c:
e6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:20:EC:62:5B:42:B4:AB:39:73:43:02:C1:F6:1F:62:10:E5:D5:3E
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200660.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.25.36.0/24
82.27.3.0/24
Signature Algorithm: sha256WithRSAEncryption
95:08:d9:b6:47:82:69:05:92:b6:31:30:48:68:89:6f:e6:d7:
a5:7d:70:37:ca:41:a4:c7:73:2e:e1:41:7d:c5:40:bc:de:f1:
10:41:76:a2:64:74:c2:7e:9e:33:18:9f:4d:37:d3:43:4a:50:
42:6e:c1:6f:a0:bc:21:dc:95:06:dc:15:bc:58:97:2f:bf:95:
90:81:55:18:21:90:66:67:64:1d:71:c9:98:4e:64:fb:ba:e3:
50:2c:f4:62:82:1e:02:f7:0f:df:f0:d2:ac:21:36:96:ea:4b:
14:f4:6f:4f:b7:09:09:8e:86:81:f2:57:7f:c5:8c:e2:f9:ac:
e7:ab:19:37:8a:c0:c9:2d:fc:9e:74:1b:99:9e:7a:99:70:ac:
7e:a1:1d:a0:12:d3:77:ef:b0:42:e1:3a:f4:5a:fc:71:3b:25:
67:16:93:de:dd:50:5a:6a:ae:01:51:6d:8c:6c:11:f6:40:33:
2d:b8:e3:d9:0d:40:00:1a:2b:9b:3f:48:a1:7b:08:36:65:ba:
2a:3b:ef:a5:e7:8c:53:7c:7c:8d:79:d7:0d:24:07:78:77:95:
72:35:cd:60:0d:cf:06:35:a4:b3:b6:c9:82:e9:b8:57:8d:e9:
bd:9d:bf:8d:37:3f:9f:ea:12:22:41:88:a6:f8:ec:5c:bf:85:
b0:c1:f2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:03:16 2026 by rpki-client