Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200841.roa
File: AS200841.roa (raw, json)
Hash identifier: E5MBAEGM3C4l5fcpfD5NxeAzF2dD3sAalw8wIZbRw9M=
Subject key identifier: 4B:55:17:96:B8:DC:DB:9D:62:5F:DB:63:A0:52:B3:EC:CC:FC:C9:A5
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 56B2C445D8FD9BE307475773CC7DDF4B030C1DBA
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200841.roa
Signing time: Thu 10 Sep 2026 22:08:50 +0000
ROA not before: Thu 10 Sep 2026 22:03:50 +0000
ROA not after: Thu 09 Sep 2027 22:08:50 +0000
asID: 200841
IP address blocks: 178.83.7.0/24 maxlen: 24
178.83.8.0/24 maxlen: 24
178.83.20.0/24 maxlen: 24
178.83.21.0/24 maxlen: 24
178.83.124.0/24 maxlen: 24
178.83.125.0/24 maxlen: 24
178.83.126.0/24 maxlen: 24
178.83.127.0/24 maxlen: 24
178.83.134.0/24 maxlen: 24
178.83.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:b2:c4:45:d8:fd:9b:e3:07:47:57:73:cc:7d:df:4b:03:0c:1d:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 10 22:03:50 2026 GMT
Not After : Sep 9 22:08:50 2027 GMT
Subject: CN=4B551796B8DCDB9D625FDB63A052B3ECCCFCC9A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:06:2d:a7:d9:40:f2:7e:b8:00:e9:3a:76:1c:
58:70:54:a4:4b:0a:06:78:49:c5:e9:b0:c0:b3:fd:
8a:6e:8c:74:a0:13:c6:a8:49:77:d8:68:4f:20:65:
4d:a1:ec:ba:4b:db:e6:b2:ca:60:1e:d4:a7:d3:c4:
ba:c9:3f:f8:98:ff:5c:a2:d5:f0:e3:bf:fd:1f:42:
b5:3d:6c:14:d9:b6:8d:9c:66:b8:9f:68:28:b4:58:
e1:ca:73:4c:d7:cd:59:ab:37:35:3f:23:55:ad:4b:
3c:3a:b8:c5:c8:eb:f1:9c:79:42:a8:0c:38:86:32:
69:1d:22:d9:92:ed:d7:8c:3a:fd:2c:09:6e:0c:ae:
01:3a:39:08:08:17:c6:45:79:24:bc:84:70:5c:ee:
23:26:77:40:e1:2f:99:22:bf:36:62:bf:a0:37:c5:
d7:d5:b6:26:6d:9e:35:74:44:33:05:18:bf:84:6c:
32:bb:d7:e4:6d:e8:41:26:39:b4:fb:d6:01:35:af:
a2:43:88:cf:40:ac:b2:4c:12:dc:36:7c:21:fc:40:
3a:ae:6f:4a:23:d4:8a:95:4d:d8:e1:1d:11:86:ff:
77:03:56:98:4c:60:c6:ff:27:da:2d:86:7d:86:cd:
32:59:82:64:a6:d0:f0:f6:29:24:8d:c3:ff:e9:54:
eb:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:55:17:96:B8:DC:DB:9D:62:5F:DB:63:A0:52:B3:EC:CC:FC:C9:A5
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200841.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.7.0-178.83.8.255
178.83.20.0/23
178.83.124.0/22
178.83.134.0/24
178.83.244.0/24
Signature Algorithm: sha256WithRSAEncryption
21:a3:ee:b0:a3:c2:6d:68:ed:08:34:a4:f6:c9:7a:1f:10:eb:
4a:5d:74:ed:af:78:1c:f7:8b:c8:fb:c9:17:f9:37:31:3e:eb:
c1:7d:ed:f4:db:b4:59:7c:b5:41:ce:1c:2e:16:66:f2:f5:8e:
c1:ab:2c:89:60:59:ef:95:c8:a5:e3:d0:88:90:06:f4:55:8d:
fa:18:c3:af:70:c3:95:c7:8c:33:ad:3e:b6:f3:e7:ec:cd:8e:
f7:af:9e:01:dc:9c:93:11:ac:5a:13:78:5f:46:c8:d3:89:dc:
f2:b2:2f:ad:7e:0d:7d:9a:8b:29:a3:3c:d1:01:6e:32:e5:70:
0f:4c:bd:f8:3a:8b:9d:ff:54:c2:43:d9:c6:d2:74:cc:67:13:
0b:28:96:11:cd:e7:d0:d3:61:db:79:1f:d8:60:50:95:75:35:
12:61:1a:e0:dd:64:db:e0:e1:c7:e5:a1:63:4b:8d:80:14:f4:
13:8a:77:ad:12:ad:d0:e8:c2:01:a9:d6:49:69:b6:70:8b:9e:
01:34:be:7a:a5:43:e3:8f:9b:fe:1c:14:0d:e6:f4:4b:a2:a0:
e3:f7:26:bc:e1:77:53:11:cb:8c:86:d3:46:88:e3:94:ab:ce:
09:5a:d2:26:bd:74:0f:70:ab:4c:bd:8e:4f:b8:94:0e:48:97:
fe:0d:9a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:03:00 2026 by rpki-client