Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS200950.roa
File: AS200950.roa (raw, json)
Hash identifier: 0dJx3kufR4ltSiSYLmfELeL2oIuh3zpGH+mUXTUtuCE=
Subject key identifier: E2:F5:74:CC:C5:7B:82:86:D2:46:FC:E8:63:33:64:54:20:46:AB:54
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 513711E0194D644C9E6C1651EE840F6E4CC58857
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS200950.roa
Signing time: Sat 12 Sep 2026 15:09:09 +0000
ROA not before: Sat 12 Sep 2026 15:04:09 +0000
ROA not after: Sat 11 Sep 2027 15:09:09 +0000
asID: 200950
IP address blocks: 2a0f:85c1:8d0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:37:11:e0:19:4d:64:4c:9e:6c:16:51:ee:84:0f:6e:4c:c5:88:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Sep 12 15:04:09 2026 GMT
Not After : Sep 11 15:09:09 2027 GMT
Subject: CN=E2F574CCC57B8286D246FCE8633364542046AB54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:69:e8:9e:b4:b5:0b:05:eb:d9:2f:40:d1:3a:
90:43:b9:ce:c6:dd:a7:14:28:c0:90:d9:1c:b8:23:
a5:58:69:3f:47:5c:d3:2f:e5:9d:8f:e3:69:ac:b9:
c2:c9:84:3f:3d:1f:a1:bb:58:c8:f0:56:1c:29:be:
96:ae:68:27:70:87:37:6a:e3:c3:27:f8:1d:ea:88:
c1:75:2e:ac:a4:1c:15:00:39:60:bc:58:70:6b:33:
08:d8:aa:36:21:02:0f:99:f8:b0:a6:09:9d:1d:7a:
00:07:79:79:dd:4f:71:30:f4:72:d5:c5:68:84:64:
11:e9:5d:57:4c:00:af:60:6c:d5:ed:3c:27:e2:36:
3a:61:10:a4:02:85:45:bc:a1:4a:29:38:2a:3d:37:
ec:6c:36:ab:32:26:c5:b6:3e:32:3f:b6:86:92:82:
68:30:ce:88:b3:bb:21:d9:97:d2:6d:1c:58:a7:4c:
a9:5d:93:d5:5c:0b:c6:13:15:11:60:a6:fa:cf:46:
a8:5e:80:e8:4d:84:84:7a:de:41:10:20:88:fa:39:
7a:c6:bc:d3:52:f5:b4:6b:46:91:74:2d:97:37:c7:
03:86:0b:e0:e9:c5:70:01:1e:45:9e:a9:f5:e1:1c:
92:49:92:c3:73:cb:87:47:56:61:d0:46:c4:1b:2b:
2a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F5:74:CC:C5:7B:82:86:D2:46:FC:E8:63:33:64:54:20:46:AB:54
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS200950.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:8d0::/44
Signature Algorithm: sha256WithRSAEncryption
bd:cd:42:c5:30:fe:ab:33:25:3f:a1:e5:af:6a:af:5f:e2:f3:
4d:96:98:83:46:e6:05:e1:da:65:f8:30:42:a4:0d:74:ad:00:
33:e8:c8:dd:d0:64:c9:90:fe:3d:25:f0:af:50:b9:dc:77:1b:
e6:d5:49:7b:77:1c:6e:1e:05:91:d0:55:50:3f:65:df:65:39:
ef:62:1b:f5:76:66:c3:bc:23:a9:26:c0:80:5f:87:cf:6f:ea:
83:aa:ba:8c:75:72:c0:ed:f8:2c:45:74:0b:83:ef:7a:54:4c:
28:5f:5d:4c:53:04:98:83:ae:3d:a4:c7:cb:14:1b:6c:cb:05:
cb:5f:cd:c3:d9:64:b0:f4:e4:c1:e3:44:34:c2:a5:83:a1:04:
1b:2c:88:ec:75:14:78:38:0b:be:a7:45:41:d9:8d:45:54:01:
01:67:f4:39:84:c6:f5:83:c5:88:5e:50:ad:89:53:93:c8:86:
26:91:5a:e0:3e:07:18:f0:f8:a1:b3:0e:79:ce:42:cd:0b:1b:
14:d7:42:73:30:b0:ee:14:1f:99:2e:1b:60:14:59:c1:17:d8:
b6:ec:60:87:09:1b:16:35:51:d7:0d:e5:9c:92:ee:76:a9:78:
3e:b2:13:04:b3:08:6b:3b:c9:fd:ef:81:46:43:d8:0f:cd:31:
b2:f6:f6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:36:02 2026 by rpki-client