Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS200464.roa
File: AS200464.roa (raw, json)
Hash identifier: Kxg7t2ztlWuYi/Dspza1AnFBpSZQnUj+N6PXCRhcESo=
Subject key identifier: 29:14:A7:07:37:7D:54:19:A6:7F:AD:63:C9:8D:4F:42:8F:CA:9A:38
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 48E27641306569F2920E63B33890025B1BD45AEC
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS200464.roa
Signing time: Wed 09 Sep 2026 00:34:42 +0000
ROA not before: Wed 09 Sep 2026 00:29:42 +0000
ROA not after: Wed 08 Sep 2027 00:34:42 +0000
asID: 200464
IP address blocks: 2a14:7581:ffa::/48 maxlen: 48
2a14:7583:e700::/40 maxlen: 48
2a14:7583:e700::/41 maxlen: 48
2a14:7583:e700::/48 maxlen: 48
2a14:7583:e703::/48 maxlen: 48
2a14:7583:e705::/48 maxlen: 48
2a14:7583:e710::/44 maxlen: 48
2a14:7583:e780::/41 maxlen: 48
2a14:7583:e7fe::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:e2:76:41:30:65:69:f2:92:0e:63:b3:38:90:02:5b:1b:d4:5a:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Sep 9 00:29:42 2026 GMT
Not After : Sep 8 00:34:42 2027 GMT
Subject: CN=2914A707377D5419A67FAD63C98D4F428FCA9A38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:02:f3:c8:d5:fc:4f:2f:b8:32:ef:cf:89:a0:
27:44:44:e6:18:24:fa:55:14:1f:80:e2:32:46:76:
d6:b3:49:9a:da:ff:94:8c:fd:4b:61:cf:2b:1b:82:
6d:d2:6b:44:1b:7f:63:55:34:cc:79:e7:ad:38:9c:
49:2c:8e:7c:63:08:23:52:fa:25:93:f9:7d:fc:87:
fe:88:d0:af:66:65:83:4c:24:d8:78:b0:c7:17:c5:
a5:03:e1:e2:dc:04:a0:87:6a:60:ea:aa:64:3b:c5:
81:53:a9:93:bd:43:95:fe:95:e4:f5:86:ad:26:cf:
d7:d3:91:d5:80:a0:b2:80:51:0b:02:fb:a6:16:4d:
54:f0:ce:95:32:ce:c1:4a:21:f9:c9:03:10:73:29:
d9:0a:2e:25:df:eb:c3:f7:c8:a4:b1:e3:c2:f3:43:
67:fb:89:87:59:ba:19:a5:aa:0c:54:a2:e1:42:50:
e5:95:f2:aa:5a:80:2a:c8:4e:e4:d0:bf:b9:a3:be:
1d:6f:bc:4d:c6:94:62:6e:2d:e0:6d:e7:4e:31:41:
6d:2f:d4:51:53:48:d8:11:d5:64:af:e5:bd:65:9a:
93:e7:50:af:f3:1f:cc:fb:d5:a6:e9:c0:ae:b0:a2:
91:06:d1:53:02:4a:7f:5c:03:e4:1e:30:06:4a:8d:
f0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:14:A7:07:37:7D:54:19:A6:7F:AD:63:C9:8D:4F:42:8F:CA:9A:38
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS200464.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:ffa::/48
2a14:7583:e700::/40
Signature Algorithm: sha256WithRSAEncryption
20:04:38:45:11:a2:9d:32:4f:4c:09:37:d8:3c:72:62:24:c0:
86:c9:38:f9:ca:bb:94:19:70:84:a6:4a:2c:59:1e:a4:e9:91:
1c:9e:a8:bd:6a:f8:f1:ca:96:01:5e:8b:1b:61:c7:5e:0f:47:
72:01:cb:e7:69:eb:aa:b7:41:02:ec:74:62:3f:74:47:50:60:
f2:0d:1e:aa:c1:c6:51:fb:52:ab:4c:bf:3d:cf:4b:4f:0d:0f:
bf:73:14:7c:0f:d7:27:18:65:c9:8a:35:d1:cd:25:2f:56:2a:
16:75:76:8c:26:b2:fd:7c:46:43:18:cf:40:b3:e9:f3:d5:5d:
f9:60:37:d0:46:0f:55:3a:21:bd:ac:9d:5d:0b:16:e2:ee:ae:
0b:0c:24:31:3d:1f:29:78:d3:f1:98:3b:7e:c5:53:65:ca:43:
81:22:49:ab:c1:ee:37:0d:05:d6:ca:e8:10:cb:f2:95:77:c8:
b0:e2:3b:29:e5:82:e4:94:c7:98:4a:03:9f:d8:47:2d:b2:88:
d3:f2:62:c9:eb:78:4c:53:04:8c:f8:3c:31:35:91:48:a0:5a:
b1:89:38:72:ab:48:03:be:2a:91:5d:ff:23:da:d9:67:56:f2:
e5:2e:31:38:a4:1e:1e:18:3b:18:86:b0:2e:32:64:7e:dc:b2:
68:60:1d:e1
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIUSOJ2QTBlafKSDmOzOJACWxvUWuwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNjA5MDkwMDI5NDJaFw0yNzA5MDgwMDM0NDJaMDMxMTAvBgNV
BAMTKDI5MTRBNzA3Mzc3RDU0MTlBNjdGQUQ2M0M5OEQ0RjQyOEZDQTlBMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSAvPI1fxPL7gy78+JoCdEROYY
JPpVFB+A4jJGdtazSZra/5SM/Uthzysbgm3Sa0Qbf2NVNMx55604nEksjnxjCCNS
+iWT+X38h/6I0K9mZYNMJNh4sMcXxaUD4eLcBKCHamDqqmQ7xYFTqZO9Q5X+leT1
hq0mz9fTkdWAoLKAUQsC+6YWTVTwzpUyzsFKIfnJAxBzKdkKLiXf68P3yKSx48Lz
Q2f7iYdZuhmlqgxUouFCUOWV8qpagCrITuTQv7mjvh1vvE3GlGJuLeBt504xQW0v
1FFTSNgR1WSv5b1lmpPnUK/zH8z71abpwK6wopEG0VMCSn9cA+QeMAZKjfAXAgMB
AAGjggIVMIICETAdBgNVHQ4EFgQUKRSnBzd9VBmmf61jyY1PQo/KmjgwHwYDVR0j
BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz
ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16
OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt
NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjAwNDY0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwcAKhR1
gQ/6AwYAKhR1g+cwDQYJKoZIhvcNAQELBQADggEBACAEOEURop0yT0wJN9g8cmIk
wIbJOPnKu5QZcISmSixZHqTpkRyeqL1q+PHKlgFeixthx14PR3IBy+dp66q3QQLs
dGI/dEdQYPINHqrBxlH7UqtMvz3PS08ND79zFHwP1ycYZcmKNdHNJS9WKhZ1dowm
sv18RkMYz0Cz6fPVXflgN9BGD1U6Ib2snV0LFuLurgsMJDE9Hyl40/GYO37FU2XK
Q4EiSavB7jcNBdbK6BDL8pV3yLDiOynlguSUx5hKA5/YRy2yiNPyYsnreExTBIz4
PDE1kUigWrGJOHKrSAO+KpFd/yPa2WdW8uUuMTikHh4YOxiGsC4yZH7csmhgHeE=
-----END CERTIFICATE-----
Generated at Mon Sep 21 12:02:48 2026 by rpki-client