Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS201640.roa
File: AS201640.roa (raw, json)
Hash identifier: XMyazSNP6DhkHSm9sWi+Blxk6GAONvTQqRe6x/VpYcY=
Subject key identifier: 9B:65:FB:2D:4E:52:74:8F:F1:2D:63:01:7E:53:D9:43:30:D2:9C:2C
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 1B143AD506A1CC61753003FF31F54A403E7449BA
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS201640.roa
Signing time: Sun 26 Jul 2026 16:06:38 +0000
ROA not before: Sun 26 Jul 2026 16:01:38 +0000
ROA not after: Sun 25 Jul 2027 16:06:38 +0000
asID: 201640
IP address blocks: 2a14:7584:2200::/39 maxlen: 39
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:14:3a:d5:06:a1:cc:61:75:30:03:ff:31:f5:4a:40:3e:74:49:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jul 26 16:01:38 2026 GMT
Not After : Jul 25 16:06:38 2027 GMT
Subject: CN=9B65FB2D4E52748FF12D63017E53D94330D29C2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:15:5b:e7:ce:3a:fc:b2:23:3a:76:14:ab:6b:
cd:3f:59:1d:51:77:33:39:87:12:87:e0:27:44:f4:
df:95:7e:27:d2:6e:70:d9:d0:fd:33:6f:b4:67:32:
76:11:78:55:1d:f5:a2:d1:64:72:a6:67:36:03:e6:
34:84:b5:7d:2a:0e:2c:54:0c:38:b7:c7:5a:ef:ed:
ad:06:bb:52:f6:97:c2:16:7a:67:91:a0:22:70:97:
08:b6:8a:ec:72:39:55:fa:fc:e8:55:34:2a:b1:7f:
b1:6c:b3:da:49:5a:1d:5d:19:b3:d7:4f:f7:65:c4:
35:75:98:ec:a7:10:6b:92:83:a1:47:f1:3f:d1:29:
bf:e0:65:7a:77:48:6e:ed:37:b1:64:b9:dd:10:f4:
11:a2:2c:68:ec:99:6b:27:7d:62:98:dd:32:c6:63:
72:b1:6a:28:b8:9b:de:e9:36:a4:c8:23:e9:24:66:
94:e9:e7:ef:c2:dc:f9:e5:bb:6d:91:45:a4:5c:c8:
bb:24:d7:89:cf:73:a4:6a:cc:fb:bb:d4:43:65:75:
ec:2f:9e:d6:d4:8b:71:a5:ea:8b:aa:96:1c:57:9a:
de:26:d1:6e:78:f8:69:8c:85:5d:52:8e:22:0f:ca:
1c:f5:f6:2e:92:d3:6f:ac:72:df:ad:22:76:1a:ce:
3b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:65:FB:2D:4E:52:74:8F:F1:2D:63:01:7E:53:D9:43:30:D2:9C:2C
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS201640.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:2200::/39
Signature Algorithm: sha256WithRSAEncryption
7a:dc:0e:c9:ed:eb:bd:cf:e5:98:72:b1:15:98:c5:ff:c9:69:
28:bb:cd:02:04:1e:1d:69:61:3f:98:84:0e:fe:91:80:ec:7a:
b6:48:43:7f:ab:f5:aa:ab:98:18:04:26:5e:1e:b8:d1:2d:69:
6a:09:33:e5:73:e8:9a:2c:89:4f:72:c7:a5:9a:07:cf:ac:57:
7f:0a:c9:c8:1c:60:1b:16:dd:e4:04:1e:e7:23:f2:9a:67:94:
b0:45:30:ee:3b:da:df:33:b5:50:31:f5:d7:dc:fc:b4:0a:fd:
64:da:65:47:90:67:18:d9:45:09:0a:d6:18:0d:db:8d:7c:ec:
35:60:13:89:51:14:5b:b1:c8:d3:5d:da:db:9c:80:47:e4:af:
17:7c:62:f5:5d:8a:d9:c1:91:f2:c0:3f:13:ff:e4:a7:22:29:
b2:c7:7c:8a:07:fc:af:92:7e:ca:fd:ed:98:c3:13:59:5d:bb:
18:04:a8:c7:26:d6:57:dc:88:01:cf:93:b4:4a:cc:32:b2:ed:
86:60:0c:af:0c:c0:2b:36:98:99:eb:50:9f:63:77:a7:3f:75:
5f:60:87:5d:db:9c:ed:a4:70:a2:bc:62:65:69:e6:71:61:44:
4a:c5:3d:70:5e:cd:60:f4:f2:1f:2c:6e:4e:7e:24:62:22:09:
13:4d:e3:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:08:32 2026 by rpki-client