Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS200221.roa
File: AS200221.roa (raw, json)
Hash identifier: WysYkulhPXy5FUOSck/0vZiSwh5tdTBg6ddC0Ltlgfs=
Subject key identifier: 2F:2B:75:CF:6D:C0:BD:D0:88:AF:7B:65:2E:08:28:CA:27:BA:A8:82
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 30F765A69049A14B144CD304EC2E67C1434D1882
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS200221.roa
Signing time: Thu 11 Jun 2026 06:15:16 +0000
ROA not before: Thu 11 Jun 2026 06:10:16 +0000
ROA not after: Thu 10 Jun 2027 06:15:16 +0000
asID: 200221
IP address blocks: 51.146.68.0/24 maxlen: 24
188.220.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:f7:65:a6:90:49:a1:4b:14:4c:d3:04:ec:2e:67:c1:43:4d:18:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 11 06:10:16 2026 GMT
Not After : Jun 10 06:15:16 2027 GMT
Subject: CN=2F2B75CF6DC0BDD088AF7B652E0828CA27BAA882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:10:77:70:0f:dc:9a:e4:9b:3e:11:7d:15:3a:
c9:bc:b3:3a:2d:49:f4:88:80:86:c0:c6:1c:32:c0:
56:8c:b6:13:af:39:c9:44:33:43:5d:d7:5b:9e:4d:
7a:24:73:85:2a:d4:33:6e:2d:aa:f9:a1:e5:3f:5b:
ee:88:31:be:0e:38:03:0c:cd:56:ec:1c:25:22:4f:
94:d7:fc:18:76:d2:06:39:0f:ce:0e:f8:4d:44:03:
f0:ff:0d:03:23:ff:94:14:00:91:d9:80:98:f1:44:
3a:75:bd:42:85:8a:24:db:fe:16:d0:9c:de:19:0e:
d4:b1:9f:1b:40:5b:4f:76:6e:09:f8:03:31:87:5e:
57:95:3d:8d:f8:bc:8c:53:c1:b4:4c:05:ba:e1:82:
3f:ea:e7:3e:3a:de:58:aa:e6:60:b9:18:e2:3f:7a:
27:bc:1e:59:c2:0d:7a:bb:24:45:c4:28:75:46:2a:
9b:87:64:e7:85:09:5d:41:c2:1b:5c:75:fa:b1:22:
a2:9f:08:62:e5:52:c2:bc:b2:15:f9:a6:fe:00:40:
07:af:ba:4f:1a:60:73:6f:de:57:e2:83:15:b6:e7:
67:c3:f0:c6:50:77:14:f1:f7:d9:33:61:a0:e4:18:
a5:26:4b:d2:ea:08:7f:b0:3d:c6:cb:ae:89:5c:37:
7c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:2B:75:CF:6D:C0:BD:D0:88:AF:7B:65:2E:08:28:CA:27:BA:A8:82
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS200221.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.68.0/24
188.220.34.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:53:b8:e4:50:9c:e1:80:4e:49:fb:a7:30:30:6c:36:0f:29:
69:8a:15:4f:2b:01:07:12:50:6b:0f:88:42:b8:f4:3e:25:cd:
4d:c1:5c:93:21:57:5e:8e:ac:90:1a:82:37:1f:d5:24:e5:a6:
02:d5:4d:2d:b7:71:bc:6d:5b:94:a7:58:7b:8a:39:69:3c:32:
e4:8a:5f:5b:d6:04:06:33:2a:06:45:7d:dc:02:e9:55:e7:bf:
3f:b7:d0:23:17:7d:d5:ae:84:86:af:9f:02:28:c2:1b:fa:23:
3b:8b:f9:62:29:17:f6:d0:ae:7f:4d:18:6a:d4:70:69:a2:f9:
eb:91:5c:62:53:e1:e3:2e:6a:2d:64:98:c9:2f:b6:86:e9:91:
29:de:53:5d:d4:4c:94:35:84:cc:00:bc:7b:8e:6d:47:73:95:
16:a3:bf:d4:c0:31:9c:5c:72:1c:c7:00:5c:15:13:f0:aa:46:
c7:b6:50:fc:2e:67:5f:27:70:ee:e0:50:29:9d:64:03:b6:ff:
b5:ca:bc:28:b2:5c:03:d3:c2:45:0e:a0:8a:50:44:0e:e3:df:
52:28:56:e3:93:6c:67:c7:8f:9d:ed:13:35:5c:f5:62:b2:da:
45:5b:a7:b0:20:a4:80:f8:86:5b:1e:57:d9:2d:e4:36:f9:18:
0a:c0:2f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:34:55 2026 by rpki-client