Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS200017.roa
File: AS200017.roa (raw, json)
Hash identifier: KiKQSj9jp9Id+Dd/h5BxjnsR2ptZY2uQdWIWpSEV32M=
Subject key identifier: 1D:63:C7:C7:B8:56:DB:EB:00:D8:70:16:6F:8B:78:C9:8D:88:DC:A3
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 5118A952EA97C3A4C3248E3303DC520AA0CBEB39
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS200017.roa
Signing time: Wed 08 Apr 2026 12:47:03 +0000
ROA not before: Wed 08 Apr 2026 12:42:03 +0000
ROA not after: Wed 07 Apr 2027 12:47:03 +0000
asID: 200017
IP address blocks: 141.11.10.0/24 maxlen: 24
141.11.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:18:a9:52:ea:97:c3:a4:c3:24:8e:33:03:dc:52:0a:a0:cb:eb:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Apr 8 12:42:03 2026 GMT
Not After : Apr 7 12:47:03 2027 GMT
Subject: CN=1D63C7C7B856DBEB00D870166F8B78C98D88DCA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:74:a6:7b:76:7e:7d:22:04:06:c1:cf:47:25:
05:ef:84:d4:c6:10:87:e2:9c:98:1b:a2:d0:51:75:
c5:e3:24:15:28:19:98:1f:7f:5c:c9:4d:5d:e0:7a:
37:85:13:59:a8:12:cb:64:7c:8f:61:df:50:4e:d1:
79:fa:3c:f6:2c:2a:0f:a1:3e:4f:35:07:58:67:ae:
c1:ec:9e:3b:ea:02:bb:84:1c:06:81:03:88:a3:32:
30:4a:6c:60:02:70:d1:f3:c5:b1:2a:0b:93:fc:f2:
99:36:84:5d:1a:ec:c5:51:d5:06:a3:07:ca:b3:8d:
3b:41:cd:cd:f6:5d:31:08:ab:90:90:bb:1f:d1:40:
bd:ef:02:4b:30:bc:90:d2:d3:6b:84:ed:61:0f:c4:
3a:1d:75:cd:95:4f:38:0c:b5:df:a6:44:b4:02:b6:
70:e6:de:8f:16:80:c2:c6:0b:78:81:a5:83:6e:3b:
cf:e7:54:e9:88:70:51:a7:8e:d6:f6:c8:e4:1a:c1:
da:47:0e:17:43:0d:a0:96:e6:2f:0a:83:6e:68:ad:
44:e1:13:75:47:08:64:7f:78:1a:75:81:56:7d:89:
bb:19:ee:dd:e6:78:06:41:c0:4d:95:05:e8:db:2d:
14:2c:70:a3:7e:9d:4e:b3:5e:9d:30:a2:72:db:3e:
e0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:63:C7:C7:B8:56:DB:EB:00:D8:70:16:6F:8B:78:C9:8D:88:DC:A3
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS200017.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.10.0/24
141.11.58.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:a9:ee:55:b3:02:42:30:e9:36:65:ac:27:c8:e9:79:a9:7d:
5c:c3:ae:3b:c7:8d:0f:37:69:82:cd:53:f6:33:5a:34:95:27:
9f:73:1a:5a:68:93:6f:59:53:16:17:5d:30:70:80:2e:8f:61:
75:79:85:c5:15:07:8c:a1:a3:02:e1:2b:a2:0d:45:46:24:9d:
61:b6:76:e4:ef:14:40:40:15:57:33:99:dd:05:a3:e2:7f:67:
02:57:38:40:3a:ff:92:39:95:2c:39:c7:a2:e2:84:62:f0:ac:
d2:aa:4c:65:2e:2f:80:89:1b:73:3e:35:50:e5:da:8b:6d:17:
71:ac:d8:74:6c:f5:f8:96:6a:75:65:9b:ad:48:f8:5b:cb:b3:
01:37:0f:f5:12:8a:17:bd:b2:3a:f3:34:ca:4e:12:cf:89:de:
a2:88:40:59:a1:be:fb:32:c1:b9:0f:0e:3f:0f:03:89:0d:b1:
24:42:28:f9:5c:3f:da:20:11:87:59:51:33:4c:c2:4d:6a:07:
49:f5:30:39:d3:1f:ab:0c:a4:1b:98:e3:33:45:f6:e8:f5:cd:
8d:78:21:78:b7:ff:5a:d2:28:ba:7c:6b:b7:6b:f2:5f:78:9f:
0d:d9:dd:81:6f:9a:56:d8:de:ef:fc:7b:64:c6:b5:76:49:e0:
8e:c0:b0:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:36:17 2026 by rpki-client