Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS200239.roa
File: AS200239.roa (raw, json)
Hash identifier: KU52/T3I1W77x+3yoPV8R1bBhR7CZNKVwXHzS0Sb+bY=
Subject key identifier: 77:D3:E0:B1:55:7B:BC:62:C5:BA:2D:30:B7:4F:57:5C:9B:22:C1:2C
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 6D363BD0C7BF329A2A56FD55DE384E03A20FC3E8
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS200239.roa
Signing time: Tue 10 Feb 2026 15:55:38 +0000
ROA not before: Tue 10 Feb 2026 15:50:38 +0000
ROA not after: Tue 09 Feb 2027 15:55:38 +0000
asID: 200239
IP address blocks: 141.11.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:36:3b:d0:c7:bf:32:9a:2a:56:fd:55:de:38:4e:03:a2:0f:c3:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Feb 10 15:50:38 2026 GMT
Not After : Feb 9 15:55:38 2027 GMT
Subject: CN=77D3E0B1557BBC62C5BA2D30B74F575C9B22C12C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:fc:25:64:57:ed:4c:01:ff:d7:3b:b4:9e:23:
30:16:a4:48:6a:41:d3:ab:30:87:4b:88:ee:da:ab:
86:b7:8e:c3:2c:a4:07:32:ef:d4:df:da:40:f3:fd:
5b:4c:ac:61:c9:ec:76:a2:1d:32:62:2e:72:d2:c4:
b1:e3:6e:e4:11:33:ae:67:a5:4c:d5:b9:15:cf:7e:
3f:5b:a0:55:b1:82:f3:94:2d:77:d6:fd:d2:f1:0d:
1f:62:db:72:1d:80:27:43:44:ad:62:d7:0e:3c:07:
17:d3:cc:d8:cc:4c:e1:83:74:0b:f0:e8:f6:4b:83:
8f:88:1c:44:49:20:e0:5c:ce:d8:e7:06:0a:4b:15:
86:6d:6e:90:df:c9:64:9f:13:df:36:91:94:49:0f:
dc:7a:ec:88:c9:65:a6:f5:cd:f8:e9:dc:f9:93:d8:
17:f6:3e:e6:ca:52:bd:ed:ca:55:39:06:d8:f6:cf:
22:07:70:ec:ae:a2:69:72:b9:0c:2a:d8:87:1e:ee:
11:8f:33:1d:f8:15:85:18:30:f7:26:d1:c1:b9:1f:
e7:3d:73:88:24:aa:73:f1:88:68:d5:9c:1b:16:2c:
ac:ab:95:ac:a2:8c:3b:74:fa:4f:35:4b:55:c9:e4:
e2:cf:eb:9f:8f:4d:69:bb:87:e7:4d:c7:11:88:ac:
ab:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D3:E0:B1:55:7B:BC:62:C5:BA:2D:30:B7:4F:57:5C:9B:22:C1:2C
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS200239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.204.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:16:c3:bd:fd:d3:59:81:65:69:5c:2f:f3:0c:77:58:56:d1:
62:ee:75:56:52:79:62:49:3c:39:9b:8e:c1:eb:e2:b8:08:10:
67:93:1e:d4:7b:82:95:92:00:22:d8:f7:56:ec:2c:7b:d9:ff:
d7:31:92:fd:5b:0d:8d:f6:06:bc:95:1f:9d:3a:c9:40:53:d4:
83:ce:af:b5:2f:7d:6f:18:5a:29:a7:c2:b5:27:de:c6:6a:81:
cc:43:27:d5:f1:89:46:4b:2f:24:79:2b:0e:0b:45:5e:51:ad:
66:cd:4e:98:7e:b3:13:ce:d3:0d:a5:e3:cc:42:39:e5:3d:90:
a2:58:b5:d9:18:d1:88:b2:9f:08:f6:64:b8:00:aa:bb:7f:b4:
07:44:47:c9:92:a0:8c:6e:ea:8f:fa:c4:4f:a3:37:b8:64:11:
26:32:8b:d8:bb:6a:cf:73:1e:46:b7:74:ca:0c:ff:66:f5:80:
2b:cb:cb:d8:71:a4:93:e6:aa:e2:9a:b8:78:49:ac:d9:e7:7b:
72:b8:f9:6a:39:4e:c2:33:cf:6b:52:c7:7f:e0:9a:91:5e:6a:
65:9e:77:18:e8:15:cc:ed:b2:08:4e:bd:61:d1:d1:82:e5:e3:
de:48:98:c3:49:01:ea:0e:ac:fa:28:5c:36:f2:a8:1a:d4:9d:
bd:06:76:29
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUbTY70Me/MpoqVv1V3jhOA6IPw+gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yNjAyMTAxNTUwMzhaFw0yNzAyMDkxNTU1MzhaMDMxMTAvBgNV
BAMTKDc3RDNFMEIxNTU3QkJDNjJDNUJBMkQzMEI3NEY1NzVDOUIyMkMxMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg/CVkV+1MAf/XO7SeIzAWpEhq
QdOrMIdLiO7aq4a3jsMspAcy79Tf2kDz/VtMrGHJ7HaiHTJiLnLSxLHjbuQRM65n
pUzVuRXPfj9boFWxgvOULXfW/dLxDR9i23IdgCdDRK1i1w48BxfTzNjMTOGDdAvw
6PZLg4+IHERJIOBcztjnBgpLFYZtbpDfyWSfE982kZRJD9x67IjJZab1zfjp3PmT
2Bf2PubKUr3tylU5Btj2zyIHcOyuomlyuQwq2Ice7hGPMx34FYUYMPcm0cG5H+c9
c4gkqnPxiGjVnBsWLKyrlayijDt0+k81S1XJ5OLP65+PTWm7h+dNxxGIrKudAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUd9PgsVV7vGLFui0wt09XXJsiwSwwHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMjAwMjM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjQvM
MA0GCSqGSIb3DQEBCwUAA4IBAQCtFsO9/dNZgWVpXC/zDHdYVtFi7nVWUnliSTw5
m47B6+K4CBBnkx7Ue4KVkgAi2PdW7Cx72f/XMZL9Ww2N9ga8lR+dOslAU9SDzq+1
L31vGFopp8K1J97GaoHMQyfV8YlGSy8keSsOC0VeUa1mzU6YfrMTztMNpePMQjnl
PZCiWLXZGNGIsp8I9mS4AKq7f7QHREfJkqCMbuqP+sRPoze4ZBEmMovYu2rPcx5G
t3TKDP9m9YAry8vYcaST5qrimrh4SazZ53tyuPlqOU7CM89rUsd/4JqRXmplnncY
6BXM7bIITr1h0dGC5ePeSJjDSQHqDqz6KFw28qga1J29BnYp
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:34:20 2026 by rpki-client