Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS200056.roa
File: AS200056.roa (raw, json)
Hash identifier: 284Rju7FC8l7FmXo0b0c1CRSmVoiFHN6934gSC0zCNA=
Subject key identifier: 4B:1E:72:FD:70:2D:60:4F:2A:8D:60:B6:C5:D4:71:06:B9:30:84:52
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 0C2DC7FA7D677BAB6C2EC8B9D611CFA319CC078C
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS200056.roa
Signing time: Sat 31 Oct 2026 07:40:05 +0000
ROA not before: Sat 31 Oct 2026 07:35:05 +0000
ROA not after: Sat 30 Oct 2027 07:40:05 +0000
asID: 200056
IP address blocks: 95.135.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:2d:c7:fa:7d:67:7b:ab:6c:2e:c8:b9:d6:11:cf:a3:19:cc:07:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 31 07:35:05 2026 GMT
Not After : Oct 30 07:40:05 2027 GMT
Subject: CN=4B1E72FD702D604F2A8D60B6C5D47106B9308452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:11:db:44:f4:7b:b7:a6:5c:4d:27:4f:f0:3e:
1b:98:d9:5e:0e:ed:a2:5a:4b:72:f4:02:56:5a:4d:
24:36:d2:ac:06:57:6c:e0:32:5f:cb:31:5d:3e:e3:
ec:76:7a:fb:ba:c2:9c:3a:6a:5a:75:a1:88:ab:b1:
83:c9:bc:e2:fd:a8:40:17:ff:53:ed:c3:43:57:75:
fd:21:66:60:cc:da:20:f1:4b:04:7b:1b:ac:a4:e1:
04:36:e6:f1:17:9b:22:a7:9f:53:b2:5d:d4:07:03:
f1:ee:ca:bd:27:d0:88:b2:9c:e3:a0:a0:fe:a6:08:
6a:08:98:a4:ea:be:f4:b8:a6:9a:45:ba:e4:7c:17:
06:fd:cd:e1:76:3a:33:a2:0e:f8:10:95:b3:8b:18:
56:f4:96:f8:77:16:ee:aa:eb:65:7a:88:fa:94:18:
b8:a6:fb:8c:c7:67:5e:23:92:c7:40:45:07:b8:2e:
bb:ef:6e:26:65:fc:a2:b1:26:7e:b9:53:ea:3d:4e:
f4:01:89:5d:18:cd:98:69:b9:f0:dd:0b:0d:7c:5d:
fc:87:6b:ca:9b:bd:90:1e:bd:e7:97:d2:b7:60:59:
e2:d8:21:06:7a:50:c4:03:0b:8f:cd:05:4b:a7:af:
d4:75:f8:44:e8:c3:56:3c:d5:94:80:92:9e:73:0e:
38:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:1E:72:FD:70:2D:60:4F:2A:8D:60:B6:C5:D4:71:06:B9:30:84:52
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS200056.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.135.100.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:18:93:71:4a:56:a7:b4:8e:76:07:65:cf:7f:66:37:bd:29:
95:f4:43:18:e1:1b:06:68:bd:52:04:18:06:6a:9c:df:cb:f9:
31:5a:ce:6b:af:2c:20:fc:d1:a7:17:b6:61:1b:c5:70:77:0a:
6c:68:21:ea:b6:bc:53:cd:f8:2c:69:c3:02:62:62:fc:50:7f:
4d:8a:47:7b:f6:fd:76:96:6a:cd:46:12:22:10:bd:17:54:5f:
29:85:97:e4:11:85:4e:f3:15:d0:42:4a:d5:5a:56:06:92:49:
ee:2a:22:38:0b:80:ba:a3:ea:4f:99:cc:59:59:00:1b:40:be:
89:8e:fa:6d:31:45:e9:3c:89:d0:64:a6:1a:70:6b:bd:7a:12:
96:26:48:0f:71:1b:06:31:b7:5e:d4:ee:f6:82:a2:1b:8b:61:
42:fe:48:46:7a:84:e0:51:ab:d1:9a:be:c9:e9:6c:81:f7:1f:
2a:a0:6d:42:4f:47:6c:ff:b2:2f:f6:26:4e:22:f4:bb:06:a5:
eb:b1:77:44:d4:7f:4c:38:e0:38:30:a1:51:3b:48:25:88:63:
ba:38:f5:32:13:23:96:40:f9:ff:e3:fc:d3:e4:3e:da:21:d3:
32:45:5d:b3:36:3e:26:11:ac:6d:69:bf:2a:f1:8c:5e:73:40:
8f:88:4a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:53:02 2026 by rpki-client