Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS200239.roa
File: AS200239.roa (raw, json)
Hash identifier: c9f/kAG8WvbH73EMDQu3nZJiCXBOISCu1DICDHlZunU=
Subject key identifier: 9C:0A:0A:06:EE:F1:DA:92:7A:DF:4E:BE:A8:CD:E6:8F:E4:16:22:D3
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 111D1B037C50A45CB4795EFA8916BC3C00AE8CB7
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS200239.roa
Signing time: Thu 26 Feb 2026 21:46:33 +0000
ROA not before: Thu 26 Feb 2026 21:41:33 +0000
ROA not after: Thu 25 Feb 2027 21:46:33 +0000
asID: 200239
IP address blocks: 92.112.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:1d:1b:03:7c:50:a4:5c:b4:79:5e:fa:89:16:bc:3c:00:ae:8c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Feb 26 21:41:33 2026 GMT
Not After : Feb 25 21:46:33 2027 GMT
Subject: CN=9C0A0A06EEF1DA927ADF4EBEA8CDE68FE41622D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b2:f2:5f:bb:8d:1c:92:01:8f:ce:cc:f4:67:
66:f3:68:cd:44:fc:a6:61:bb:87:97:d0:ca:f1:09:
cc:75:f0:47:cc:f5:58:d1:b7:10:dd:0b:1c:97:b2:
7b:3f:46:7b:5c:49:3f:e1:be:e4:05:8e:0b:cd:dd:
7e:ef:50:8b:1c:46:18:56:77:5c:c9:fa:07:d8:b7:
51:81:9c:64:0f:af:b6:ed:bd:51:d7:55:33:bf:b0:
5a:c4:66:54:6c:5e:a4:cd:44:2d:6b:ff:ee:e9:e9:
e4:dd:2c:e9:54:d8:3d:0a:11:e9:0f:f3:d1:75:7c:
8c:ec:62:4a:7f:1c:64:1e:a4:32:43:b1:d5:ec:13:
79:b6:a2:d2:99:67:85:1d:ff:f0:f2:5c:75:c4:fa:
55:27:6c:ce:c7:af:92:2e:24:35:b5:21:ce:41:10:
81:5d:a5:a5:97:3e:bb:4d:1b:53:a4:0e:14:c7:20:
6e:71:2f:60:2a:fe:a5:f9:af:15:6b:62:51:e2:c9:
c5:6a:3e:10:9b:da:9c:1b:4c:dc:0e:4a:da:fe:b4:
a1:12:f1:2f:88:b3:8a:e1:9e:c5:27:e4:48:54:b9:
b5:3f:ed:52:eb:54:08:53:c8:2d:25:5b:54:1b:ee:
d1:c4:92:85:28:64:df:6a:f7:37:00:87:16:aa:3e:
92:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:0A:0A:06:EE:F1:DA:92:7A:DF:4E:BE:A8:CD:E6:8F:E4:16:22:D3
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS200239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.112.154.0/24
Signature Algorithm: sha256WithRSAEncryption
75:00:3f:d4:88:79:26:82:11:bc:52:92:b0:77:77:45:26:7c:
b9:f1:51:d9:e9:48:dc:99:ec:ec:62:eb:06:0d:15:40:71:60:
ef:51:31:32:ea:0f:65:d6:04:ed:a6:34:65:30:99:cc:a0:07:
75:7f:87:38:fe:2f:29:96:ec:a6:af:c4:17:06:3b:b5:f1:66:
0e:e8:5a:56:36:db:26:ec:cf:f6:3f:3a:f9:ce:f5:16:c2:fe:
47:1b:13:81:ab:81:c8:40:24:91:83:1f:7f:57:76:6a:3f:03:
08:4b:fb:9d:d0:16:fc:02:b9:f4:0b:ae:09:ae:8e:f5:3c:a6:
39:16:6b:3a:c1:36:c4:2b:e3:17:19:45:8b:63:07:df:4b:49:
51:53:40:63:a4:15:d8:35:e7:6a:71:b8:84:31:a9:63:a4:59:
78:ef:4b:2d:5f:3e:4d:0a:23:2e:f3:76:15:61:e1:72:69:1f:
ee:48:ac:5e:63:ff:42:52:9c:f5:7b:32:e2:8d:f6:94:26:9a:
8c:36:43:6e:d6:a8:65:3f:95:24:f9:3d:05:e5:29:de:2f:dc:
b1:05:1e:34:27:23:62:40:f4:95:58:49:97:39:03:f1:5b:50:
16:b6:47:7d:e0:64:85:b5:6a:aa:77:0d:9e:00:08:0b:f6:30:
f3:b5:94:a2
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUER0bA3xQpFy0eV76iRa8PACujLcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjAyMjYyMTQxMzNaFw0yNzAyMjUyMTQ2MzNaMDMxMTAvBgNV
BAMTKDlDMEEwQTA2RUVGMURBOTI3QURGNEVCRUE4Q0RFNjhGRTQxNjIyRDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+svJfu40ckgGPzsz0Z2bzaM1E
/KZhu4eX0MrxCcx18EfM9VjRtxDdCxyXsns/RntcST/hvuQFjgvN3X7vUIscRhhW
d1zJ+gfYt1GBnGQPr7btvVHXVTO/sFrEZlRsXqTNRC1r/+7p6eTdLOlU2D0KEekP
89F1fIzsYkp/HGQepDJDsdXsE3m2otKZZ4Ud//DyXHXE+lUnbM7Hr5IuJDW1Ic5B
EIFdpaWXPrtNG1OkDhTHIG5xL2Aq/qX5rxVrYlHiycVqPhCb2pwbTNwOStr+tKES
8S+Is4rhnsUn5EhUubU/7VLrVAhTyC0lW1Qb7tHEkoUoZN9q9zcAhxaqPpJdAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUnAoKBu7x2pJ6306+qM3mj+QWItMwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjAwMjM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXHCa
MA0GCSqGSIb3DQEBCwUAA4IBAQB1AD/UiHkmghG8UpKwd3dFJny58VHZ6Ujcmezs
YusGDRVAcWDvUTEy6g9l1gTtpjRlMJnMoAd1f4c4/i8pluymr8QXBju18WYO6FpW
Ntsm7M/2Pzr5zvUWwv5HGxOBq4HIQCSRgx9/V3ZqPwMIS/ud0Bb8Arn0C64Jro71
PKY5Fms6wTbEK+MXGUWLYwffS0lRU0BjpBXYNedqcbiEMaljpFl470stXz5NCiMu
83YVYeFyaR/uSKxeY/9CUpz1ezLijfaUJpqMNkNu1qhlP5Uk+T0F5SneL9yxBR40
JyNiQPSVWEmXOQPxW1AWtkd94GSFtWqqdw2eAAgL9jDztZSi
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:02:54 2026 by rpki-client