Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS16509.roa
File: AS16509.roa (raw, json)
Hash identifier: DwRW1knW9j09S8yQ7KVaVducP3gSRaNUEVzZbdocHis=
Subject key identifier: 63:1E:67:00:89:5E:1A:91:65:5D:6B:EA:4A:C3:22:D1:DA:84:75:98
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 04C49B505F9F61DAA6BFB41557678E022A421A47
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS16509.roa
Signing time: Sat 04 Jul 2026 18:48:06 +0000
ROA not before: Sat 04 Jul 2026 18:43:06 +0000
ROA not after: Sat 03 Jul 2027 18:48:06 +0000
asID: 16509
IP address blocks: 96.62.208.0/22 maxlen: 22
140.150.156.0/24 maxlen: 24
140.233.128.0/19 maxlen: 24
143.14.81.0/24 maxlen: 24
143.14.227.0/24 maxlen: 24
145.223.64.0/24 maxlen: 24
145.223.65.0/24 maxlen: 24
146.103.60.0/24 maxlen: 24
146.103.62.0/23 maxlen: 24
147.79.25.0/24 maxlen: 24
148.135.180.0/24 maxlen: 24
148.135.186.0/24 maxlen: 24
155.117.0.0/24 maxlen: 24
155.117.60.0/24 maxlen: 24
155.117.185.0/24 maxlen: 24
155.117.187.0/24 maxlen: 24
155.117.203.0/24 maxlen: 24
162.141.159.0/24 maxlen: 24
162.141.180.0/24 maxlen: 24
168.222.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:c4:9b:50:5f:9f:61:da:a6:bf:b4:15:57:67:8e:02:2a:42:1a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 4 18:43:06 2026 GMT
Not After : Jul 3 18:48:06 2027 GMT
Subject: CN=631E6700895E1A91655D6BEA4AC322D1DA847598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:aa:13:40:c8:96:21:c2:36:96:89:12:56:84:
89:65:ce:84:61:14:f9:7a:f7:cc:e0:44:3f:69:f9:
e2:a4:f0:a4:99:a6:2d:60:69:55:c1:aa:52:16:54:
f4:af:89:f6:c1:9e:a2:07:94:98:81:61:3e:23:52:
cf:01:61:be:5b:53:13:2f:f9:6c:7f:b7:01:70:3c:
d8:61:75:39:4a:e9:ec:35:a7:73:fb:73:91:7e:a8:
19:1a:91:cd:2f:7d:fe:e8:f0:61:4d:c4:09:b4:f5:
0b:29:f6:05:d4:4b:3d:00:b0:8a:0a:23:c0:e3:43:
b7:be:94:af:7c:16:75:9c:84:1d:b7:5e:be:4c:1f:
93:83:aa:08:d5:11:7e:f3:22:8f:1d:86:1a:dc:1b:
ae:2d:18:0a:97:33:1b:e8:a9:7a:46:45:70:96:c5:
6c:ec:1f:8c:a6:60:9e:bd:f1:91:0b:67:54:46:14:
e7:ee:49:90:0a:71:97:7d:41:ab:26:6c:93:dd:1e:
54:7f:7d:53:ce:1f:d2:3e:db:7d:42:b7:c8:66:5b:
71:ee:88:4c:d4:c8:aa:2c:e3:74:eb:6b:f6:07:fe:
70:40:28:01:1d:09:b1:17:14:b2:4b:57:81:43:02:
ea:f6:0e:d8:b3:61:e3:70:d0:ba:92:45:99:3a:72:
5b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:1E:67:00:89:5E:1A:91:65:5D:6B:EA:4A:C3:22:D1:DA:84:75:98
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS16509.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.208.0/22
140.150.156.0/24
140.233.128.0/19
143.14.81.0/24
143.14.227.0/24
145.223.64.0/23
146.103.60.0/24
146.103.62.0/23
147.79.25.0/24
148.135.180.0/24
148.135.186.0/24
155.117.0.0/24
155.117.60.0/24
155.117.185.0/24
155.117.187.0/24
155.117.203.0/24
162.141.159.0/24
162.141.180.0/24
168.222.121.0/24
Signature Algorithm: sha256WithRSAEncryption
88:ef:bc:63:96:db:a5:29:a2:b6:cd:84:8f:0f:aa:ec:a7:99:
21:93:3e:e7:01:e9:fe:fa:11:11:ed:1b:63:55:87:b3:50:45:
14:d2:9c:8f:f4:90:6d:a8:9f:6b:ea:22:0c:d3:ad:de:e6:dc:
04:f3:67:f3:ee:23:36:65:99:7d:e5:19:22:17:37:ef:25:dc:
62:15:ed:65:eb:c9:ac:09:ce:c2:05:3a:7d:ec:c4:58:95:d7:
9d:a1:ef:8a:12:a4:e5:02:ca:20:bf:e5:69:e0:67:a4:11:f7:
1c:84:7f:1d:84:89:1d:12:4a:87:7e:45:94:a4:a8:eb:c6:36:
e8:f0:54:2a:ee:c3:0f:36:eb:87:8c:94:c0:ab:0f:01:bb:49:
64:8f:20:28:46:97:c9:14:20:2d:83:28:f6:b6:60:ff:4a:c6:
49:01:d2:62:f6:e5:9a:6c:6d:a6:2e:08:98:f7:c2:a3:3c:39:
8f:ec:80:a7:f7:65:71:3b:c3:7a:99:42:1b:16:46:59:9b:8e:
34:d6:53:e8:9f:8a:8e:ce:6c:32:07:ec:b5:30:fb:0a:61:13:
88:f2:5f:d5:e9:92:ed:55:11:9f:d4:c3:87:98:dd:8c:0c:be:
0a:95:5f:62:9e:b6:fb:af:8c:10:12:0f:fa:ce:51:3f:c1:ea:
72:e4:37:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 18:34:36 2026 by rpki-client