Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS16509.roa
File: AS16509.roa (raw, json)
Hash identifier: olGSEs2D1W+QVDz6Og2s04QJr14vy0WO+rTWxulLGVM=
Subject key identifier: 9D:FA:4D:BD:67:D1:03:96:54:50:91:08:99:66:BD:FA:45:81:80:5D
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 72B7E75115F24AEEE18C6DAA75C732FBAD3FCE43
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS16509.roa
Signing time: Thu 15 Oct 2026 13:32:01 +0000
ROA not before: Thu 15 Oct 2026 13:27:01 +0000
ROA not after: Thu 14 Oct 2027 13:32:01 +0000
asID: 16509
IP address blocks: 82.21.0.0/24 maxlen: 24
82.24.76.0/24 maxlen: 24
82.24.203.0/24 maxlen: 24
82.26.154.0/24 maxlen: 24
82.26.201.0/24 maxlen: 24
82.29.0.0/24 maxlen: 24
82.29.2.0/24 maxlen: 24
82.29.3.0/24 maxlen: 24
82.29.4.0/24 maxlen: 24
82.29.44.0/24 maxlen: 24
82.29.102.0/24 maxlen: 24
82.29.104.0/24 maxlen: 24
82.29.105.0/24 maxlen: 24
82.41.98.0/24 maxlen: 24
82.41.168.0/24 maxlen: 24
82.41.200.0/24 maxlen: 24
82.47.64.0/19 maxlen: 24
84.75.96.0/19 maxlen: 24
84.75.129.0/24 maxlen: 24
84.75.177.0/24 maxlen: 24
2a13:9500:110::/48 maxlen: 48
2a13:9500:126::/48 maxlen: 48
2a13:9500:127::/48 maxlen: 48
2a13:9500:13a::/48 maxlen: 48
2a13:9500:157::/48 maxlen: 48
2a13:9500:176::/48 maxlen: 48
2a13:9500:1a1::/48 maxlen: 48
2a13:9500:1a3::/48 maxlen: 48
2a13:9500:1c1::/48 maxlen: 48
2a13:9500:1c3::/48 maxlen: 48
2a13:9500:1d7::/48 maxlen: 48
2a13:9500:1f3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 03:23:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:b7:e7:51:15:f2:4a:ee:e1:8c:6d:aa:75:c7:32:fb:ad:3f:ce:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 15 13:27:01 2026 GMT
Not After : Oct 14 13:32:01 2027 GMT
Subject: CN=9DFA4DBD67D10396545091089966BDFA4581805D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:14:73:0e:59:1a:65:5b:79:03:42:64:47:28:
3a:88:ea:c0:7e:41:75:ed:28:7b:3d:01:ab:2d:2c:
62:27:45:7c:3c:18:8e:f8:a1:c7:3f:77:e4:45:10:
28:1f:66:b3:12:d9:a4:bb:a1:52:6f:f6:37:07:e4:
70:61:fc:1d:dd:13:2e:30:ee:74:57:a7:8d:ea:71:
ef:fb:ef:dc:96:31:fe:94:36:e4:e3:58:a0:05:61:
3e:99:c2:b1:29:6e:58:39:cf:88:17:b5:3f:94:04:
49:37:c0:07:c7:76:54:0d:ac:d7:0a:83:97:83:81:
d2:b6:b7:02:a3:87:98:95:59:9e:5f:7b:df:c6:ec:
13:16:3c:fb:5f:63:69:a2:a5:0f:26:3a:d7:24:a1:
e1:d6:55:6b:ee:10:ae:97:89:57:4e:49:f0:12:14:
0a:3a:68:33:ec:10:df:8c:76:a8:90:20:2e:63:6d:
54:02:70:b7:ba:22:17:55:12:f2:e5:ce:f2:dd:61:
40:b0:52:f0:8e:2a:cd:9d:f2:c7:dd:8c:9e:82:e9:
f4:36:3c:3d:90:d9:36:29:1f:4e:6d:0b:a2:7e:19:
15:9b:aa:a6:8a:18:26:a2:44:1c:b1:d9:03:8c:84:
b8:02:3b:43:f3:0a:c9:e3:85:23:e5:fb:c4:52:3d:
9b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:FA:4D:BD:67:D1:03:96:54:50:91:08:99:66:BD:FA:45:81:80:5D
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS16509.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.0.0/24
82.24.76.0/24
82.24.203.0/24
82.26.154.0/24
82.26.201.0/24
82.29.0.0/24
82.29.2.0-82.29.4.255
82.29.44.0/24
82.29.102.0/24
82.29.104.0/23
82.41.98.0/24
82.41.168.0/24
82.41.200.0/24
82.47.64.0/19
84.75.96.0/19
84.75.129.0/24
84.75.177.0/24
IPv6:
2a13:9500:110::/48
2a13:9500:126::/47
2a13:9500:13a::/48
2a13:9500:157::/48
2a13:9500:176::/48
2a13:9500:1a1::/48
2a13:9500:1a3::/48
2a13:9500:1c1::/48
2a13:9500:1c3::/48
2a13:9500:1d7::/48
2a13:9500:1f3::/48
Signature Algorithm: sha256WithRSAEncryption
15:8c:e0:35:5c:71:c8:a7:89:34:5f:8d:81:c2:3d:24:7d:a1:
05:62:c9:1d:bc:53:e8:bf:9a:63:6b:84:ae:0f:8d:36:d6:78:
4e:e0:36:38:b6:da:c3:84:bc:24:31:da:f3:85:a9:b9:b8:18:
9f:7a:bc:37:d2:07:4f:1c:29:e3:b2:bc:bc:4e:e6:3a:5b:8b:
81:82:72:95:ea:cc:1e:f5:cd:66:7d:ee:71:ca:92:65:ff:eb:
ae:02:82:3a:49:3b:22:b6:d5:ca:8f:58:80:04:ac:12:11:f4:
b2:3f:1a:76:33:7d:98:67:69:1d:cc:d2:39:79:1a:fb:ef:93:
a9:1d:14:95:46:da:72:52:57:ed:d9:ac:0a:ff:37:84:d1:66:
d3:6f:de:50:14:90:35:b6:7d:2c:e2:02:52:ad:d5:35:a1:67:
15:00:07:6b:11:47:1c:74:29:73:38:4a:a1:4b:a2:ba:5e:32:
6b:92:60:53:af:19:ab:40:cf:b8:e9:26:94:75:43:e4:dd:a0:
70:f0:72:f3:04:2e:29:5d:24:60:4e:0f:22:3d:d9:ce:ed:af:
0e:75:a3:19:6f:37:1b:64:84:03:42:77:2f:89:88:48:d9:da:
7a:a7:07:36:58:da:d6:7f:2a:8f:77:08:63:e0:6e:2f:36:f8:
33:2d:b5:5d
-----BEGIN CERTIFICATE-----
MIIF1TCCBL2gAwIBAgIUcrfnURXySu7hjG2qdccy+60/zkMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjEwMTUxMzI3MDFaFw0yNzEwMTQxMzMyMDFaMDMxMTAvBgNV
BAMTKDlERkE0REJENjdEMTAzOTY1NDUwOTEwODk5NjZCREZBNDU4MTgwNUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7FHMOWRplW3kDQmRHKDqI6sB+
QXXtKHs9AastLGInRXw8GI74occ/d+RFECgfZrMS2aS7oVJv9jcH5HBh/B3dEy4w
7nRXp43qce/779yWMf6UNuTjWKAFYT6ZwrEpblg5z4gXtT+UBEk3wAfHdlQNrNcK
g5eDgdK2twKjh5iVWZ5fe9/G7BMWPPtfY2mipQ8mOtckoeHWVWvuEK6XiVdOSfAS
FAo6aDPsEN+MdqiQIC5jbVQCcLe6IhdVEvLlzvLdYUCwUvCOKs2d8sfdjJ6C6fQ2
PD2Q2TYpH05tC6J+GRWbqqaKGCaiRByx2QOMhLgCO0PzCsnjhSPl+8RSPZsfAgMB
AAGjggLfMIIC2zAdBgNVHQ4EFgQUnfpNvWfRA5ZUUJEImWa9+kWBgF0wHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTY1MDkucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwgfQGCCsGAQUFBwEHAQH/BIHkMIHhMHQEAgABMG4DBABS
FQADBABSGEwDBABSGMsDBABSGpoDBABSGskDBABSHQAwDAMEAVIdAgMEAFIdBAME
AFIdLAMEAFIdZgMEAVIdaAMEAFIpYgMEAFIpqAMEAFIpyAMEBVIvQAMEBVRLYAME
AFRLgQMEAFRLsTBpBAIAAjBjAwcAKhOVAAEQAwcBKhOVAAEmAwcAKhOVAAE6AwcA
KhOVAAFXAwcAKhOVAAF2AwcAKhOVAAGhAwcAKhOVAAGjAwcAKhOVAAHBAwcAKhOV
AAHDAwcAKhOVAAHXAwcAKhOVAAHzMA0GCSqGSIb3DQEBCwUAA4IBAQAVjOA1XHHI
p4k0X42Bwj0kfaEFYskdvFPov5pja4SuD4021nhO4DY4ttrDhLwkMdrzham5uBif
erw30gdPHCnjsry8TuY6W4uBgnKV6swe9c1mfe5xypJl/+uuAoI6STsittXKj1iA
BKwSEfSyPxp2M32YZ2kdzNI5eRr775OpHRSVRtpyUlft2awK/zeE0WbTb95QFJA1
tn0s4gJSrdU1oWcVAAdrEUccdClzOEqhS6K6XjJrkmBTrxmrQM+46SaUdUPk3aBw
8HLzBC4pXSRgTg8iPdnO7a8OdaMZbzcbZIQDQncviYhI2dp6pwc2WNrWfyqPdwhj
4G4vNvgzLbVd
-----END CERTIFICATE-----
Generated at Sat Oct 17 15:26:17 2026 by rpki-client