Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS216050.roa
File: AS216050.roa (raw, json)
Hash identifier: HjYJax86OmAwBP/HE0+CJRn2Ja3wm8P8NtuVXbx/Q0g=
Subject key identifier: CD:41:AA:CD:F2:9E:D7:E4:E3:1F:B7:57:B2:3F:49:68:52:7A:00:F7
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 62DCBD1FDCFD239D1B9C30CAFB63E67448EA7E43
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS216050.roa
Signing time: Fri 18 Jul 2025 11:23:42 +0000
ROA not before: Fri 18 Jul 2025 11:18:42 +0000
ROA not after: Fri 17 Jul 2026 11:23:42 +0000
asID: 216050
IP address blocks: 46.202.204.0/24 maxlen: 24
46.202.205.0/24 maxlen: 24
46.203.151.0/24 maxlen: 24
46.203.165.0/24 maxlen: 24
46.203.166.0/24 maxlen: 24
46.203.167.0/24 maxlen: 24
46.203.170.0/24 maxlen: 24
46.203.181.0/24 maxlen: 24
46.203.191.0/24 maxlen: 24
46.203.192.0/24 maxlen: 24
46.203.193.0/24 maxlen: 24
46.203.194.0/24 maxlen: 24
46.203.211.0/24 maxlen: 24
46.203.213.0/24 maxlen: 24
46.203.240.0/24 maxlen: 24
91.124.39.0/24 maxlen: 24
91.124.48.0/24 maxlen: 24
91.124.50.0/24 maxlen: 24
91.124.51.0/24 maxlen: 24
92.112.131.0/24 maxlen: 24
92.113.41.0/24 maxlen: 24
92.113.55.0/24 maxlen: 24
92.113.65.0/24 maxlen: 24
92.113.68.0/24 maxlen: 24
92.113.69.0/24 maxlen: 24
92.113.75.0/24 maxlen: 24
92.113.76.0/24 maxlen: 24
92.113.78.0/24 maxlen: 24
92.113.79.0/24 maxlen: 24
92.113.81.0/24 maxlen: 24
92.113.82.0/24 maxlen: 24
92.113.84.0/24 maxlen: 24
92.113.85.0/24 maxlen: 24
92.113.87.0/24 maxlen: 24
92.113.88.0/24 maxlen: 24
92.113.90.0/24 maxlen: 24
92.113.166.0/24 maxlen: 24
92.113.167.0/24 maxlen: 24
95.135.51.0/24 maxlen: 24
95.135.73.0/24 maxlen: 24
95.135.111.0/24 maxlen: 24
95.135.114.0/24 maxlen: 24
95.135.115.0/24 maxlen: 24
95.135.128.0/24 maxlen: 24
95.135.129.0/24 maxlen: 24
95.135.130.0/24 maxlen: 24
95.135.131.0/24 maxlen: 24
95.135.132.0/24 maxlen: 24
95.135.133.0/24 maxlen: 24
95.135.235.0/24 maxlen: 24
178.92.32.0/24 maxlen: 24
178.92.33.0/24 maxlen: 24
178.92.34.0/24 maxlen: 24
178.92.35.0/24 maxlen: 24
178.92.57.0/24 maxlen: 24
178.92.63.0/24 maxlen: 24
178.94.163.0/24 maxlen: 24
178.94.164.0/24 maxlen: 24
178.94.165.0/24 maxlen: 24
178.94.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 02:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:dc:bd:1f:dc:fd:23:9d:1b:9c:30:ca:fb:63:e6:74:48:ea:7e:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jul 18 11:18:42 2025 GMT
Not After : Jul 17 11:23:42 2026 GMT
Subject: CN=CD41AACDF29ED7E4E31FB757B23F4968527A00F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:97:cc:e6:a9:4a:89:ab:31:d8:23:61:9e:3d:
65:cf:22:d1:1a:e9:1a:8f:5f:b9:4a:32:63:6b:08:
d8:cb:52:9c:62:48:92:63:44:44:cb:32:7c:fb:79:
6c:6d:57:90:f1:31:5b:88:7a:26:0e:c1:67:2b:85:
64:b2:a0:ab:6a:06:b6:99:78:99:7c:5e:e4:46:d5:
de:e4:3c:b7:b4:8a:1f:67:86:7c:2e:81:ee:5b:db:
f7:23:96:75:66:8e:2e:88:c2:b7:42:9a:7d:fd:5d:
0f:09:9b:e4:9d:df:c5:3c:59:ce:38:7c:21:18:c3:
f2:e8:3b:96:4f:47:7c:af:ec:59:46:19:6e:9c:fb:
29:dc:a6:d2:e9:38:c1:99:27:93:85:15:f0:1a:53:
6a:79:70:83:d2:1b:71:97:66:7d:87:35:bf:71:a2:
31:3f:98:5b:7e:00:a1:4c:54:37:08:b5:ba:dc:95:
d9:00:fb:c5:02:d4:db:33:b6:72:cc:66:37:4b:b2:
82:30:11:9a:15:c0:e4:71:f5:70:32:69:53:73:fa:
08:38:8d:b6:12:46:a4:11:57:97:cd:5c:17:cd:bf:
78:75:62:3a:f8:a3:1a:35:aa:f2:78:93:be:61:97:
9a:76:75:44:f6:2b:0c:84:8c:49:94:1c:fa:b0:76:
8d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:41:AA:CD:F2:9E:D7:E4:E3:1F:B7:57:B2:3F:49:68:52:7A:00:F7
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS216050.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.204.0/23
46.203.151.0/24
46.203.165.0-46.203.167.255
46.203.170.0/24
46.203.181.0/24
46.203.191.0-46.203.194.255
46.203.211.0/24
46.203.213.0/24
46.203.240.0/24
91.124.39.0/24
91.124.48.0/24
91.124.50.0/23
92.112.131.0/24
92.113.41.0/24
92.113.55.0/24
92.113.65.0/24
92.113.68.0/23
92.113.75.0-92.113.76.255
92.113.78.0/23
92.113.81.0-92.113.82.255
92.113.84.0/23
92.113.87.0-92.113.88.255
92.113.90.0/24
92.113.166.0/23
95.135.51.0/24
95.135.73.0/24
95.135.111.0/24
95.135.114.0/23
95.135.128.0-95.135.133.255
95.135.235.0/24
178.92.32.0/22
178.92.57.0/24
178.92.63.0/24
178.94.163.0-178.94.166.255
Signature Algorithm: sha256WithRSAEncryption
10:55:5f:12:ad:1f:8b:97:c6:6d:2a:f3:08:8e:d5:da:d8:78:
29:e6:a7:5e:f4:68:e6:10:65:3d:a6:c1:78:31:d5:b7:fc:26:
3b:fb:85:b3:5e:eb:16:89:80:6c:77:df:37:88:9b:71:e1:15:
0c:50:37:1f:44:42:50:c4:99:ad:a9:77:4d:52:22:ef:06:e6:
55:30:2f:c8:a8:53:ee:63:76:61:06:3e:de:ab:ed:89:a8:d3:
5c:be:9b:20:66:d6:1e:c9:cd:8f:f6:c7:77:f0:25:17:d9:c4:
e6:af:32:0a:2a:af:3d:bb:47:41:c9:9b:b7:b7:64:64:5c:f7:
bb:dd:c3:16:c8:eb:4b:16:17:80:fb:cd:85:23:d4:8f:2d:b2:
e1:a6:d5:0f:64:3f:7f:fc:c4:2a:a7:55:74:9d:d3:41:b8:cd:
86:2e:7e:98:c4:62:d2:7a:14:88:a6:10:f1:5d:f2:18:41:d2:
3d:9a:d1:0a:8b:f4:d4:dc:14:4a:72:ea:f3:21:0a:48:4d:86:
5f:98:91:c2:7b:91:98:c3:7c:2b:e5:bb:54:ec:1a:b9:58:74:
dc:a7:6c:b3:5f:ab:52:08:a3:68:30:63:a8:b5:d8:d2:28:4e:
ce:87:26:7c:41:2a:16:b8:83:fe:09:82:89:a6:0e:3f:96:9c:
81:6d:b5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 08:33:09 2025 by rpki-client