Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS16509.roa
File: AS16509.roa (raw, json)
Hash identifier: YdvUyIMIEQBh6l7kn35hXn6m3W00Qz/6FKmoA43sng4=
Subject key identifier: 49:69:2A:31:D2:66:35:B2:50:AB:20:77:DF:01:6F:B6:14:41:2F:28
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 74FD5AFA58854CC8DE16B853E803738A8CFA50FE
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS16509.roa
Signing time: Tue 29 Sep 2026 13:37:19 +0000
ROA not before: Tue 29 Sep 2026 13:32:19 +0000
ROA not after: Tue 28 Sep 2027 13:37:19 +0000
asID: 16509
IP address blocks: 96.62.208.0/22 maxlen: 22
140.150.156.0/24 maxlen: 24
140.233.128.0/19 maxlen: 24
143.14.227.0/24 maxlen: 24
145.223.64.0/24 maxlen: 24
145.223.65.0/24 maxlen: 24
146.103.60.0/24 maxlen: 24
146.103.62.0/23 maxlen: 24
147.79.25.0/24 maxlen: 24
148.135.180.0/24 maxlen: 24
148.135.186.0/24 maxlen: 24
155.117.0.0/24 maxlen: 24
155.117.60.0/24 maxlen: 24
155.117.185.0/24 maxlen: 24
155.117.187.0/24 maxlen: 24
155.117.203.0/24 maxlen: 24
162.141.44.0/24 maxlen: 24
162.141.159.0/24 maxlen: 24
162.141.180.0/24 maxlen: 24
168.222.17.0/24 maxlen: 24
168.222.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:fd:5a:fa:58:85:4c:c8:de:16:b8:53:e8:03:73:8a:8c:fa:50:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 29 13:32:19 2026 GMT
Not After : Sep 28 13:37:19 2027 GMT
Subject: CN=49692A31D26635B250AB2077DF016FB614412F28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:64:3e:c5:5e:af:af:af:5f:5f:94:d3:0c:c1:
15:b0:11:3c:53:8c:b3:37:e9:5a:cf:e8:82:4d:80:
05:cf:21:36:44:c7:0a:dd:a2:30:b8:b0:c6:61:aa:
fa:1f:02:02:20:97:43:a9:99:98:cd:d3:7e:e6:98:
11:79:f5:99:e4:75:46:cd:e5:de:90:d3:09:8f:e7:
02:87:07:38:9f:c0:67:e5:1b:dc:f4:72:4e:6d:2e:
bd:06:8a:6d:43:cb:70:20:6d:89:1a:1b:91:6e:3e:
6e:9a:20:2f:a4:7f:94:c6:95:de:e5:ad:2f:30:e8:
d9:c3:73:bb:0e:e3:aa:24:8e:a8:75:49:d4:1f:06:
ee:cf:60:1b:24:13:38:81:d0:4a:32:d1:1e:34:54:
8e:24:24:09:22:55:6f:7f:77:b5:9a:05:cf:68:f1:
53:dd:59:87:1a:44:e7:bd:4d:22:eb:d8:2c:6e:33:
79:32:60:d1:2d:a8:0c:d0:84:b3:d8:52:f6:c3:c0:
27:da:8e:41:e3:87:a1:c8:13:a2:24:be:18:ea:06:
e7:8d:0e:6b:bc:6e:5c:ee:64:48:3c:65:26:5a:f6:
fb:2a:da:7d:72:28:b3:99:78:9e:8a:8f:79:0b:dd:
c8:7b:2f:07:8a:84:1e:d3:69:70:50:75:ba:62:a9:
eb:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:69:2A:31:D2:66:35:B2:50:AB:20:77:DF:01:6F:B6:14:41:2F:28
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS16509.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.208.0/22
140.150.156.0/24
140.233.128.0/19
143.14.227.0/24
145.223.64.0/23
146.103.60.0/24
146.103.62.0/23
147.79.25.0/24
148.135.180.0/24
148.135.186.0/24
155.117.0.0/24
155.117.60.0/24
155.117.185.0/24
155.117.187.0/24
155.117.203.0/24
162.141.44.0/24
162.141.159.0/24
162.141.180.0/24
168.222.17.0/24
168.222.121.0/24
Signature Algorithm: sha256WithRSAEncryption
76:74:82:5d:17:ea:be:24:c9:3b:d5:eb:bb:07:ce:e1:a3:e4:
76:75:fe:6f:60:8a:79:63:cd:01:32:fa:6a:7f:65:4a:be:ec:
88:08:a4:f4:ef:9c:8d:d9:65:f0:12:17:b1:e5:8b:aa:00:3c:
ca:aa:32:73:54:be:7c:9c:eb:27:34:65:0d:26:dd:28:3b:8b:
6f:a4:fd:74:a5:fd:79:74:1a:cf:6c:b4:44:1b:3c:b4:d4:ce:
ea:a0:0b:33:72:82:f0:1f:78:d8:36:27:95:53:77:ba:7e:17:
91:ef:c1:43:b2:90:33:ec:00:6e:3c:ec:cf:85:73:56:c9:39:
c9:0d:1c:bf:27:0f:cb:82:87:6e:77:25:34:d4:21:c2:c7:e9:
2d:c9:f2:eb:d5:89:c8:53:ca:cf:39:6d:13:02:42:5b:a9:93:
ce:9e:00:5b:1d:f2:f5:9b:4e:4a:8c:32:fb:cf:f2:23:2e:b6:
14:99:18:fd:4a:72:66:12:e9:27:88:ed:a9:82:83:38:11:6f:
80:bc:4c:06:85:1d:3e:7b:c1:44:a1:11:42:fa:8a:ae:f7:fe:
73:84:3e:59:58:f5:75:24:6f:be:57:ba:b2:d8:27:09:c2:4d:
2e:90:b4:b6:65:6a:b6:30:39:b8:f1:eb:e6:48:db:76:e7:a1:
25:8d:af:89
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgIUdP1a+liFTMjeFrhT6ANzioz6UP4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA5MjkxMzMyMTlaFw0yNzA5MjgxMzM3MTlaMDMxMTAvBgNV
BAMTKDQ5NjkyQTMxRDI2NjM1QjI1MEFCMjA3N0RGMDE2RkI2MTQ0MTJGMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsZD7FXq+vr19flNMMwRWwETxT
jLM36VrP6IJNgAXPITZExwrdojC4sMZhqvofAgIgl0OpmZjN037mmBF59ZnkdUbN
5d6Q0wmP5wKHBzifwGflG9z0ck5tLr0Gim1Dy3AgbYkaG5FuPm6aIC+kf5TGld7l
rS8w6NnDc7sO46okjqh1SdQfBu7PYBskEziB0Eoy0R40VI4kJAkiVW9/d7WaBc9o
8VPdWYcaROe9TSLr2CxuM3kyYNEtqAzQhLPYUvbDwCfajkHjh6HIE6IkvhjqBueN
Dmu8blzuZEg8ZSZa9vsq2n1yKLOZeJ6Kj3kL3ch7LweKhB7TaXBQdbpiqevPAgMB
AAGjggJ+MIICejAdBgNVHQ4EFgQUSWkqMdJmNbJQqyB33wFvthRBLygwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMTY1MDkucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwgZMGCCsGAQUFBwEHAQH/BIGDMIGAMH4EAgABMHgDBAJg
PtADBACMlpwDBAWM6YADBACPDuMDBAGR30ADBACSZzwDBAGSZz4DBACTTxkDBACU
h7QDBACUh7oDBACbdQADBACbdTwDBACbdbkDBACbdbsDBACbdcsDBACijSwDBACi
jZ8DBACijbQDBACo3hEDBACo3nkwDQYJKoZIhvcNAQELBQADggEBAHZ0gl0X6r4k
yTvV67sHzuGj5HZ1/m9ginljzQEy+mp/ZUq+7IgIpPTvnI3ZZfASF7Hli6oAPMqq
MnNUvnyc6yc0ZQ0m3Sg7i2+k/XSl/Xl0Gs9stEQbPLTUzuqgCzNygvAfeNg2J5VT
d7p+F5HvwUOykDPsAG487M+Fc1bJOckNHL8nD8uCh253JTTUIcLH6S3J8uvVichT
ys85bRMCQlupk86eAFsd8vWbTkqMMvvP8iMuthSZGP1KcmYS6SeI7amCgzgRb4C8
TAaFHT57wUShEUL6iq73/nOEPllY9XUkb75XurLYJwnCTS6QtLZlarYwObjx6+ZI
23bnoSWNr4k=
-----END CERTIFICATE-----
Generated at Mon Oct 19 10:32:38 2026 by rpki-client