Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS216059.roa
File: AS216059.roa (raw, json)
Hash identifier: Cx0hC01bmFXsODJxb1ROijDkJM3dp6SE5n4JUQ8KlQI=
Subject key identifier: CE:3D:0D:94:8F:EC:7C:80:FC:3C:66:95:34:24:56:0D:3C:FD:FF:16
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 74855EF4198D7CC1C830F83EF8F9CB7A3FF978E9
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS216059.roa
Signing time: Sat 04 Oct 2025 00:02:26 +0000
ROA not before: Fri 03 Oct 2025 23:57:26 +0000
ROA not after: Sat 03 Oct 2026 00:02:26 +0000
asID: 216059
IP address blocks: 146.103.28.0/24 maxlen: 24
155.117.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 11:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:85:5e:f4:19:8d:7c:c1:c8:30:f8:3e:f8:f9:cb:7a:3f:f9:78:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 3 23:57:26 2025 GMT
Not After : Oct 3 00:02:26 2026 GMT
Subject: CN=CE3D0D948FEC7C80FC3C66953424560D3CFDFF16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:75:d5:a8:d4:51:ae:4b:43:74:cf:0d:c9:9f:
3c:63:cd:7a:0a:5c:38:8b:4d:ca:8b:16:cc:3d:8a:
02:23:52:5a:36:27:ba:be:38:41:12:c8:c2:60:32:
d0:89:7a:95:06:d1:76:1b:c0:6d:bb:58:45:6b:96:
30:cf:99:c5:d4:8d:d8:a3:db:99:32:90:aa:1d:64:
ef:60:3c:63:a3:f4:17:54:e5:ef:fd:bd:fa:40:9f:
f8:c0:47:92:6d:fd:2b:49:7e:12:f2:7c:27:5b:d2:
b3:a4:d5:77:b1:97:5b:cd:bf:b3:a8:a1:58:fe:0f:
20:c0:c0:92:55:5f:68:43:15:26:4e:fd:06:9b:8f:
b1:7e:c4:6c:27:d2:ac:7e:32:42:7b:e4:9b:95:e9:
7c:a1:5c:02:4f:ba:6b:db:ce:8e:50:21:95:a0:dd:
e5:10:80:6a:aa:1d:24:37:9d:70:be:44:3f:de:9f:
06:b9:73:98:b2:44:79:c7:a3:4b:ce:8f:80:8a:a9:
6d:b6:f7:6d:d6:f3:d3:6f:66:41:77:ae:ec:ab:ef:
c2:f5:d0:d6:86:49:b9:6a:af:c5:ab:ec:a1:8a:bc:
cc:56:09:d7:9a:c1:2a:b6:9e:93:3b:22:82:5d:65:
6c:9a:f1:9e:ee:da:8a:62:cf:76:24:03:3f:d2:ee:
f7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:3D:0D:94:8F:EC:7C:80:FC:3C:66:95:34:24:56:0D:3C:FD:FF:16
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS216059.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.28.0/24
155.117.210.0/24
Signature Algorithm: sha256WithRSAEncryption
94:77:64:2d:52:06:a2:30:00:28:18:df:3e:14:61:fc:65:f9:
ae:27:46:7f:cf:8a:0a:b7:95:10:e0:e2:40:09:a2:8c:89:da:
eb:23:71:47:e1:6b:bd:69:6a:fa:5a:33:d0:41:35:3e:d4:e9:
3a:9a:4d:bb:d0:8f:91:42:26:98:b2:0b:7d:de:38:33:ee:20:
cc:cb:04:75:cb:56:b5:37:9f:d8:7a:d3:3d:ef:63:93:52:79:
02:2f:1a:cb:24:51:f8:75:2c:17:d7:09:34:63:c8:41:16:60:
5f:c7:e6:00:5b:50:4f:c6:bc:02:0d:15:b2:57:f8:c4:7c:25:
b2:f1:c5:0b:48:26:e5:46:8c:72:a7:76:ea:a7:ad:b4:2e:de:
4b:34:ce:ec:7f:da:87:22:86:87:e2:c5:a6:f7:13:57:50:02:
a7:c0:28:1a:e3:19:79:47:92:3c:8d:0f:48:f6:b1:4b:66:fd:
2c:f3:89:40:1b:a3:06:6c:bc:fe:62:57:a0:12:4a:79:47:db:
e2:fe:cd:1f:9b:e4:29:37:ad:de:0a:12:3d:69:fd:76:08:f6:
89:19:c2:4c:fa:9c:7c:8a:24:6e:70:0f:6f:02:1a:d6:6d:62:
38:ad:e2:14:60:7e:73:e2:0d:55:88:e0:e6:f8:63:84:d6:65:
9c:82:18:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 19:56:59 2025 by rpki-client