Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS216311.roa
File: AS216311.roa (raw, json)
Hash identifier: Zkrrr5NvVEMsSJhDYaGxop5j8xXrVE3ELxQtecah2Gg=
Subject key identifier: A4:6F:71:80:FC:AF:0F:0C:C1:11:E6:15:9A:82:E1:C3:CE:1B:63:A6
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 0C032AA85ABB4741F406FEF31380462C22C1332A
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS216311.roa
Signing time: Tue 19 May 2026 09:29:15 +0000
ROA not before: Tue 19 May 2026 09:24:15 +0000
ROA not after: Tue 18 May 2027 09:29:15 +0000
asID: 216311
IP address blocks: 143.14.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 15:08:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:03:2a:a8:5a:bb:47:41:f4:06:fe:f3:13:80:46:2c:22:c1:33:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: May 19 09:24:15 2026 GMT
Not After : May 18 09:29:15 2027 GMT
Subject: CN=A46F7180FCAF0F0CC111E6159A82E1C3CE1B63A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:be:4e:8b:27:13:a7:cf:ec:c7:b3:cd:fd:ca:
bc:8a:81:a3:ad:3a:45:24:9a:d8:ec:ba:aa:e1:8e:
b8:36:14:70:56:b6:cd:94:b2:c5:f2:2e:4d:cc:c3:
16:9c:68:ac:ff:4e:7f:9e:17:3d:45:14:92:85:63:
96:fe:13:87:27:c1:aa:11:90:05:9a:8f:c1:32:70:
3c:16:99:66:3f:81:2b:9d:3a:87:93:a5:dd:33:75:
3b:f6:1f:ad:23:25:a8:b1:08:51:f9:36:44:ae:a5:
80:c9:73:d9:9b:5e:88:51:6a:75:87:03:15:73:5d:
b8:e6:b5:58:85:fe:e6:ee:cd:8d:6a:ac:ba:9e:83:
4e:2b:41:0d:56:7a:b6:03:44:55:d3:61:0a:d6:b4:
b6:63:6f:99:74:93:a8:20:1b:ec:78:26:de:f3:3a:
78:f1:18:e9:60:f5:28:e4:fe:c6:1d:a8:89:66:4e:
88:a1:b8:ad:4b:12:56:ea:c1:72:48:6f:94:75:3b:
4c:eb:8f:f3:49:14:bd:c6:1b:24:7a:2f:fb:3a:77:
b4:28:76:45:f4:9d:83:63:34:56:cc:17:a9:e5:33:
bb:02:80:d9:d0:61:64:2b:03:c0:8a:c9:6c:4f:a1:
a5:4c:a5:e6:f2:b8:84:39:03:fa:65:ca:fb:2a:29:
b0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:6F:71:80:FC:AF:0F:0C:C1:11:E6:15:9A:82:E1:C3:CE:1B:63:A6
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS216311.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.1.0/24
Signature Algorithm: sha256WithRSAEncryption
60:61:a5:16:26:6a:d9:2a:82:b8:65:67:ef:5d:63:8c:a3:41:
b4:6c:c6:25:71:37:0c:96:87:27:5b:ef:71:09:48:78:cc:00:
b5:89:c5:dc:2d:15:b6:a7:0e:dd:e0:df:f2:06:9b:82:91:1a:
c3:89:9d:33:ef:bf:69:61:59:dc:8c:ce:a8:9f:21:d5:ed:50:
d7:a2:f1:00:79:29:e2:44:47:08:be:43:be:0d:0a:c8:83:57:
77:60:32:a2:b1:19:6a:be:62:77:51:40:60:e5:d5:7b:7b:f2:
13:f3:95:b0:e7:92:89:1f:68:95:df:c4:a2:20:5e:f5:02:4c:
8c:ba:23:f5:0d:9a:af:9e:35:d1:14:cd:24:b6:53:1a:f1:2e:
4b:d0:14:5a:43:6b:1a:e5:cd:67:0d:99:03:c3:21:76:79:ff:
74:8b:15:10:94:60:f7:fe:7e:56:e4:8c:da:40:27:f5:76:45:
54:e1:00:b2:e4:23:fe:dc:89:7a:9a:99:34:a9:61:f2:6d:0c:
bd:63:83:3b:f2:67:a6:22:5a:0c:4c:75:b6:83:c6:e1:9f:cd:
f7:6e:b7:03:ff:ba:c4:ab:72:dd:8f:eb:a1:90:a0:ee:97:6a:
90:00:b9:da:a8:9b:4e:6f:18:3e:bf:b4:f6:15:46:be:c2:8a:
19:58:33:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 01:16:18 2026 by rpki-client