Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS16509.roa
File: AS16509.roa (raw, json)
Hash identifier: xakUDvlpLL+5/pSc+Mol6Bti5FAa23ETPOv48eIwm3k=
Subject key identifier: 65:58:F2:94:B8:04:7C:72:EF:CA:EA:B6:C0:A4:0A:05:32:34:E0:E2
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 3018AF364326E2D3FA7AB2EA93C3BD1346466ADC
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS16509.roa
Signing time: Tue 25 Aug 2026 08:16:06 +0000
ROA not before: Tue 25 Aug 2026 08:11:06 +0000
ROA not after: Tue 24 Aug 2027 08:16:06 +0000
asID: 16509
IP address blocks: 78.41.48.0/24 maxlen: 24
82.139.229.0/24 maxlen: 24
82.139.239.0/24 maxlen: 24
212.17.228.0/22 maxlen: 24
212.60.154.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 08:42:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:18:af:36:43:26:e2:d3:fa:7a:b2:ea:93:c3:bd:13:46:46:6a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Aug 25 08:11:06 2026 GMT
Not After : Aug 24 08:16:06 2027 GMT
Subject: CN=6558F294B8047C72EFCAEAB6C0A40A053234E0E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c6:62:a0:87:23:e6:6d:e2:f0:9f:16:29:de:
e9:30:6d:13:6d:d5:52:1e:ad:84:8f:49:af:d0:2e:
5f:02:9d:31:e6:1d:35:3a:2e:cd:dd:87:c5:fc:99:
42:9a:a4:42:cd:29:77:17:03:34:84:62:7d:e8:44:
f1:9d:fe:8d:75:bc:62:3b:23:64:e6:29:96:6f:c6:
4f:b0:ae:48:db:40:03:e7:ee:cc:e0:50:62:4b:cd:
44:3d:3a:f4:31:2e:0b:bc:15:76:89:9d:ed:46:70:
25:b3:ec:83:08:ee:fd:1e:6b:f8:41:4f:f1:e0:44:
4b:da:a9:b4:9f:7b:72:21:6a:6c:46:50:8a:b3:3d:
70:86:42:2a:95:8e:5a:03:6b:32:af:fb:0c:00:7d:
84:1e:c8:50:33:78:fc:45:e4:42:05:70:8e:f8:b6:
f0:50:42:dd:8f:24:61:ef:d0:e8:ef:4d:2a:ed:82:
1e:68:cd:30:41:6b:b6:e6:83:5e:39:96:65:0d:4a:
07:3e:51:1c:e9:e8:f1:dc:04:67:9a:c4:05:63:0e:
9f:75:a1:1e:c1:81:f1:bc:c0:84:e0:10:61:5b:96:
7c:89:b6:23:6d:a5:6e:6f:00:7e:6c:8e:ee:11:9e:
ad:61:43:b2:8b:80:0b:ec:a7:9e:be:6c:6a:0d:0b:
5b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:58:F2:94:B8:04:7C:72:EF:CA:EA:B6:C0:A4:0A:05:32:34:E0:E2
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS16509.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.41.48.0/24
82.139.229.0/24
82.139.239.0/24
212.17.228.0/22
212.60.154.0/23
Signature Algorithm: sha256WithRSAEncryption
28:c5:da:af:06:fb:1b:0b:6f:58:be:dd:9f:79:bf:b4:88:22:
57:a0:bf:a6:ec:ef:ad:7e:41:2f:f9:41:8e:e0:d5:b1:35:bc:
e7:96:52:0f:e9:6d:3a:aa:ac:80:75:6d:63:2b:db:5b:90:bf:
0a:47:8b:40:3f:a4:ba:89:68:44:f8:5b:51:76:d5:87:ea:bd:
33:7d:56:b7:49:12:b5:ec:4f:45:5e:2a:c3:34:5a:dc:5a:15:
d4:27:f1:f8:a7:e5:a5:c8:95:e7:ed:df:ad:dc:e7:94:ac:5a:
84:45:87:44:29:71:5a:14:3c:e2:4c:cf:83:56:18:4d:2f:8b:
a6:10:b7:7a:cf:a1:e5:ca:67:f9:b5:be:a5:2f:fb:d2:45:b1:
aa:80:bc:ff:66:c3:16:29:26:67:cf:23:fc:d7:fb:c0:9d:71:
b2:54:3f:89:43:15:5e:b6:30:85:9c:41:09:c0:fa:6a:01:f3:
88:b3:6a:2e:96:23:c9:d2:2f:18:1b:ec:0e:1e:57:a7:3c:c7:
d1:c5:d9:64:4c:41:5c:cc:70:95:00:22:2e:10:10:ea:b9:57:
c9:69:1a:f8:14:df:ff:25:75:1a:33:30:77:e4:00:cc:5d:b6:
32:9d:7d:15:f2:08:25:d1:14:12:ee:d4:c7:68:bf:6d:22:fe:
4d:c5:00:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:21:59 2026 by rpki-client