Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS16509.roa
File: AS16509.roa (raw, json)
Hash identifier: TZaso8O1mBIsvh6LRG6GIj/6hyWmaWTZBE1WFlLb3Uw=
Subject key identifier: C0:63:07:A0:53:04:5B:EF:BD:E5:74:31:45:36:16:AB:4B:23:C8:3E
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 3779BB6446675AF25C063BA1829542897D20C299
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS16509.roa
Signing time: Fri 16 Oct 2026 00:06:17 +0000
ROA not before: Fri 16 Oct 2026 00:01:17 +0000
ROA not after: Fri 15 Oct 2027 00:06:17 +0000
asID: 16509
IP address blocks: 78.41.48.0/24 maxlen: 24
82.139.229.0/24 maxlen: 24
82.139.239.0/24 maxlen: 24
212.17.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 19:43:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:79:bb:64:46:67:5a:f2:5c:06:3b:a1:82:95:42:89:7d:20:c2:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Oct 16 00:01:17 2026 GMT
Not After : Oct 15 00:06:17 2027 GMT
Subject: CN=C06307A053045BEFBDE57431453616AB4B23C83E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:dc:a9:5b:be:be:84:e3:48:35:8d:0e:28:c2:
c3:96:b2:1c:1f:2c:b6:0c:6c:ea:ca:1c:b3:3e:83:
e5:a8:a7:7e:48:80:a6:33:8e:97:e2:b2:de:aa:90:
c2:fe:04:9d:34:f0:a2:34:1f:bb:21:fd:15:f4:80:
c5:d2:d0:cb:7f:bd:56:c5:d3:42:6c:66:37:3a:9b:
eb:50:cf:08:65:9a:4e:41:5b:48:01:c9:04:11:46:
07:0c:95:ee:37:24:e8:94:29:26:d9:a0:ca:87:54:
62:8f:eb:8d:70:01:b1:82:37:ab:1e:13:31:ab:20:
52:38:82:f3:79:cf:56:b8:38:1d:36:7b:71:0d:42:
4e:7c:86:45:c8:df:74:3a:e2:4b:27:28:86:e5:cb:
e3:60:10:83:a4:61:75:72:4b:59:58:60:98:8d:1a:
b9:0e:f6:ff:6b:7d:e6:8d:6f:5f:24:b4:86:58:e6:
f9:8c:32:9c:e7:42:ca:b1:83:02:47:fa:9f:24:10:
af:27:41:0d:ed:dc:80:58:f1:c8:97:e8:1d:89:82:
fd:f7:f0:85:da:04:87:1a:e3:59:ae:dc:af:16:08:
a7:03:fa:a3:12:a9:db:f4:f9:45:29:bd:3d:69:4a:
14:42:d4:7b:db:35:1f:92:13:17:e0:6b:c8:e0:c3:
c9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:63:07:A0:53:04:5B:EF:BD:E5:74:31:45:36:16:AB:4B:23:C8:3E
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS16509.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.41.48.0/24
82.139.229.0/24
82.139.239.0/24
212.17.228.0/22
Signature Algorithm: sha256WithRSAEncryption
27:c5:cc:b3:33:e3:56:eb:c5:f7:66:82:97:79:1d:b4:f9:85:
a7:37:31:34:9e:9c:a6:a0:2b:0d:b9:fb:93:19:b3:1c:1e:93:
aa:24:4f:8e:4c:21:bf:cb:58:69:fb:91:84:89:63:14:c9:81:
4d:e9:32:58:8e:51:7e:0f:69:61:77:1f:00:a9:11:7a:83:b8:
40:08:1b:99:25:55:26:17:63:0e:dd:31:6e:26:d2:fb:1a:c9:
7d:1e:22:6a:5a:85:71:ea:92:5f:89:af:dd:db:db:29:b6:2a:
99:0c:36:01:b4:3a:d3:dc:6c:1a:9d:06:69:3f:8d:60:2a:7d:
d5:9c:b4:5d:34:dc:aa:02:ad:5e:00:b9:92:1f:86:2a:a9:b0:
64:e9:dd:93:d1:bb:ca:41:5d:dc:cd:84:b2:c1:0a:aa:22:0a:
54:95:c9:cd:98:b5:67:9d:78:b9:c7:a5:32:18:8c:90:9e:23:
b6:c0:cc:17:cd:11:18:bc:44:d0:1f:7b:17:c8:58:4f:e3:25:
d9:1b:83:f3:d7:48:1b:d1:c1:77:65:39:ce:38:0f:df:29:97:
08:81:1f:d8:a5:40:9b:14:05:d4:43:cd:18:0a:ae:08:9e:de:
d4:92:f4:11:f2:32:fb:ab:41:7b:ec:b4:f5:5e:f8:c3:cc:2c:
d1:46:41:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 04:46:59 2026 by rpki-client