Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS16509.roa
File: AS16509.roa (raw, json)
Hash identifier: ZLXE4GpwOXhWVMhHLhiYYRiI4ahLAVYl9yWvPRgek1c=
Subject key identifier: 6C:D4:E8:49:D7:1B:4A:B2:35:6F:D2:BE:08:11:CD:C3:76:64:40:B0
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 11B713ECC1B0D81360DF139CDC031E84D4B72FD4
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS16509.roa
Signing time: Fri 17 Jul 2026 08:28:45 +0000
ROA not before: Fri 17 Jul 2026 08:23:45 +0000
ROA not after: Fri 16 Jul 2027 08:28:45 +0000
asID: 16509
IP address blocks: 78.41.48.0/24 maxlen: 24
212.17.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:47:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:b7:13:ec:c1:b0:d8:13:60:df:13:9c:dc:03:1e:84:d4:b7:2f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Jul 17 08:23:45 2026 GMT
Not After : Jul 16 08:28:45 2027 GMT
Subject: CN=6CD4E849D71B4AB2356FD2BE0811CDC3766440B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7b:6a:c9:9d:44:00:47:5e:38:c6:50:eb:48:
8b:a8:96:c5:14:73:78:13:a6:9d:37:7f:4b:53:18:
93:bd:02:f4:23:33:36:a2:6d:93:01:6c:32:0c:36:
05:af:15:be:4c:e1:f5:72:bd:f9:5a:20:66:e0:28:
dc:ec:0c:c5:f5:96:6a:83:bc:26:1f:d0:c0:a3:65:
c7:e0:f5:5b:a5:a0:d4:32:03:83:6b:92:be:2c:87:
be:ec:87:cd:2e:0b:c0:89:a6:26:9b:05:b7:a8:2f:
e8:ff:17:37:ab:d4:21:e5:05:30:3d:f9:58:6e:be:
16:b1:34:6b:be:54:3f:d0:b0:7d:c6:38:da:a4:05:
7d:36:b9:a3:4c:7e:d0:7f:ef:50:8e:4e:28:91:2b:
7f:51:bc:a3:23:70:d5:13:b0:3a:26:fb:4a:c5:bd:
da:9c:39:5f:31:bf:b6:9d:56:83:f3:f9:6f:aa:f7:
ab:91:aa:19:2e:1b:0a:08:00:10:37:1c:d6:77:9d:
ed:14:f4:a5:f6:33:cd:11:0f:f1:ba:c1:c3:76:ed:
bc:f0:54:bd:5b:66:eb:68:49:24:09:2d:67:c9:75:
d7:b9:be:cf:d5:42:5f:c1:88:5c:fa:46:b2:56:2f:
03:0c:63:ee:4d:2f:c1:ae:b5:0a:5d:c3:0e:94:a7:
31:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D4:E8:49:D7:1B:4A:B2:35:6F:D2:BE:08:11:CD:C3:76:64:40:B0
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS16509.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.41.48.0/24
212.17.228.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:96:ef:97:b0:66:80:1f:b8:ad:46:8b:5c:50:9a:1e:a2:11:
0d:6b:83:8f:9f:97:a5:6e:9b:89:76:36:95:64:5b:0c:ce:06:
d3:0f:b5:8a:d3:8d:55:03:de:08:37:a7:46:3a:74:a7:29:2a:
d2:51:24:9d:a9:dc:ce:b0:81:20:a9:c1:68:80:89:06:53:19:
0b:b8:9d:5b:3d:01:65:5c:4a:02:6c:89:3b:a0:98:70:52:b4:
01:e5:36:c4:b9:0b:03:85:56:dc:1a:87:f1:cc:a0:c8:69:fe:
15:1b:ae:b3:18:e2:37:05:68:1c:7b:5f:76:cf:2c:ad:ff:44:
b3:56:f1:b9:23:8f:1d:7a:2d:6d:8a:93:c4:97:6e:fd:63:01:
39:3a:51:f3:0e:1b:89:d0:59:d6:85:ff:d2:0a:12:20:28:d4:
47:27:dd:d1:13:ed:09:85:30:c8:73:31:e1:cd:62:0b:45:93:
86:26:3b:d7:90:f6:2a:30:cb:b3:3e:2a:bb:e0:0e:3a:e0:09:
9a:45:06:3e:50:49:76:28:03:6a:26:01:bb:49:3c:9b:98:61:
81:76:ab:96:da:b4:d3:7f:a0:5b:b5:3b:20:ac:a9:97:02:da:
da:69:51:83:7d:d9:8b:d0:2b:ac:0e:30:eb:94:bb:7c:b2:f5:
f9:60:a4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:14:21 2026 by rpki-client