Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS16158.roa
File: AS16158.roa (raw, json)
Hash identifier: Mr5d3LQZbmVb+HP+M+9JkRR1RgAwZDLpsDxYuu2ftrI=
Subject key identifier: 87:F6:91:8D:2E:2E:1D:18:CF:F5:6E:E2:39:C3:CE:26:07:9E:B6:45
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 29BE3C501E6B1CA8FE2F8788D82436C003FDBAD1
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS16158.roa
Signing time: Sun 04 Oct 2026 00:51:38 +0000
ROA not before: Sun 04 Oct 2026 00:46:38 +0000
ROA not after: Sun 03 Oct 2027 00:51:38 +0000
asID: 16158
IP address blocks: 62.219.102.0/24 maxlen: 24
62.219.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:be:3c:50:1e:6b:1c:a8:fe:2f:87:88:d8:24:36:c0:03:fd:ba:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 4 00:46:38 2026 GMT
Not After : Oct 3 00:51:38 2027 GMT
Subject: CN=87F6918D2E2E1D18CFF56EE239C3CE26079EB645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:68:9b:79:e3:66:de:aa:ce:5a:4b:42:25:68:
77:6f:44:fb:f1:30:ed:20:a8:3b:00:c6:ab:46:52:
bb:28:9a:d4:1f:42:e8:4e:55:9b:24:37:5c:e1:74:
9b:f4:ca:fb:12:4e:54:79:e0:db:85:1e:4a:30:47:
91:76:c4:0b:23:0c:e5:4d:d5:5e:ad:82:2c:e0:36:
6d:0f:22:0a:8c:cd:57:9b:64:b7:1e:a3:93:46:41:
e8:9c:1d:82:a0:0f:25:05:f7:76:88:c9:6a:b4:15:
34:e2:5b:8f:cf:df:32:e2:60:b5:0f:24:13:de:02:
9b:a4:bb:c2:3d:7f:3b:5f:94:31:ad:62:f6:79:13:
1a:8f:f0:13:b9:29:b0:3e:ca:45:45:6d:35:8d:a5:
f3:5f:09:04:2c:bc:45:53:57:70:f8:4b:f0:c4:eb:
5c:b5:99:2c:c0:63:ff:5f:76:37:05:34:71:36:18:
8e:98:a1:f1:89:ba:8c:e1:e9:0a:d0:3e:06:4c:30:
11:23:b8:50:f5:24:b7:b0:54:ba:f8:92:82:46:88:
15:7e:92:83:88:aa:4a:55:2d:25:46:5c:fa:c0:86:
cb:ed:87:cb:fd:21:a2:92:c6:fa:9e:cd:5a:fe:63:
26:f9:9a:7c:a7:33:fd:0e:bc:6f:4e:10:25:06:91:
82:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F6:91:8D:2E:2E:1D:18:CF:F5:6E:E2:39:C3:CE:26:07:9E:B6:45
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS16158.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.219.102.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:fe:b2:77:43:f7:69:20:c1:a6:2e:34:65:81:3a:6b:1f:75:
f4:a6:51:5c:8a:99:cd:68:df:a1:37:17:3a:9b:8e:17:5e:da:
47:91:94:e1:14:b3:10:08:03:fc:bd:ca:56:30:f1:27:18:7d:
88:35:6a:84:c9:4e:fc:3e:e6:95:95:a2:57:5e:d2:84:f3:cf:
a1:7d:bf:cf:dc:d3:43:da:5c:7a:12:44:e2:61:a8:04:9a:13:
0a:6c:7c:41:ae:c0:fc:60:52:77:75:a8:c2:d1:97:91:29:94:
47:f0:03:5b:e8:c3:3f:b3:5f:e1:81:e8:d8:f4:de:92:2d:5d:
13:c6:1b:aa:c9:a0:32:fe:f8:87:6c:ca:0f:46:dc:e7:26:7a:
72:d1:22:e6:4e:c3:39:13:7b:cf:47:a3:e6:54:f3:91:06:aa:
88:52:86:6b:83:e1:da:47:40:39:24:ef:fb:93:e3:a8:68:cc:
36:85:8a:92:ec:77:7d:e7:6f:0d:0a:24:ff:ba:75:48:eb:83:
f3:ee:60:2a:32:ff:9a:46:a0:57:a0:1a:45:cd:37:e0:1e:df:
fd:15:8a:ab:b5:d0:eb:b1:b8:db:71:91:73:45:27:19:d3:06:
ec:cc:06:6a:0b:c4:49:67:17:56:7a:c5:42:d1:73:fb:d5:6b:
e1:47:d7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:37:10 2026 by rpki-client