Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS16509.roa
File: AS16509.roa (raw, json)
Hash identifier: wW68Md5tZDcpLoL16CAyP2873CJI2dx3GJBRC7wmZqQ=
Subject key identifier: 2E:FE:E6:03:99:A2:31:2F:F1:3C:AE:D9:44:BC:D6:02:15:95:60:10
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 47C6B0397D30896D34CB5AC93F4A03B807FE44CB
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS16509.roa
Signing time: Mon 05 Oct 2026 09:00:27 +0000
ROA not before: Mon 05 Oct 2026 08:55:27 +0000
ROA not after: Mon 04 Oct 2027 09:00:27 +0000
asID: 16509
IP address blocks: 79.182.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Oct 2026 09:50:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:c6:b0:39:7d:30:89:6d:34:cb:5a:c9:3f:4a:03:b8:07:fe:44:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 5 08:55:27 2026 GMT
Not After : Oct 4 09:00:27 2027 GMT
Subject: CN=2EFEE60399A2312FF13CAED944BCD60215956010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fc:65:9a:1b:0f:13:29:db:b6:95:65:91:ae:
ab:48:04:20:52:a4:c4:2f:a9:62:a2:c0:7e:5f:0b:
74:6c:f8:4e:3f:1e:b1:90:13:05:06:00:8d:2f:9e:
a9:7b:76:b4:32:cd:6d:94:bc:b7:e1:7b:cc:35:02:
b3:60:cc:be:f3:0e:ce:51:d7:80:99:c1:72:96:b7:
3c:e2:4c:2b:31:ed:93:d0:ad:98:44:db:3b:16:da:
e5:aa:16:31:cc:63:f1:96:06:89:b8:75:c6:b7:16:
22:42:26:1b:d5:98:b0:de:19:6b:c7:4b:34:10:79:
3d:65:8c:ec:b1:4a:e4:9d:23:ec:0a:7f:9d:a2:30:
4d:5d:8a:d2:7e:1c:a1:23:f9:dc:45:2c:71:62:ab:
e8:a5:84:eb:2f:94:3c:10:76:b4:95:df:59:97:cf:
7d:c6:97:32:cb:63:27:32:63:49:c8:d9:6d:fb:b7:
6f:fb:bb:39:d1:65:77:57:2b:ba:e3:26:74:34:ad:
0c:e8:29:16:c8:85:95:2d:c6:d8:77:bd:78:01:14:
e0:79:36:d4:f0:3b:46:7b:e1:22:63:76:0a:be:22:
58:8e:90:cc:34:ac:c5:2f:46:f9:15:e1:a5:e9:26:
e5:71:e2:1f:9e:9a:65:b5:84:1f:04:f3:b6:f9:44:
01:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:FE:E6:03:99:A2:31:2F:F1:3C:AE:D9:44:BC:D6:02:15:95:60:10
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS16509.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.182.9.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:e5:85:ed:2c:b8:ef:85:d6:08:62:62:a8:dc:7a:d0:ac:f7:
7f:4a:2e:e3:67:92:b8:b8:0c:cd:a6:0c:d1:f3:8d:40:52:63:
1e:17:94:72:01:93:ac:9e:4b:63:97:e1:a3:a6:f2:20:7d:00:
81:bd:8a:fa:59:f2:3f:39:77:48:70:2c:b5:8d:32:4e:e1:c9:
ab:e3:57:38:e8:fc:be:32:9a:51:e7:8b:41:ce:7e:a3:63:35:
fd:c6:66:e0:6e:7a:d0:4d:53:05:0d:d0:9a:eb:f3:85:a5:f3:
35:91:8f:54:55:a2:6a:19:b5:39:13:18:84:1c:8e:81:c3:7b:
b3:76:a4:60:b4:6f:9d:0d:fe:71:ad:bd:85:f5:4f:f1:01:1c:
cf:3e:13:85:a4:1a:c3:04:2e:f7:2b:3b:41:f1:50:b7:c4:14:
7f:c6:7f:ed:1d:e4:a6:a4:72:3f:c8:4e:61:94:99:ea:7f:6a:
a2:ec:18:ce:25:19:0f:98:04:f8:20:ed:53:16:89:6d:6d:43:
dc:69:42:b5:02:12:4d:e9:88:1b:34:21:36:43:e5:6e:4d:9d:
55:73:d0:bb:db:d2:53:c7:5f:3e:c4:be:e5:45:94:e3:f2:1c:
ed:02:41:e4:92:2f:24:13:68:0a:8d:22:27:61:cd:11:ce:5d:
12:5f:37:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 23:07:19 2026 by rpki-client