Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS16509.roa
File: AS16509.roa (raw, json)
Hash identifier: FeeE7bOlIvft0BxuzhIDs87jiJEcZdTpyAHIdgUFqU8=
Subject key identifier: 18:5A:56:D2:37:D7:93:4A:98:1B:AD:6D:0E:6A:10:B6:6D:FB:B8:CB
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 69161C2DCAE8212C8628F95D0C809EC33F0ECA5C
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS16509.roa
Signing time: Wed 21 Oct 2026 08:08:13 +0000
ROA not before: Wed 21 Oct 2026 08:03:13 +0000
ROA not after: Wed 20 Oct 2027 08:08:13 +0000
asID: 16509
IP address blocks: 181.214.94.0/24 maxlen: 24
181.214.110.0/24 maxlen: 24
185.137.13.0/24 maxlen: 24
191.96.204.0/24 maxlen: 24
191.101.111.0/24 maxlen: 24
2a00:d1a0:10::/48 maxlen: 48
2a00:d1a0:11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:16:1c:2d:ca:e8:21:2c:86:28:f9:5d:0c:80:9e:c3:3f:0e:ca:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Oct 21 08:03:13 2026 GMT
Not After : Oct 20 08:08:13 2027 GMT
Subject: CN=185A56D237D7934A981BAD6D0E6A10B66DFBB8CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f1:38:6e:66:26:8a:1e:4e:45:77:96:5f:19:
d4:f5:68:f1:00:22:90:50:aa:2f:89:f2:1a:db:15:
93:28:c7:6d:a9:53:aa:67:e7:28:44:84:4e:d5:30:
30:8f:16:bf:39:19:2e:49:e9:d5:9f:41:24:51:1f:
93:59:ee:84:fc:9c:d9:7e:14:6c:10:21:1f:ba:e7:
92:14:4b:61:56:65:28:55:ba:9c:5d:a5:99:24:5f:
16:d5:00:ff:f6:53:76:48:a5:c2:90:05:05:f6:df:
8a:eb:d2:8b:9a:bd:04:c9:e6:8f:e0:2b:74:7e:1b:
9c:e9:b8:25:71:db:11:92:1b:86:f0:dd:b5:77:f0:
d2:3f:64:28:b7:3d:d3:9b:67:46:b1:1d:c9:4e:b0:
5c:0e:2a:58:f8:2f:49:c8:ab:e9:46:30:5b:c1:02:
ff:6d:7f:b8:46:c1:27:10:29:6c:dd:f7:61:5e:fa:
5f:09:cb:a0:b7:79:cc:8d:7d:eb:61:43:b7:1d:00:
5d:25:9d:17:f5:5d:05:36:26:b8:3e:64:4a:a6:49:
cf:74:7f:af:48:e1:32:3b:fc:b6:93:1e:af:bd:01:
34:69:e5:39:83:5f:84:d0:a5:74:c0:87:53:26:9b:
63:d8:08:64:e1:2d:6f:a8:49:f3:14:9a:71:76:9b:
0e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:5A:56:D2:37:D7:93:4A:98:1B:AD:6D:0E:6A:10:B6:6D:FB:B8:CB
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS16509.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.94.0/24
181.214.110.0/24
185.137.13.0/24
191.96.204.0/24
191.101.111.0/24
IPv6:
2a00:d1a0:10::/47
Signature Algorithm: sha256WithRSAEncryption
20:b8:96:0f:41:2a:17:25:56:f2:71:e9:49:3e:0f:21:01:47:
fb:f9:83:ff:40:89:15:62:fb:8f:45:ee:77:29:38:a5:8f:10:
d0:43:21:5d:7f:5a:ae:da:8b:e5:34:b8:2d:1e:3a:f1:55:3f:
26:23:2d:a9:f0:e7:3a:de:b6:e7:8d:54:e8:2a:2b:1f:e1:2f:
3a:36:9d:bc:4a:1b:37:35:db:a5:4c:5c:6b:b1:71:9c:e2:79:
e6:a6:89:ab:f3:3c:3f:5e:b9:69:1b:ab:21:b8:8c:d4:38:9f:
44:d8:1b:f2:45:1f:41:0e:05:e7:75:16:3e:59:2c:94:c8:fe:
7b:18:80:0d:33:98:2b:d8:5b:7c:c3:be:1e:f8:d9:ec:6d:d4:
24:59:c2:ea:59:f0:9c:5a:5e:ae:5b:8b:21:d7:3f:08:57:b3:
82:ee:27:86:11:b2:78:ca:d8:71:33:e8:2e:c5:e5:bc:e5:23:
be:94:7a:10:49:e1:b8:d4:cd:05:12:e3:bf:39:39:d9:33:79:
d7:a3:50:6e:ef:b6:81:d0:3d:ef:d9:8c:03:46:19:c9:5d:7f:
c9:50:8c:15:a2:3d:fc:90:56:4d:bb:9e:d6:e0:b9:ff:d5:11:
31:95:36:fe:a5:52:46:a3:7a:59:88:eb:1e:a8:ef:0d:cc:88:
64:b9:cc:82
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUaRYcLcroISyGKPldDICewz8OylwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNjEwMjEwODAzMTNaFw0yNzEwMjAwODA4MTNaMDMxMTAvBgNV
BAMTKDE4NUE1NkQyMzdENzkzNEE5ODFCQUQ2RDBFNkExMEI2NkRGQkI4Q0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCM8ThuZiaKHk5Fd5ZfGdT1aPEA
IpBQqi+J8hrbFZMox22pU6pn5yhEhE7VMDCPFr85GS5J6dWfQSRRH5NZ7oT8nNl+
FGwQIR+655IUS2FWZShVupxdpZkkXxbVAP/2U3ZIpcKQBQX234rr0ouavQTJ5o/g
K3R+G5zpuCVx2xGSG4bw3bV38NI/ZCi3PdObZ0axHclOsFwOKlj4L0nIq+lGMFvB
Av9tf7hGwScQKWzd92Fe+l8Jy6C3ecyNfethQ7cdAF0lnRf1XQU2Jrg+ZEqmSc90
f69I4TI7/LaTHq+9ATRp5TmDX4TQpXTAh1Mmm2PYCGThLW+oSfMUmnF2mw5pAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUGFpW0jfXk0qYG61tDmoQtm37uMswHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMTY1MDkucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwSAYIKwYBBQUHAQcBAf8EOTA3MCQEAgABMB4DBAC11l4D
BAC11m4DBAC5iQ0DBAC/YMwDBAC/ZW8wDwQCAAIwCQMHASoA0aAAEDANBgkqhkiG
9w0BAQsFAAOCAQEAILiWD0EqFyVW8nHpST4PIQFH+/mD/0CJFWL7j0Xudyk4pY8Q
0EMhXX9artqL5TS4LR468VU/JiMtqfDnOt62541U6CorH+EvOjadvEobNzXbpUxc
a7FxnOJ55qaJq/M8P165aRurIbiM1DifRNgb8kUfQQ4F53UWPlkslMj+exiADTOY
K9hbfMO+HvjZ7G3UJFnC6lnwnFperluLIdc/CFezgu4nhhGyeMrYcTPoLsXlvOUj
vpR6EEnhuNTNBRLjvzk52TN516NQbu+2gdA979mMA0YZyV1/yVCMFaI9/JBWTbue
1uC5/9URMZU2/qVSRqN6WYjrHqjvDcyIZLnMgg==
-----END CERTIFICATE-----
Generated at Wed Oct 21 13:26:07 2026 by rpki-client