Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS216145.roa
File: AS216145.roa (raw, json)
Hash identifier: c1ZwMkmqWfYIfGz6ysa2xNAgWW6OOI82HjrgmOAJY3E=
Subject key identifier: 06:B7:F0:9A:1A:C3:03:85:93:39:A8:50:F0:6E:B2:29:92:3F:96:5B
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 7D05C59512B17BFA572FDBF3C0E9551F84A448F0
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS216145.roa
Signing time: Thu 18 Jun 2026 19:47:46 +0000
ROA not before: Thu 18 Jun 2026 19:42:46 +0000
ROA not after: Thu 17 Jun 2027 19:47:46 +0000
asID: 216145
IP address blocks: 2a13:9500:b2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:05:c5:95:12:b1:7b:fa:57:2f:db:f3:c0:e9:55:1f:84:a4:48:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 18 19:42:46 2026 GMT
Not After : Jun 17 19:47:46 2027 GMT
Subject: CN=06B7F09A1AC303859339A850F06EB229923F965B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e2:a6:4d:c0:75:de:77:cd:bb:0a:1c:2c:77:
05:b9:12:9e:8a:70:18:3b:39:ac:ce:a9:8f:f3:08:
ab:ed:57:07:50:41:cc:7c:cf:82:ac:d6:7d:97:bd:
8c:1f:d5:f9:dc:36:7b:d4:fa:4d:24:23:0d:10:f0:
30:cd:0e:82:c0:38:7c:6f:90:ac:86:37:f2:74:03:
2c:f7:25:f6:09:d1:d1:8f:40:62:a1:a4:de:74:94:
53:d4:18:be:02:68:35:c4:7c:08:65:2f:77:0e:9a:
aa:f4:b4:c1:d4:8c:69:2e:ec:c1:0b:77:da:fe:7f:
30:64:01:90:c3:4b:a7:23:0c:69:2f:b3:91:68:31:
fc:13:f5:66:6d:d2:c2:16:81:00:5d:26:a1:3e:74:
2b:34:df:b2:e0:59:52:fe:b0:33:38:b0:50:05:c9:
f3:73:13:0e:6a:14:92:ce:bd:ab:9f:8b:fd:5c:46:
e0:b2:c4:64:10:b9:1c:a7:bb:e5:bc:a2:d4:59:04:
26:35:68:7a:2b:06:d3:94:48:86:ad:04:bb:71:e0:
41:46:b2:be:88:20:7b:af:fe:c0:de:3b:95:c5:17:
9a:fd:12:f0:fc:08:0f:21:8f:30:19:ac:99:99:fa:
a4:c6:e1:57:30:89:b2:06:3e:08:87:9f:e9:08:92:
8a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B7:F0:9A:1A:C3:03:85:93:39:A8:50:F0:6E:B2:29:92:3F:96:5B
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS216145.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:b2::/48
Signature Algorithm: sha256WithRSAEncryption
16:e1:18:a1:e4:25:01:15:05:e2:bd:01:da:74:1c:7b:49:cc:
46:0d:25:3d:32:61:14:35:57:04:6f:37:4b:c2:fc:d9:a4:b8:
38:62:f5:e5:75:c6:f3:d5:14:da:00:bc:09:71:1c:cb:d5:30:
b9:1f:65:f7:ed:98:3e:fe:be:6a:30:8b:88:32:95:94:be:b6:
ef:2f:2b:79:9d:8d:14:c9:db:14:d8:85:2f:50:8c:26:7a:e4:
cd:29:bf:c8:c9:6d:92:3c:9b:8c:14:64:31:28:4f:01:fe:9f:
ab:ef:ef:89:3f:03:51:12:8b:02:4a:9f:94:e4:93:d1:49:59:
01:0e:a2:a9:00:be:20:1e:49:3b:ee:c9:88:72:e9:7b:67:98:
28:4e:bc:04:9b:e6:5e:75:7f:92:ac:0a:fa:a9:00:a7:19:b4:
25:fb:5e:83:ab:31:cc:e6:ca:62:bb:7d:66:10:74:a3:72:8a:
ac:7a:14:be:a2:f5:96:61:49:b2:36:db:33:85:85:60:38:99:
60:18:aa:dc:d1:6d:6d:3c:ec:e2:50:b7:21:9a:ec:72:11:b2:
e4:6b:4f:30:8f:2b:8e:04:58:87:76:b6:64:1c:b5:6a:ec:21:
e0:5b:3f:fc:1e:bf:92:3b:ad:77:a1:d1:d3:af:e6:97:28:e7:
4f:4a:30:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:09:39 2026 by rpki-client