Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS216416.roa
File: AS216416.roa (raw, json)
Hash identifier: mmCxSOQUzgsEwHQX3EIe1FFu3nvOgX8zXNP+EAJ24yk=
Subject key identifier: B6:B1:95:5E:56:0D:23:A4:F2:CB:44:DF:3B:0E:DF:B5:92:1C:67:6B
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 7578B94308F7B47AFD6234948DEA5E704F06DC7B
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS216416.roa
Signing time: Sun 16 Aug 2026 00:05:09 +0000
ROA not before: Sun 16 Aug 2026 00:00:09 +0000
ROA not after: Sun 15 Aug 2027 00:05:09 +0000
asID: 216416
IP address blocks: 82.26.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:78:b9:43:08:f7:b4:7a:fd:62:34:94:8d:ea:5e:70:4f:06:dc:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 16 00:00:09 2026 GMT
Not After : Aug 15 00:05:09 2027 GMT
Subject: CN=B6B1955E560D23A4F2CB44DF3B0EDFB5921C676B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e1:0c:57:31:41:a9:01:25:75:af:99:e4:1a:
0f:23:c5:0c:19:80:aa:ce:a0:9a:3c:d6:3b:94:38:
59:8e:b4:75:cb:5b:49:13:8b:e0:4a:8b:48:1a:9e:
9b:62:0f:f9:90:15:46:41:a9:38:79:c9:8a:80:f3:
f3:43:dc:0a:33:e3:a4:76:df:d1:76:7b:7e:8c:ad:
6e:df:7b:e3:4b:08:ee:f4:9e:e3:aa:8a:1c:07:f2:
11:ff:d9:5c:9f:8b:ab:8e:80:02:f8:8c:7f:a8:71:
6e:29:1a:46:3a:c9:8f:f7:14:f6:0e:bd:2a:0b:75:
27:33:84:c2:12:21:48:40:50:d6:e1:e3:f0:76:31:
e6:c8:c6:2f:df:2a:60:63:b4:bb:11:b6:12:73:ed:
4a:fa:00:d9:6a:17:59:7f:fc:c0:c4:25:fa:da:62:
9f:3b:2c:7f:91:a9:22:2c:98:33:a5:0d:27:92:1e:
6f:38:11:54:e8:e0:6d:68:a2:ad:87:68:20:cd:5f:
38:c3:d7:3f:2b:8b:e5:3a:cb:ee:a1:d1:e1:33:9b:
54:47:a7:a3:c0:62:e8:14:77:bd:fa:9c:ca:0d:ab:
81:4c:72:c1:49:c2:41:01:aa:0f:20:87:be:36:db:
ef:9b:33:88:58:73:ce:3e:2e:d3:d1:b8:9f:5b:ed:
f3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B1:95:5E:56:0D:23:A4:F2:CB:44:DF:3B:0E:DF:B5:92:1C:67:6B
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS216416.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.26.127.0/24
Signature Algorithm: sha256WithRSAEncryption
67:55:92:46:82:c7:cb:ba:75:43:1d:3b:16:c1:71:dc:a1:a1:
65:e0:ea:05:d5:f4:54:19:75:14:05:2b:98:f6:77:55:20:b8:
2e:c3:89:1d:2d:96:43:b2:13:66:1f:43:3a:91:fc:cb:ba:40:
aa:88:5b:21:4f:34:b1:04:f2:ef:29:eb:79:2a:97:31:69:9a:
0f:3a:bc:d5:46:e2:4b:69:89:f8:30:27:42:29:a4:a4:a6:6d:
45:33:29:4d:69:05:69:79:0e:62:ad:18:cc:c5:ba:47:6f:8f:
bb:4d:48:d2:bd:ac:e6:27:eb:f3:5e:cb:f1:0c:8b:80:f5:fa:
ee:ed:ad:b2:39:2a:c7:4c:a8:2c:d5:b1:83:eb:dd:8d:2a:99:
ef:de:a2:8f:50:af:c1:34:f6:25:85:d1:49:51:be:2d:b9:2f:
a9:0f:52:bd:d2:13:52:41:a3:fe:ec:09:b3:f2:9a:e9:90:0f:
e9:6b:bb:af:65:14:1f:10:e7:02:9a:5d:04:9b:73:5f:59:fe:
36:fa:f3:3a:89:1f:d1:93:f5:4c:a6:21:26:99:72:bd:17:84:
ad:8a:17:c5:c0:4f:15:6f:d9:78:fa:f8:0a:c4:af:f1:d1:5b:
da:2b:cf:55:4d:0b:bf:00:b4:69:4e:2d:42:ef:78:f6:6e:18:
90:31:47:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:32:59 2026 by rpki-client