Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS216416.roa
File: AS216416.roa (raw, json)
Hash identifier: NZk/1zcqFFiiTC4CIEbO7BG7+WqmMKDbvbDBflgcEzA=
Subject key identifier: 19:CC:74:26:DF:CD:D3:24:B3:82:3E:71:84:F2:A0:85:82:2D:2B:C9
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1D6ACCE20A77EB246649D5CBC4E76A3E3486AAB9
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS216416.roa
Signing time: Sat 16 May 2026 20:28:28 +0000
ROA not before: Sat 16 May 2026 20:23:28 +0000
ROA not after: Sat 15 May 2027 20:28:28 +0000
asID: 216416
IP address blocks: 82.26.127.0/24 maxlen: 24
178.83.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:6a:cc:e2:0a:77:eb:24:66:49:d5:cb:c4:e7:6a:3e:34:86:aa:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 16 20:23:28 2026 GMT
Not After : May 15 20:28:28 2027 GMT
Subject: CN=19CC7426DFCDD324B3823E7184F2A085822D2BC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d2:50:59:a9:17:a8:8d:29:67:85:fe:1a:72:
fb:3c:52:ac:22:a6:52:7d:30:bd:63:48:58:d8:ac:
38:50:9d:8a:6e:0a:af:ca:a7:cd:46:77:cc:92:12:
a5:88:4e:3b:8b:9c:75:39:04:dc:82:9e:f0:72:0c:
37:3b:f0:c7:5c:8d:71:a9:6a:c2:cb:e9:78:7c:10:
0d:3f:85:16:8b:d7:56:81:e6:25:ef:01:e2:26:93:
0a:db:a5:20:26:3e:5d:52:0a:53:41:4f:fb:e7:35:
6e:a9:1b:00:95:4a:69:5a:3d:ff:c7:ed:77:9b:c5:
c0:85:73:80:4c:9c:3f:85:ce:b7:a9:35:04:b1:51:
de:6b:89:92:39:69:02:63:e4:4c:57:22:48:8b:b2:
e7:ee:d2:35:87:9a:fd:e4:a7:04:e1:37:fc:cb:d4:
54:66:2f:b6:63:9d:a7:58:1b:24:d3:71:b2:00:ee:
68:06:f1:37:17:ea:fc:b1:51:75:17:51:b7:8a:01:
73:59:c2:b7:ee:25:6e:f4:d7:26:99:76:1e:2c:bc:
3f:4b:96:c1:de:9a:10:71:3f:78:31:75:f9:5a:56:
1a:80:40:e2:06:f3:2b:3b:de:10:16:be:98:1c:56:
46:28:fa:34:72:b0:4c:84:cd:4b:6e:40:46:9c:4e:
d6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:CC:74:26:DF:CD:D3:24:B3:82:3E:71:84:F2:A0:85:82:2D:2B:C9
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS216416.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.26.127.0/24
178.83.15.0/24
Signature Algorithm: sha256WithRSAEncryption
13:28:4e:4d:b5:7a:4c:3e:5e:eb:be:2b:78:6b:dd:df:d6:f3:
8e:68:39:76:6e:1b:db:23:22:5d:53:8c:4b:8e:96:45:98:9a:
49:40:1b:dd:13:20:75:9f:85:0f:e4:0b:ea:20:c1:38:a1:01:
0e:64:b0:43:90:b8:2f:3e:18:7c:53:b8:12:ae:34:40:a4:06:
30:a8:17:06:b2:5c:8a:30:19:9c:c9:5f:1b:5e:0e:08:8e:4f:
f2:55:68:fc:f1:34:90:f6:ad:71:cc:8d:dd:0b:0f:e5:10:fa:
f1:39:4b:ea:e7:65:04:5b:23:15:6b:13:5e:22:0e:63:37:a9:
bc:ce:67:b2:79:1e:20:a9:b7:e6:dd:19:c3:2d:2b:2f:4d:d0:
83:52:7d:3c:78:35:f2:67:f4:43:b5:02:c3:09:65:25:1d:1c:
49:5e:7e:a7:b3:c2:d1:7a:db:65:c7:ac:49:9c:37:b8:48:a3:
d7:bd:af:87:8e:4c:2b:f3:0e:af:f3:77:99:f0:23:02:e0:87:
2b:92:e3:50:61:56:65:a0:19:cd:32:15:db:c5:c1:cb:c6:01:
01:32:49:3e:5a:94:e8:3b:03:9a:23:ae:11:36:bc:9b:fb:e4:
d9:98:ef:27:62:35:56:78:ef:37:0f:ae:28:68:38:19:2e:c0:
2f:e8:ae:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:10:29 2026 by rpki-client