Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/AS16509.roa
File: AS16509.roa (raw, json)
Hash identifier: Ofb+sAfpNY/HtUsmSrh+opoxFce1Ix1mehNVxaO2akM=
Subject key identifier: 1A:BE:07:F3:B9:B9:9D:C1:69:5E:B4:2D:B6:FF:1E:6A:46:5C:31:4B
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 6F27173538E75053D1F181F5F8D52D9BAB596034
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/AS16509.roa
Signing time: Wed 29 Jul 2026 15:25:09 +0000
ROA not before: Wed 29 Jul 2026 15:20:09 +0000
ROA not after: Wed 28 Jul 2027 15:25:09 +0000
asID: 16509
IP address blocks: 201.4.1.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 13:54:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:27:17:35:38:e7:50:53:d1:f1:81:f5:f8:d5:2d:9b:ab:59:60:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Jul 29 15:20:09 2026 GMT
Not After : Jul 28 15:25:09 2027 GMT
Subject: CN=1ABE07F3B9B99DC1695EB42DB6FF1E6A465C314B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d0:38:5f:92:23:33:ba:cd:ae:70:1b:04:6b:
3e:a3:9f:38:22:a2:c0:67:80:1b:3e:25:9d:6a:04:
05:90:be:41:9f:23:48:8d:bd:00:0a:ce:a4:87:ee:
46:f1:e5:ab:3d:a0:da:39:8c:ab:51:7e:d6:90:6d:
09:de:1a:76:7d:87:7c:f4:a4:0e:dd:37:cc:d7:b3:
6f:bd:c6:aa:ca:b5:bc:0d:14:95:4f:ee:7d:7b:9c:
dd:ee:9c:2e:39:a3:2d:6c:94:89:9e:05:86:d0:2f:
85:72:31:92:1c:49:e4:79:f8:77:1e:1e:3e:d2:99:
87:bd:41:6e:a5:43:05:ec:4b:dd:02:23:4e:3a:0a:
b6:59:66:f2:00:79:f2:a3:ad:85:ba:de:c9:07:37:
7c:ca:ac:0f:ad:85:11:c8:d5:c2:78:a7:4a:03:3f:
e3:90:3c:55:0d:70:7c:ca:49:c2:71:28:a4:77:bc:
7f:2e:09:3f:61:9e:20:62:6e:c2:3e:25:75:0f:cc:
07:d8:2a:7f:8c:df:93:28:7c:5b:e7:c8:dd:a4:4b:
79:ff:66:9a:63:0e:5e:fb:dd:ff:78:61:28:f4:28:
8d:c1:7d:47:3b:d3:72:85:a6:59:6f:31:26:1d:79:
9f:ce:42:9e:56:1e:d9:8d:32:bc:88:75:51:ac:2c:
9f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:BE:07:F3:B9:B9:9D:C1:69:5E:B4:2D:B6:FF:1E:6A:46:5C:31:4B
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/AS16509.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.4.1.0/24
Signature Algorithm: sha256WithRSAEncryption
98:4a:65:84:6a:35:07:aa:61:2d:f7:47:74:09:50:7c:d7:fc:
7f:eb:ed:c3:cc:f6:da:12:aa:d6:e0:76:fb:c8:a7:69:1e:d6:
a0:68:6b:fd:d7:f3:b7:34:e6:b3:3b:a6:32:ff:9e:60:2b:97:
15:e7:f2:ac:c4:30:22:8e:b8:a9:93:cf:05:ca:9d:db:8d:29:
c3:9b:94:ed:ee:2b:e6:aa:f3:c2:2f:30:84:b4:d7:fa:2d:6a:
42:2f:7f:11:40:e4:be:b6:3c:aa:c1:71:69:61:32:cf:be:41:
b9:17:84:31:92:84:4c:45:ac:ec:eb:a2:a5:75:d0:7a:54:4e:
95:39:b9:f6:00:e3:a5:14:ba:a7:1b:1d:f7:b1:25:e6:ef:72:
16:48:0f:d7:2c:60:7c:45:a5:80:0b:82:49:42:00:2b:5b:09:
b8:41:76:54:b0:48:f9:e3:4e:91:ed:6a:7d:40:57:fe:36:f6:
03:2c:24:c7:62:1b:c6:85:ee:15:aa:bb:87:64:a8:5a:37:06:
fc:68:95:71:e1:fd:dd:df:dd:6a:11:8c:ee:44:e5:61:b6:e4:
13:cd:4c:bc:70:9b:a4:2c:14:df:bd:4a:a1:34:63:cc:d1:f9:
82:53:7f:2d:07:0f:c0:0a:1c:2a:19:3d:9e:34:b6:84:8c:34:
b7:6f:79:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 20:33:15 2026 by rpki-client