Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS16509.roa
File: AS16509.roa (raw, json)
Hash identifier: I6JD9OLPcsvAXKn0Gt6+IV/LRM1bgTLyza5824mXWbk=
Subject key identifier: BD:54:8E:60:4F:F1:FD:0C:9A:AD:6A:EF:5E:DC:18:57:29:CB:96:2D
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 67859AB8961ADA5770796B83E234535E74A943AD
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS16509.roa
Signing time: Wed 30 Sep 2026 04:09:15 +0000
ROA not before: Wed 30 Sep 2026 04:04:15 +0000
ROA not after: Wed 29 Sep 2027 04:09:15 +0000
asID: 16509
IP address blocks: 2a0f:85c1:3a9::/48 maxlen: 48
2a0f:85c1:894::/48 maxlen: 48
2a0f:85c1:cc7::/48 maxlen: 48
2a0f:85c1:d62::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:85:9a:b8:96:1a:da:57:70:79:6b:83:e2:34:53:5e:74:a9:43:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Sep 30 04:04:15 2026 GMT
Not After : Sep 29 04:09:15 2027 GMT
Subject: CN=BD548E604FF1FD0C9AAD6AEF5EDC185729CB962D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:10:8d:f0:96:a0:3b:fd:1a:07:ff:38:99:23:
77:51:98:78:f7:6a:cd:94:73:19:67:ea:0a:3b:86:
68:83:c0:2f:b3:50:a0:69:84:4d:32:e0:d4:d5:11:
61:03:03:e1:9a:76:d9:8f:11:7f:4d:49:69:2c:d1:
92:00:02:60:99:af:f6:4f:c3:a9:09:6d:41:07:44:
d5:2c:6b:61:09:a8:a2:da:c1:94:be:b5:a5:e2:d5:
cb:44:76:c9:d4:ee:ff:e1:c4:31:02:a1:e9:11:53:
3b:46:5a:51:7b:90:7a:f6:e1:8e:fc:b8:fa:28:9a:
47:a3:5a:12:e8:88:df:c0:3c:a6:26:68:fb:f9:ba:
16:d1:f7:97:27:11:47:b2:01:69:c3:31:d9:32:36:
df:6b:db:d7:ad:1f:45:4b:41:96:e2:ed:2f:94:35:
fe:41:2a:70:37:51:cd:c8:73:0b:88:77:b1:6d:e9:
1f:e5:38:c8:8a:fa:e1:75:45:fe:3e:3c:a3:f5:bf:
80:72:d3:a1:d3:2e:3b:55:89:df:55:c0:7b:df:35:
a6:d4:22:1a:28:dd:05:14:2c:4a:a6:74:44:e6:55:
05:b0:db:2e:ef:c2:ac:e0:fe:49:bc:ab:e0:f2:04:
f2:96:72:1b:ac:ef:4c:fe:6c:42:5b:23:f4:3a:30:
25:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:54:8E:60:4F:F1:FD:0C:9A:AD:6A:EF:5E:DC:18:57:29:CB:96:2D
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS16509.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3a9::/48
2a0f:85c1:894::/48
2a0f:85c1:cc7::/48
2a0f:85c1:d62::/48
Signature Algorithm: sha256WithRSAEncryption
eb:68:b2:fd:21:93:bd:bb:72:a0:15:59:17:44:c7:39:ab:cd:
45:56:10:75:6b:93:90:6f:73:ea:c4:6b:90:c6:86:10:20:e5:
3e:4e:0c:65:69:11:63:07:b6:84:bd:e4:4e:c1:9e:c2:b0:d9:
43:44:20:db:02:a7:12:a7:05:66:62:7e:fe:ee:db:bb:e3:b1:
6c:37:97:e6:a3:27:14:96:3d:de:38:be:68:46:f4:29:00:22:
65:be:ba:5b:f2:eb:f8:03:5b:93:ec:cc:a3:ef:c1:47:b6:cc:
db:95:89:4b:c1:14:1f:41:9e:66:e0:8d:ff:57:6b:71:8d:d3:
dc:71:3c:81:f0:85:eb:6f:b8:10:68:26:4a:c3:01:e3:a2:a5:
b0:22:e4:a8:ff:be:89:16:5d:15:01:82:09:35:c8:03:79:a5:
53:01:35:e0:5c:50:75:a8:32:85:87:41:aa:60:84:10:00:fa:
7e:10:d7:07:d9:41:01:81:69:df:c5:be:88:06:31:2c:55:da:
40:09:74:5c:19:da:10:4b:8c:41:4d:d4:a5:ea:91:84:2c:dc:
8e:8b:bc:49:ca:73:6f:65:2a:2d:27:0f:ee:ab:a2:b7:5e:16:
14:cc:f7:1e:54:50:2d:61:ec:c5:d8:b5:b1:19:93:34:7d:ef:
97:62:4e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 23:51:07 2026 by rpki-client