Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS216052.roa
File: AS216052.roa (raw, json)
Hash identifier: N+3F3LtlJyfT6ODxpng/wc5RT3nLcZ+35pP7d8tlwJM=
Subject key identifier: 89:1F:1D:F0:A5:E9:75:C1:0B:22:AE:DD:F6:96:D2:07:8F:96:AD:8F
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 45857096FE54F9F5627101E346CA98287B2EBFD7
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS216052.roa
Signing time: Fri 26 Jun 2026 08:08:42 +0000
ROA not before: Fri 26 Jun 2026 08:03:42 +0000
ROA not after: Fri 25 Jun 2027 08:08:42 +0000
asID: 216052
IP address blocks: 2a0f:85c1:324::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:85:70:96:fe:54:f9:f5:62:71:01:e3:46:ca:98:28:7b:2e:bf:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:42 2026 GMT
Not After : Jun 25 08:08:42 2027 GMT
Subject: CN=891F1DF0A5E975C10B22AEDDF696D2078F96AD8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:30:9c:b9:de:73:e5:71:63:05:03:1c:bb:6b:
05:05:ae:62:df:1a:da:71:1b:97:36:89:61:db:d5:
1b:05:29:e3:fe:69:35:c2:ec:5e:22:b4:a5:ae:74:
cd:49:b0:6c:79:ae:45:c8:57:51:8b:84:ef:3c:b5:
5d:35:24:48:5c:21:a9:4e:da:8e:9a:eb:d7:2c:33:
96:68:c6:8a:5d:e0:38:0d:08:99:91:92:7e:0e:21:
e6:05:cd:42:a9:bb:5a:37:fb:65:c1:46:61:21:f0:
ba:fe:cb:5a:e1:74:83:ef:aa:1b:bd:21:48:92:76:
e0:c3:a7:7b:b9:a1:fd:e3:c3:55:bd:8f:7b:3c:58:
c7:fb:34:47:d7:e4:c6:4a:d4:3e:59:6c:71:94:e6:
de:6d:36:16:8b:50:39:e8:7a:95:15:33:92:50:a9:
29:5e:35:e0:b5:02:69:2c:06:c5:90:c1:0c:74:57:
e7:19:a9:d8:df:9a:21:3e:7f:6c:8d:22:59:36:19:
92:da:bc:90:fe:c9:e4:63:81:de:47:4a:2f:63:4b:
3a:1f:6c:d1:ac:f4:44:6f:7e:7d:2e:1c:98:cb:d5:
24:f7:53:6a:cc:6f:5a:04:ff:87:e7:2a:50:e4:d2:
43:58:0a:12:11:59:80:22:50:f4:b5:f2:9f:01:76:
c3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:1F:1D:F0:A5:E9:75:C1:0B:22:AE:DD:F6:96:D2:07:8F:96:AD:8F
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS216052.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:324::/48
Signature Algorithm: sha256WithRSAEncryption
50:8b:ea:d9:d4:5d:28:91:f5:b5:6e:d4:5a:37:6b:a8:73:85:
e1:c6:32:bd:f5:ef:e1:ba:e9:fa:b0:19:1e:7d:01:b3:ef:32:
e1:a8:5b:1c:3e:45:13:5d:48:ed:7d:6b:29:81:3b:fa:6d:6c:
b9:6f:3d:c4:7c:d1:8e:52:1c:25:6d:9b:d7:ce:88:99:74:4a:
a3:a3:9e:02:eb:93:56:c1:f7:cd:d7:f6:2a:59:e3:18:71:9b:
a0:eb:41:ea:42:a4:25:b9:1a:1a:01:8c:47:b7:fa:47:5e:cd:
b5:d1:d1:17:5f:bf:d9:9f:d5:c8:d9:c3:6f:9d:c8:50:ac:00:
d6:3e:af:55:27:27:eb:35:9c:9e:2b:36:67:7d:15:90:50:2e:
f3:0a:73:da:1d:70:e9:3d:13:6b:29:0e:79:38:66:ef:a5:6b:
1f:b1:79:00:4c:42:19:b0:cb:fc:5a:38:80:3e:7b:5b:b6:8a:
97:91:4c:25:4d:bc:2a:f4:13:1b:1c:3e:38:71:05:a4:07:56:
4a:f6:53:a0:5b:8b:b7:9d:a7:ac:02:03:0a:44:64:50:e0:2f:
0d:9b:cb:04:b7:9e:fb:6b:f9:73:86:f7:41:31:00:7a:37:c1:
7f:4f:13:fb:dd:73:4f:c4:25:61:98:1b:66:94:04:66:1f:04:
c3:a9:ae:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 05:47:05 2026 by rpki-client