Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS216069.roa
File: AS216069.roa (raw, json)
Hash identifier: Ic5cfhfZm45XgdMXNIkeJ67pwLtH5OJ6mOHjTHcIN/w=
Subject key identifier: 6B:2F:98:C5:2E:3D:3B:C6:8B:06:4F:44:EF:6A:02:47:DF:07:FD:AC
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 5C8EF9A8880B4CECAACAFAF38D80D299DD608B03
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS216069.roa
Signing time: Tue 04 Aug 2026 17:09:00 +0000
ROA not before: Tue 04 Aug 2026 17:04:00 +0000
ROA not after: Tue 03 Aug 2027 17:09:00 +0000
asID: 216069
IP address blocks: 2a0f:85c1:d3b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:8e:f9:a8:88:0b:4c:ec:aa:ca:fa:f3:8d:80:d2:99:dd:60:8b:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 4 17:04:00 2026 GMT
Not After : Aug 3 17:09:00 2027 GMT
Subject: CN=6B2F98C52E3D3BC68B064F44EF6A0247DF07FDAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7e:69:c3:9d:fe:23:2f:e3:c1:0e:7e:9e:bf:
d6:dd:87:99:6c:c1:c2:f6:98:c6:36:cb:5b:7c:83:
d3:42:ad:6d:88:71:6d:78:a2:a5:5b:a9:9e:5a:14:
e3:c6:63:1e:03:74:24:93:ed:da:cc:47:5d:71:8a:
3d:d1:32:d0:6e:24:f1:3a:71:bb:a0:1e:08:ed:6d:
44:ef:0f:62:f8:66:36:7d:e6:fe:6a:4b:b4:d0:e3:
e7:33:96:85:63:bf:97:b9:4c:3b:aa:96:69:93:5e:
a9:c8:bb:84:ca:9f:e5:96:a1:08:74:14:29:a6:d9:
94:97:eb:b9:ff:91:9f:5a:47:08:dc:77:9d:ce:7f:
4a:c5:32:f8:89:ee:b8:93:58:29:02:82:68:02:c9:
67:2b:07:d2:e6:dd:9c:ff:cc:a0:2b:2e:a7:70:3d:
5b:95:e4:75:91:e7:a1:f4:04:f3:f8:08:04:cf:ad:
26:b5:3d:04:31:74:75:67:3d:bb:a3:4a:dd:f7:1c:
e5:e8:7e:f3:41:9c:a0:7a:3a:2d:51:1f:35:d0:66:
83:0f:11:28:a9:c3:4b:06:cf:00:57:9d:26:b0:db:
46:2f:86:05:b8:5b:13:2e:3c:f6:f9:bd:a7:47:fb:
17:c2:07:fd:eb:22:a9:66:21:25:0c:1d:f7:e9:59:
fc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:2F:98:C5:2E:3D:3B:C6:8B:06:4F:44:EF:6A:02:47:DF:07:FD:AC
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS216069.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:d3b::/48
Signature Algorithm: sha256WithRSAEncryption
89:51:d7:b6:54:2d:ef:0e:70:e2:b8:81:44:a2:8f:ab:9b:38:
90:4c:de:cf:8a:0d:3c:d6:85:3a:6c:38:29:1b:92:26:51:24:
97:b7:41:e9:6f:1e:e2:01:ac:a7:45:cc:a5:78:5c:ad:ab:c6:
68:ca:82:53:2d:59:d5:ef:37:73:ac:9a:73:a2:51:02:11:a9:
51:08:bd:d1:68:32:df:f7:ea:16:1a:f3:ba:4c:d8:96:98:b8:
f4:26:d8:4d:2b:6a:5e:23:46:a6:e8:90:e7:a1:02:6e:d3:41:
ca:fc:15:0f:04:79:62:15:05:b1:de:92:c6:ef:42:28:ee:6f:
27:fc:ea:29:bf:e1:52:12:bc:5b:55:91:37:c0:93:31:a1:4b:
a7:17:b7:0b:3f:67:ff:42:86:43:49:53:c1:67:74:72:34:b7:
5c:47:9d:85:08:0d:51:89:c9:7e:99:a8:bb:b4:94:ec:92:60:
b9:58:de:31:27:cb:f0:52:03:a0:ff:f5:00:89:d0:02:d0:9a:
77:d2:d7:b4:76:30:72:1d:e3:d9:f6:dd:51:6e:70:95:67:ed:
f4:bd:f9:b7:61:49:fe:85:c3:c9:75:9a:ad:36:d4:66:a3:d8:
fc:e7:b6:78:48:cd:07:26:ac:16:d6:a7:33:3c:9c:13:a5:b5:
7c:26:12:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:31:35 2026 by rpki-client