Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS216085.roa
File: AS216085.roa (raw, json)
Hash identifier: BhwJX1TwQnl/Mk2HV7eEFWckW5bChWMq9rB8iHvhTh4=
Subject key identifier: 0D:10:AC:52:A5:F6:DE:D8:B2:04:25:84:A6:A3:DE:36:E4:47:CB:09
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 471C5F6E7E1A2C254ED0EA1FE2E7AC045EFC39B6
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS216085.roa
Signing time: Tue 04 Aug 2026 17:09:00 +0000
ROA not before: Tue 04 Aug 2026 17:04:00 +0000
ROA not after: Tue 03 Aug 2027 17:09:00 +0000
asID: 216085
IP address blocks: 2a0f:85c1:d3c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:1c:5f:6e:7e:1a:2c:25:4e:d0:ea:1f:e2:e7:ac:04:5e:fc:39:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 4 17:04:00 2026 GMT
Not After : Aug 3 17:09:00 2027 GMT
Subject: CN=0D10AC52A5F6DED8B2042584A6A3DE36E447CB09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:48:ed:a8:b3:ae:43:ff:91:7d:f0:ff:18:59:
3d:f2:67:0d:81:c9:c3:22:74:6d:dc:98:be:d8:09:
3a:72:61:70:bc:75:81:50:25:af:19:32:7f:80:e6:
3f:51:f6:f0:a8:cd:6e:e1:31:23:11:f0:18:59:1c:
34:4e:a3:fa:ae:ed:21:65:d4:c1:bd:8a:0f:2c:3c:
95:06:d9:64:59:ed:3a:c9:1b:fc:91:c2:78:34:cf:
c6:47:67:38:35:55:89:26:eb:f8:c0:9c:ec:22:0b:
de:84:9e:4f:a0:3e:27:b3:12:5b:01:57:82:bc:01:
ab:1a:b8:3b:bf:6e:42:44:ad:0f:0c:6d:60:1d:d7:
6a:b9:b9:b8:09:d0:38:9d:62:a6:34:d3:0a:b6:7b:
9f:23:7a:f2:8e:f7:92:f4:0d:14:db:74:e4:de:e0:
73:93:3f:5b:23:2b:77:1f:1b:bd:86:a6:aa:05:87:
ed:6a:13:3f:0f:f8:ea:49:24:34:b5:2d:6b:51:02:
ee:1c:a9:33:b0:bc:5c:db:df:35:fc:68:44:6f:b2:
e2:c3:2a:11:89:5a:94:eb:de:1e:be:6e:20:e5:34:
f5:99:d3:96:09:c2:a2:35:67:d9:38:f2:53:c7:48:
29:f2:0f:bf:33:3d:39:30:b4:07:e2:6e:fc:61:03:
3b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:10:AC:52:A5:F6:DE:D8:B2:04:25:84:A6:A3:DE:36:E4:47:CB:09
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS216085.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:d3c::/48
Signature Algorithm: sha256WithRSAEncryption
1a:1c:9a:5a:52:cb:32:9e:b0:d0:bf:a3:9f:85:84:9c:d3:d3:
76:73:7b:25:e3:dd:9c:ad:3f:42:57:dc:69:96:9a:5d:06:55:
c4:bc:33:2c:e9:20:7d:2e:1e:0d:2d:29:e9:ae:b3:09:a1:fb:
42:2d:65:2e:42:8f:6f:61:d7:a2:e0:98:61:fa:a6:da:44:c9:
92:06:de:b5:02:70:3f:ad:fb:8e:e8:00:a4:81:5f:8c:4f:72:
f6:b7:a0:f9:19:7e:b7:8f:ec:8e:11:62:bd:a6:b9:26:5c:8c:
3d:34:99:5e:20:3a:2e:a1:95:0e:6c:02:95:53:69:23:51:68:
fc:e2:44:b1:0d:5f:6b:ba:87:a7:d7:f0:48:4c:4b:40:7d:8d:
c8:04:ba:04:7e:86:4e:ef:ed:4a:16:5e:82:8d:1b:88:63:9d:
44:c4:9c:36:09:e0:95:5b:9f:8d:42:b0:2d:ff:93:3a:4d:f4:
b8:5a:d7:f6:69:ba:4c:1c:d3:6a:eb:3d:06:b4:8c:9b:c5:a8:
fc:3e:49:09:f7:60:bb:62:38:6c:95:20:b8:37:a8:52:ae:e6:
fd:99:58:71:0f:52:a8:ca:bc:4b:d5:66:a3:d6:21:af:8d:2c:
0f:a2:12:b1:02:4f:17:17:3c:dc:85:f7:95:97:cc:02:73:f2:
0a:99:62:c0
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIURxxfbn4aLCVO0Oof4uesBF78ObYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNjA4MDQxNzA0MDBaFw0yNzA4MDMxNzA5MDBaMDMxMTAvBgNV
BAMTKDBEMTBBQzUyQTVGNkRFRDhCMjA0MjU4NEE2QTNERTM2RTQ0N0NCMDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRSO2os65D/5F98P8YWT3yZw2B
ycMidG3cmL7YCTpyYXC8dYFQJa8ZMn+A5j9R9vCozW7hMSMR8BhZHDROo/qu7SFl
1MG9ig8sPJUG2WRZ7TrJG/yRwng0z8ZHZzg1VYkm6/jAnOwiC96Enk+gPiezElsB
V4K8AasauDu/bkJErQ8MbWAd12q5ubgJ0DidYqY00wq2e58jevKO95L0DRTbdOTe
4HOTP1sjK3cfG72GpqoFh+1qEz8P+OpJJDS1LWtRAu4cqTOwvFzb3zX8aERvsuLD
KhGJWpTr3h6+biDlNPWZ05YJwqI1Z9k48lPHSCnyD78zPTkwtAfibvxhAzuXAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUDRCsUqX23tiyBCWEpqPeNuRHywkwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjE2MDg1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQ08MA0GCSqGSIb3DQEBCwUAA4IBAQAaHJpaUssynrDQv6OfhYSc09N2c3sl492c
rT9CV9xplppdBlXEvDMs6SB9Lh4NLSnprrMJoftCLWUuQo9vYdei4Jhh+qbaRMmS
Bt61AnA/rfuO6ACkgV+MT3L2t6D5GX63j+yOEWK9prkmXIw9NJleIDouoZUObAKV
U2kjUWj84kSxDV9ruoen1/BITEtAfY3IBLoEfoZO7+1KFl6CjRuIY51ExJw2CeCV
W5+NQrAt/5M6TfS4Wtf2abpMHNNq6z0GtIybxaj8PkkJ92C7YjhslSC4N6hSrub9
mVhxD1KoyrxL1Waj1iGvjSwPohKxAk8XFzzchfeVl8wCc/IKmWLA
-----END CERTIFICATE-----
Generated at Fri Sep 4 21:04:33 2026 by rpki-client