Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS216199.roa
File: AS216199.roa (raw, json)
Hash identifier: qtSb1q/rKBMczDWG5h5aVJbKf/wjAijmFtU4MrgQJow=
Subject key identifier: C9:D4:4B:F8:47:01:AC:56:80:1B:B1:9E:3D:E9:D6:7F:32:97:4B:41
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 3C5D7D5CADFFEAB9544D7A8AD9717E55A7C472C3
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS216199.roa
Signing time: Mon 20 Jul 2026 21:08:53 +0000
ROA not before: Mon 20 Jul 2026 21:03:53 +0000
ROA not after: Mon 19 Jul 2027 21:08:53 +0000
asID: 216199
IP address blocks: 2a0f:85c1:ce4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:5d:7d:5c:ad:ff:ea:b9:54:4d:7a:8a:d9:71:7e:55:a7:c4:72:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 20 21:03:53 2026 GMT
Not After : Jul 19 21:08:53 2027 GMT
Subject: CN=C9D44BF84701AC56801BB19E3DE9D67F32974B41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e0:15:28:9e:2a:5c:1c:5d:9a:0c:8f:57:12:
84:c8:28:18:7a:6e:0b:97:42:46:65:f7:8f:db:bf:
4a:f6:b0:74:5d:77:c8:5d:bf:70:26:07:3f:3b:ab:
50:bb:e8:99:6c:5c:d9:60:0c:5a:c3:b5:e3:f2:e7:
56:b1:27:50:d6:4f:06:33:4c:05:dd:c1:4e:7b:3a:
f3:83:9e:83:86:e7:01:c0:fe:cb:3c:a0:e9:82:e3:
28:f0:a1:16:43:a8:03:65:1e:d1:a7:87:6e:e1:c3:
33:a1:f3:f4:34:ed:8f:0f:da:ba:05:2c:86:40:2e:
eb:28:71:63:d1:0b:ad:29:9e:da:f5:08:60:37:02:
4c:4c:4f:a8:1e:0d:03:00:ec:85:e5:ca:3f:6a:36:
7d:b0:75:48:f7:3f:06:e4:10:c1:38:a7:a1:40:84:
fe:cd:63:26:d7:8e:d6:24:e4:9d:3a:3a:7c:7a:53:
02:8f:6a:c9:9c:37:1d:ee:35:b2:40:c2:1a:5c:4f:
f5:91:97:e7:7f:79:c9:bd:a1:f3:7c:22:69:ac:37:
42:09:c7:f5:b4:44:03:a9:c5:78:4f:c8:96:ad:b2:
62:f5:46:cc:45:13:42:0e:63:fd:16:f9:5f:fc:23:
01:0f:bc:98:b8:8c:70:d1:d2:9c:40:0a:a0:2c:8d:
af:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D4:4B:F8:47:01:AC:56:80:1B:B1:9E:3D:E9:D6:7F:32:97:4B:41
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS216199.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:ce4::/48
Signature Algorithm: sha256WithRSAEncryption
41:18:57:93:4e:f9:d6:7c:14:78:e8:88:31:92:80:b7:ae:a3:
ce:7a:cb:0c:86:4c:e4:d1:22:92:ee:d2:09:74:4c:59:63:a5:
25:fc:f5:3c:8c:0f:c7:69:07:9a:c7:0d:ae:d6:16:4f:e6:67:
e4:3f:27:9c:73:ab:6f:94:a9:99:f1:eb:84:be:ac:b1:f0:d6:
ce:82:b2:00:3d:bd:a2:b8:b2:fc:34:04:c3:cc:6b:85:57:88:
e9:46:a8:e1:cd:0c:82:35:c1:2d:7a:92:23:ff:22:d2:a6:e1:
99:f4:7b:3c:14:27:d4:50:b3:f6:57:5a:aa:fd:ac:2a:c9:16:
7c:1a:77:1d:71:42:f2:c9:88:e8:52:22:41:77:14:30:fb:94:
df:4f:58:71:67:0e:7a:7f:95:e4:0c:0e:a9:b4:9d:10:f2:e9:
59:a4:ae:1d:08:d3:f9:cc:d1:a0:48:5b:fa:85:bd:eb:a7:9a:
46:26:42:62:ca:a8:ec:ee:d2:9e:5f:02:a8:f3:0e:f8:ef:f4:
a3:a8:5d:3a:f3:75:f4:0b:ec:a4:cc:c3:83:a4:1f:c3:3d:b9:
e9:39:4b:78:1d:10:1a:3c:8b:f5:76:f9:98:27:71:e6:b2:21:
70:5f:ad:ca:d2:1b:5b:5c:c9:b7:38:d7:25:ba:00:3c:fb:93:
54:9f:e2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:49:14 2026 by rpki-client