Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS216223.roa
File: AS216223.roa (raw, json)
Hash identifier: gNQN/kYnpL1dIsMBkgDdtWwNS00/T+T7ut7v7dJxAlY=
Subject key identifier: DA:77:09:95:D9:C7:2C:E8:2B:52:2F:C4:11:A9:E8:DF:DF:77:F4:EC
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 1CCB4D92BF8E852850A3B3E1BE22EFDC991A9129
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS216223.roa
Signing time: Sat 15 Aug 2026 03:09:02 +0000
ROA not before: Sat 15 Aug 2026 03:04:02 +0000
ROA not after: Sat 14 Aug 2027 03:09:02 +0000
asID: 216223
IP address blocks: 2a0f:85c1:d44::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:cb:4d:92:bf:8e:85:28:50:a3:b3:e1:be:22:ef:dc:99:1a:91:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 15 03:04:02 2026 GMT
Not After : Aug 14 03:09:02 2027 GMT
Subject: CN=DA770995D9C72CE82B522FC411A9E8DFDF77F4EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:49:4f:7e:11:15:2f:dd:2b:6b:d4:0d:a8:23:
a4:8d:7d:1b:0a:2c:18:bd:5f:0b:8a:28:f4:d4:35:
8a:fe:25:57:70:a6:e1:87:50:12:1b:2f:24:4d:c3:
2c:b4:1d:22:6a:68:e0:f1:e6:54:13:5b:ec:fd:7c:
7f:4a:57:0a:e5:17:17:e7:88:90:95:bc:37:68:63:
96:67:a3:de:1d:62:31:c4:8b:95:80:53:28:11:77:
b0:67:64:66:01:1c:56:73:f4:f4:6d:40:fa:e1:aa:
32:57:d1:c4:13:3b:8f:f8:6a:c0:96:5c:8f:a6:8e:
61:60:9b:12:6c:db:c7:7d:d0:96:c0:7b:98:39:bd:
33:ae:be:b7:85:19:12:cb:76:c5:4a:c3:aa:4d:65:
41:e9:b9:a8:44:9e:97:06:cc:90:fd:e4:56:ca:9c:
8b:4b:1c:31:9c:c2:41:11:9b:2d:54:eb:bc:b0:b6:
c1:cc:38:e4:2e:c9:a7:c6:fe:5d:e1:7b:83:89:fc:
2c:c0:c9:e7:a2:26:b2:db:8c:9d:42:7c:85:be:fd:
c1:40:4e:33:00:14:ed:fa:9f:44:20:09:5c:46:7a:
5b:cf:35:84:09:38:8f:32:32:2a:76:1a:fc:e2:7b:
4e:75:67:2d:16:51:5f:59:f2:32:76:27:a4:32:74:
40:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:77:09:95:D9:C7:2C:E8:2B:52:2F:C4:11:A9:E8:DF:DF:77:F4:EC
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS216223.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:d44::/48
Signature Algorithm: sha256WithRSAEncryption
21:bf:d7:92:4f:56:47:6b:d8:e6:c1:96:13:ad:eb:cf:a5:a9:
5b:4d:50:b7:06:67:c0:a2:35:63:67:ae:81:d4:b6:07:0c:53:
9d:38:9e:14:db:dc:1c:6e:6d:45:17:aa:6e:b6:17:9e:ba:66:
8f:6c:0d:df:24:6e:9a:dc:ce:07:a6:f5:6e:c7:5d:38:27:53:
bb:8e:96:9a:cf:44:8e:c5:e5:1c:e8:36:ee:f2:11:40:e0:27:
e4:93:91:5b:bc:3c:04:51:c1:e2:a7:e1:cf:a7:9d:86:c3:66:
f7:4d:0b:ef:5f:4f:d2:29:dc:18:5d:35:6c:a6:b3:7b:29:4f:
62:2a:e2:e3:86:99:2a:ff:12:3f:d1:11:80:20:45:ad:bb:99:
bf:bf:96:52:04:25:b6:29:5d:1e:38:ad:ce:95:b0:fb:c2:76:
13:e3:e1:ca:e7:c3:74:69:63:52:59:95:cb:0f:87:f6:6d:43:
8f:80:15:0e:d0:57:c7:2a:d2:fd:65:82:a7:5f:37:a4:fc:2d:
a7:98:e7:ac:a6:55:db:4c:da:e5:5a:2f:6a:a1:b3:03:4a:1d:
8d:7d:54:f4:ad:17:a2:86:11:2a:59:13:cd:1a:51:92:48:19:
24:a9:8a:23:ec:30:e0:92:71:d4:07:56:46:b4:8e:4d:9c:fd:
ad:70:0e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:04:40 2026 by rpki-client