Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS216255.roa
File: AS216255.roa (raw, json)
Hash identifier: xAsyQnhH2/kPuhQoAFywygvE4uqTzsAKBz+1SViR47E=
Subject key identifier: 70:99:F4:9B:0E:4E:89:AD:26:12:52:CC:34:87:95:0F:FE:64:D1:E3
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 28071D44040B4BC4CC42F1B65958F3B21339B93B
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS216255.roa
Signing time: Sat 15 Aug 2026 03:09:02 +0000
ROA not before: Sat 15 Aug 2026 03:04:02 +0000
ROA not after: Sat 14 Aug 2027 03:09:02 +0000
asID: 216255
IP address blocks: 2a0f:85c1:d3a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:07:1d:44:04:0b:4b:c4:cc:42:f1:b6:59:58:f3:b2:13:39:b9:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 15 03:04:02 2026 GMT
Not After : Aug 14 03:09:02 2027 GMT
Subject: CN=7099F49B0E4E89AD261252CC3487950FFE64D1E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d5:d9:d4:7d:ca:9b:2b:9a:54:7e:0d:e3:78:
4b:5f:d6:e1:1b:70:5e:9c:05:04:3c:b5:fd:2e:83:
ad:61:be:19:1e:97:bb:a8:d7:5c:20:c9:19:66:34:
ec:c4:86:66:0b:3c:b6:68:ce:7f:d2:7e:ea:d9:81:
9d:90:b9:30:70:2f:da:7e:59:59:a8:e1:2f:30:0a:
15:e0:61:f6:35:45:1d:5d:81:3a:23:78:d5:c3:6e:
df:20:70:f5:3f:0c:b9:dd:c5:ef:81:6a:57:9c:d6:
c2:9d:b6:21:f1:29:9d:f0:14:c1:fc:0e:8f:50:ab:
89:dd:e5:e2:53:9d:f3:7c:c4:6a:12:15:f1:0d:86:
79:80:55:68:6b:12:c1:28:67:60:0f:bf:2f:ff:16:
28:61:99:b6:38:7c:9d:da:14:25:d0:2b:8b:85:2e:
d8:30:1b:c6:50:58:ad:fd:6b:8a:26:3b:00:47:56:
d7:36:d6:56:b5:2b:f3:dc:d9:9e:d7:04:21:0b:ab:
86:c0:05:9b:ed:48:03:0d:fd:50:b3:90:9e:9c:cc:
45:23:16:d8:79:55:15:08:2b:36:85:68:7e:87:84:
31:8c:74:3f:e8:4e:31:b8:2e:f6:24:eb:90:61:ef:
2a:a7:b4:a4:33:ed:bd:49:63:f6:a9:ad:17:30:13:
e7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:99:F4:9B:0E:4E:89:AD:26:12:52:CC:34:87:95:0F:FE:64:D1:E3
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS216255.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:d3a::/48
Signature Algorithm: sha256WithRSAEncryption
03:b5:91:db:19:2f:00:2f:f3:6f:56:9d:a9:05:9b:4f:5d:b2:
4f:ce:fd:57:70:0a:98:6a:12:e8:f7:02:9a:fb:a5:6a:b8:e5:
6f:36:57:8d:1c:f4:d9:81:a4:cc:c5:b9:6e:5b:34:87:e7:b7:
8d:ef:05:1a:ea:4a:bc:1b:db:ca:36:a7:bf:23:06:f6:d0:56:
a2:84:82:f3:ab:a4:8b:eb:d2:cb:b5:22:76:ef:32:61:0f:8b:
15:9d:3b:9f:2c:57:a4:c7:35:79:42:5e:09:51:18:99:1d:73:
ec:4f:41:91:24:77:02:bb:4b:0f:05:f4:6e:0f:e9:89:6f:0c:
48:86:ef:3b:b2:ac:13:15:6f:93:cb:c0:9d:9d:0d:06:74:bc:
52:5b:58:80:d8:ce:de:27:42:1c:66:b4:f4:99:49:8a:4d:57:
1e:54:32:0f:54:6f:12:e1:0b:ea:0b:61:0a:07:80:49:b2:de:
41:2d:bc:be:30:93:9c:1d:dc:04:9a:e8:e0:77:44:f9:aa:3c:
10:90:2f:67:fc:34:68:4f:5b:15:ad:e3:97:34:2e:79:ac:2f:
e1:15:05:7a:c7:07:1f:2b:b1:b0:53:00:19:91:11:27:38:7c:
bb:0a:6f:dd:0d:99:39:9e:2d:fe:ad:14:78:23:24:46:b9:55:
df:33:2f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:04:31 2026 by rpki-client