Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS216310.roa
File: AS216310.roa (raw, json)
Hash identifier: pK3lGQoSJ8EkJTgsS/btJ7iUpV3Xf8gJmFfoQKNL7tg=
Subject key identifier: EA:F8:9F:BD:C6:12:38:EA:93:90:23:30:72:16:31:BE:51:04:FA:D9
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 4391436F51756F55594B3816FD880A0555315D54
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS216310.roa
Signing time: Fri 26 Jun 2026 08:08:45 +0000
ROA not before: Fri 26 Jun 2026 08:03:45 +0000
ROA not after: Fri 25 Jun 2027 08:08:45 +0000
asID: 216310
IP address blocks: 2a0f:85c1:39c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:91:43:6f:51:75:6f:55:59:4b:38:16:fd:88:0a:05:55:31:5d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:45 2026 GMT
Not After : Jun 25 08:08:45 2027 GMT
Subject: CN=EAF89FBDC61238EA93902330721631BE5104FAD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d2:79:13:e4:48:57:13:09:2b:0b:27:54:45:
22:0a:30:95:46:b9:54:cd:17:6c:96:3d:6a:b8:d5:
60:ec:6f:52:53:43:bf:aa:9b:7c:c8:47:bc:a7:03:
ac:f0:95:fc:d5:27:c7:0a:98:62:f3:9b:2f:0a:32:
67:d1:81:47:39:71:33:1d:78:3a:a0:c4:78:95:55:
d1:1b:d7:05:08:93:21:06:7b:4b:7b:d4:40:d3:78:
06:03:ea:00:c7:f9:d9:f3:3b:46:de:9d:e0:16:dc:
3f:61:dd:0c:54:f3:c1:c0:ee:f8:e0:cd:98:44:a3:
8f:2c:5b:5c:e7:b0:6f:35:ca:ad:f1:68:bf:d3:82:
5b:17:57:06:5f:c2:a7:2c:98:1b:71:36:b5:25:50:
28:6f:f6:92:87:5d:4e:4f:5b:a8:ec:9d:7a:5a:65:
3e:e6:d4:c1:36:fd:a2:34:25:04:b2:c8:e8:e5:9f:
3f:3d:8f:2a:50:fe:31:8d:51:50:e7:6a:5c:94:13:
b3:22:55:2e:f6:11:75:e3:d9:4f:bd:4d:74:a4:3e:
72:3e:66:2e:ea:bf:bf:0d:cd:f8:72:ca:ba:b8:28:
d4:27:55:a2:4d:1f:71:aa:2b:55:74:a3:a7:b3:47:
6e:27:df:21:97:7a:b5:79:26:e2:3f:d6:c0:e9:99:
24:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F8:9F:BD:C6:12:38:EA:93:90:23:30:72:16:31:BE:51:04:FA:D9
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS216310.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:39c::/48
Signature Algorithm: sha256WithRSAEncryption
85:df:8f:35:d0:4e:ce:9f:ad:ee:11:dc:37:d9:7f:52:f0:e8:
a8:5e:34:41:a9:27:fb:e6:a1:50:1a:cf:9e:b2:08:b8:05:ed:
37:79:4a:f2:00:22:6a:97:6d:93:23:35:57:e5:1e:e0:6a:d6:
9a:bd:27:8f:c0:9b:4e:a1:4d:82:3c:d0:f3:01:6e:7b:d9:86:
00:78:10:43:12:77:06:e6:87:d5:ae:a6:ce:28:8d:a7:3f:79:
be:f9:c8:b8:5d:e9:c5:9e:d7:b9:b9:13:05:a7:41:c9:e1:ea:
07:a1:14:42:c9:a2:4e:d2:0a:64:40:c1:ad:b9:e9:b6:bf:23:
b0:3a:11:97:33:88:ba:21:b6:e8:55:1f:e9:9b:93:a7:4d:23:
97:82:46:31:43:f3:a4:ad:96:61:09:a0:f5:5b:45:c0:11:b4:
b4:6e:5b:b6:df:8e:f6:e2:5a:f8:59:37:b2:0b:86:b8:8d:23:
49:e6:d3:70:7d:15:59:e6:10:96:e1:d0:de:e6:0a:c8:a3:fa:
c1:65:ce:a4:3f:42:8f:90:5f:79:3e:3c:fa:5e:74:bd:f3:70:
8d:03:9b:a2:61:31:b2:07:09:12:d0:3a:f8:96:2c:05:79:09:
90:92:88:71:fb:73:11:7e:f3:0e:a2:74:b9:cf:ed:5b:95:b8:
bd:2c:6e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:49:14 2026 by rpki-client