Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS216336.roa
File: AS216336.roa (raw, json)
Hash identifier: r+DvUIpYySah0A7IQMopfhqWEvEmIEhjqprSMiQsMIk=
Subject key identifier: 4A:28:D6:E6:A2:50:5B:2E:66:0E:92:A2:56:6F:F8:88:5C:61:E3:72
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 1C38796C2D12C06F36F979AF8D0A7746C74ED23B
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS216336.roa
Signing time: Fri 26 Jun 2026 08:08:42 +0000
ROA not before: Fri 26 Jun 2026 08:03:42 +0000
ROA not after: Fri 25 Jun 2027 08:08:42 +0000
asID: 216336
IP address blocks: 2a0f:85c1:400::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:38:79:6c:2d:12:c0:6f:36:f9:79:af:8d:0a:77:46:c7:4e:d2:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jun 26 08:03:42 2026 GMT
Not After : Jun 25 08:08:42 2027 GMT
Subject: CN=4A28D6E6A2505B2E660E92A2566FF8885C61E372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e9:cd:fb:bf:70:20:eb:3d:f1:10:50:e0:29:
9b:51:ba:0a:d3:09:59:d8:64:62:d4:d5:5b:7c:96:
0e:12:e1:9e:1e:69:9c:2b:6a:b1:90:d5:4c:a5:d4:
82:65:dc:1b:25:49:26:c1:fc:74:3a:34:ad:76:2f:
ac:d5:d0:ee:c9:ae:00:1f:b7:49:69:ac:43:ce:b8:
a9:ee:31:f5:f8:0e:44:05:29:e0:29:33:a4:42:70:
35:64:51:9d:3d:dd:c2:ec:7b:3d:57:a7:63:90:6d:
50:fb:09:fe:72:78:8e:8a:de:f6:01:46:21:de:bb:
b3:ac:14:74:d2:ce:72:d4:8d:21:36:e6:6b:ee:b3:
da:f6:65:c6:2a:79:fb:d2:0a:14:1d:85:ac:02:93:
1e:eb:d8:86:31:0e:cb:3a:24:56:97:ce:d7:bd:b6:
83:82:8c:1c:69:63:24:8b:5b:75:55:2a:60:b3:b5:
06:0d:ab:fb:b8:ea:3c:47:9f:c8:c4:d2:31:8b:83:
40:12:3e:8d:38:89:c8:23:06:62:e4:5a:8c:6e:07:
f2:17:ad:2d:6b:d5:87:a0:88:88:1b:ae:11:40:1b:
cf:12:a8:f6:79:ff:8c:f3:a6:9d:58:5c:64:a9:14:
6f:42:1a:cc:c0:8e:72:5d:90:5c:34:c3:b2:8c:26:
63:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:28:D6:E6:A2:50:5B:2E:66:0E:92:A2:56:6F:F8:88:5C:61:E3:72
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS216336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:400::/40
Signature Algorithm: sha256WithRSAEncryption
31:d6:39:29:4e:86:65:9e:95:d8:44:e4:d2:d7:ee:13:58:f7:
3a:50:ca:81:7d:c5:79:d1:b8:28:62:19:e6:05:ed:9a:d3:fd:
b3:2e:b8:00:83:0c:50:3e:be:38:67:09:d0:7d:1f:7c:fa:18:
a2:dd:d6:dd:84:73:5c:d3:6a:c1:55:23:4e:57:e1:5d:ef:14:
1e:07:4e:c1:bc:cd:da:26:d7:6b:ec:9d:4e:46:2f:76:c6:cc:
cd:69:73:0e:17:9c:1b:3a:60:49:b9:e6:0d:a1:7b:6e:29:05:
49:8a:f8:57:7e:f8:81:37:82:da:c7:ee:26:85:16:23:60:a0:
72:75:2c:1f:eb:b9:30:f4:3a:b7:9d:1a:2e:4b:dd:bf:3e:1f:
7c:28:87:ff:82:2f:44:97:10:42:da:87:3f:8d:de:1d:6c:8a:
59:ac:88:ad:27:67:d7:1b:ba:b6:84:e3:fb:60:72:01:4f:bf:
f6:f0:3e:de:5d:7c:52:c9:52:ff:8d:5f:5d:40:ff:3e:22:08:
db:a0:7f:2e:d3:ac:f2:e2:38:ef:5d:dd:db:12:56:02:0d:d4:
23:f3:79:34:fc:2a:b8:98:b7:53:b8:99:f9:c6:b5:38:5b:4d:
a5:28:29:6a:88:f5:93:45:06:c7:8c:13:c7:40:cc:ea:dc:41:
ac:90:58:df
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgIUHDh5bC0SwG82+XmvjQp3RsdO0jswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNjA2MjYwODAzNDJaFw0yNzA2MjUwODA4NDJaMDMxMTAvBgNV
BAMTKDRBMjhENkU2QTI1MDVCMkU2NjBFOTJBMjU2NkZGODg4NUM2MUUzNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC06c37v3Ag6z3xEFDgKZtRugrT
CVnYZGLU1Vt8lg4S4Z4eaZwrarGQ1Uyl1IJl3BslSSbB/HQ6NK12L6zV0O7JrgAf
t0lprEPOuKnuMfX4DkQFKeApM6RCcDVkUZ093cLsez1Xp2OQbVD7Cf5yeI6K3vYB
RiHeu7OsFHTSznLUjSE25mvus9r2ZcYqefvSChQdhawCkx7r2IYxDss6JFaXzte9
toOCjBxpYySLW3VVKmCztQYNq/u46jxHn8jE0jGLg0ASPo04icgjBmLkWoxuB/IX
rS1r1YegiIgbrhFAG88SqPZ5/4zzpp1YXGSpFG9CGszAjnJdkFw0w7KMJmPXAgMB
AAGjggIMMIICCDAdBgNVHQ4EFgQUSijW5qJQWy5mDpKiVm/4iFxh43IwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjE2MzM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg+F
wQQwDQYJKoZIhvcNAQELBQADggEBADHWOSlOhmWeldhE5NLX7hNY9zpQyoF9xXnR
uChiGeYF7ZrT/bMuuACDDFA+vjhnCdB9H3z6GKLd1t2Ec1zTasFVI05X4V3vFB4H
TsG8zdom12vsnU5GL3bGzM1pcw4XnBs6YEm55g2he24pBUmK+Fd++IE3gtrH7iaF
FiNgoHJ1LB/ruTD0OredGi5L3b8+H3woh/+CL0SXEELahz+N3h1silmsiK0nZ9cb
uraE4/tgcgFPv/bwPt5dfFLJUv+NX11A/z4iCNugfy7TrPLiOO9d3dsSVgIN1CPz
eTT8KriYt1O4mfnGtThbTaUoKWqI9ZNFBseME8dAzOrcQayQWN8=
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:49:13 2026 by rpki-client