Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS16509.roa
File: AS16509.roa (raw, json)
Hash identifier: sV8r0YHwzAAapD/5d2jXBYP3e80dblH8o7Bce3AVsvE=
Subject key identifier: 91:60:2D:40:4D:F9:E5:1E:16:F3:FE:AD:8C:86:C6:FB:02:DB:6A:CC
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 6DE00C6F5994620CD51C956095BED8AD59711FED
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS16509.roa
Signing time: Mon 06 Jul 2026 02:05:03 +0000
ROA not before: Mon 06 Jul 2026 02:00:03 +0000
ROA not after: Mon 05 Jul 2027 02:05:03 +0000
asID: 16509
IP address blocks: 2a14:7580:ff9f::/48 maxlen: 48
2a14:7583:ef80::/44 maxlen: 48
2a14:7583:efff::/48 maxlen: 48
2a14:7583:fd00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:e0:0c:6f:59:94:62:0c:d5:1c:95:60:95:be:d8:ad:59:71:1f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jul 6 02:00:03 2026 GMT
Not After : Jul 5 02:05:03 2027 GMT
Subject: CN=91602D404DF9E51E16F3FEAD8C86C6FB02DB6ACC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:db:ca:12:f4:a6:90:7c:92:7f:89:31:5c:66:
f5:2a:c7:ed:07:66:4e:bd:ae:41:0a:5a:5c:de:4d:
62:d2:5d:d5:1b:a3:89:74:a4:fd:14:d6:ec:fc:89:
5e:3f:90:08:30:a5:69:58:23:30:be:1e:69:ca:d0:
de:eb:d8:d5:23:fb:0a:91:63:bb:7b:9e:05:34:fc:
60:eb:61:94:31:6a:fd:ea:1a:7a:07:1a:2b:38:3d:
56:76:c5:ef:9a:be:2c:c1:3f:ca:b6:4e:bc:c5:e1:
0f:5e:50:a6:e6:e7:d9:a2:9a:f9:2e:08:78:4a:98:
0f:43:80:fc:9f:37:ff:c9:8d:c6:36:a8:bc:88:4e:
0f:1a:38:3f:b3:5e:66:e9:35:c3:74:99:41:0c:f7:
2f:04:53:a8:5a:d6:e9:b2:ed:f7:6b:66:c4:ed:75:
9e:87:5a:19:cf:73:4e:46:54:3e:5c:d3:70:aa:10:
7f:9c:6b:f3:87:79:e1:c6:d8:a0:5e:b3:b0:ff:6c:
6c:b4:33:ce:ca:ca:eb:74:5a:9a:cf:24:29:67:04:
10:7a:64:b0:20:4e:aa:0f:5d:a0:0a:1b:d0:30:d9:
3c:28:5f:bc:4e:7b:77:51:a5:e4:ee:56:e1:c6:dc:
bd:ee:65:59:1a:e9:3f:f6:b0:ac:52:4c:9b:f0:5d:
eb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:60:2D:40:4D:F9:E5:1E:16:F3:FE:AD:8C:86:C6:FB:02:DB:6A:CC
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS16509.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:ff9f::/48
2a14:7583:ef80::/44
2a14:7583:efff::/48
2a14:7583:fd00::/40
Signature Algorithm: sha256WithRSAEncryption
92:81:d1:d6:82:13:6a:44:8b:ef:a1:7b:b2:d6:e8:81:7d:40:
57:d9:09:64:b5:af:42:dc:a1:45:e0:f5:b5:7e:32:3e:4f:7d:
87:04:b6:65:31:39:40:14:cc:51:fb:88:da:a4:91:27:29:b4:
3a:a2:cf:ab:e3:f8:ed:2a:4f:18:b3:42:b6:a7:a9:bd:c2:33:
14:d7:6b:12:1a:19:f3:9e:b5:f2:22:cd:a8:04:db:68:0f:1a:
39:ef:49:8f:8a:fd:75:a0:0f:3c:3d:d6:53:45:d5:a3:e4:c3:
c0:d9:e3:4f:d3:bd:71:7e:d7:37:7d:42:57:15:84:f7:88:e5:
70:0c:19:c3:1c:ec:3a:10:1c:2b:50:c5:21:a5:4b:4d:c2:13:
22:7c:d4:c2:d1:13:ec:bf:7e:b7:26:4d:b3:bb:50:59:69:8a:
19:3c:2b:c9:70:ad:1d:54:1f:a1:50:0d:a0:e1:84:5c:37:13:
4c:eb:44:20:6b:61:b7:a9:7a:6d:93:24:5e:ea:22:56:c3:6d:
b0:8f:9d:30:88:4d:cd:fa:29:ec:cf:ec:8d:bc:b1:a7:b5:4d:
57:b8:f3:9a:1d:78:76:30:bf:72:84:bd:f8:15:25:94:24:ba:
5a:f1:dd:f9:8b:d1:2a:4b:77:1f:31:a6:32:de:7d:92:70:a7:
ff:bc:76:8c
-----BEGIN CERTIFICATE-----
MIIFHDCCBASgAwIBAgIUbeAMb1mUYgzVHJVglb7YrVlxH+0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNjA3MDYwMjAwMDNaFw0yNzA3MDUwMjA1MDNaMDMxMTAvBgNV
BAMTKDkxNjAyRDQwNERGOUU1MUUxNkYzRkVBRDhDODZDNkZCMDJEQjZBQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF28oS9KaQfJJ/iTFcZvUqx+0H
Zk69rkEKWlzeTWLSXdUbo4l0pP0U1uz8iV4/kAgwpWlYIzC+HmnK0N7r2NUj+wqR
Y7t7ngU0/GDrYZQxav3qGnoHGis4PVZ2xe+avizBP8q2TrzF4Q9eUKbm59mimvku
CHhKmA9DgPyfN//JjcY2qLyITg8aOD+zXmbpNcN0mUEM9y8EU6ha1umy7fdrZsTt
dZ6HWhnPc05GVD5c03CqEH+ca/OHeeHG2KBes7D/bGy0M87Kyut0WprPJClnBBB6
ZLAgTqoPXaAKG9Aw2TwoX7xOe3dRpeTuVuHG3L3uZVka6T/2sKxSTJvwXeudAgMB
AAGjggImMIICIjAdBgNVHQ4EFgQUkWAtQE355R4W8/6tjIbG+wLbaswwHwYDVR0j
BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz
ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16
OU4zSS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt
NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMTY1MDkucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwPAYIKwYBBQUHAQcBAf8ELTArMCkEAgACMCMDBwAqFHWA
/58DBwQqFHWD74ADBwAqFHWD7/8DBgAqFHWD/TANBgkqhkiG9w0BAQsFAAOCAQEA
koHR1oITakSL76F7stbogX1AV9kJZLWvQtyhReD1tX4yPk99hwS2ZTE5QBTMUfuI
2qSRJym0OqLPq+P47SpPGLNCtqepvcIzFNdrEhoZ85618iLNqATbaA8aOe9Jj4r9
daAPPD3WU0XVo+TDwNnjT9O9cX7XN31CVxWE94jlcAwZwxzsOhAcK1DFIaVLTcIT
InzUwtET7L9+tyZNs7tQWWmKGTwryXCtHVQfoVANoOGEXDcTTOtEIGtht6l6bZMk
XuoiVsNtsI+dMIhNzfop7M/sjbyxp7VNV7jzmh14djC/coS9+BUllCS6WvHd+YvR
Kkt3HzGmMt59knCn/7x2jA==
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:29:50 2026 by rpki-client