Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS216044.roa
File: AS216044.roa (raw, json)
Hash identifier: C8t55Qx08k4gb3SgMuf5ExtiDyKqOCdogcCkIaMwBrw=
Subject key identifier: E8:58:A4:87:DF:89:35:23:09:7B:ED:68:B8:F2:7A:A8:63:FF:FC:D8
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 3BBF6EC0421E5B41F43534F42ED2C35A84D8FA0C
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS216044.roa
Signing time: Mon 10 Aug 2026 12:27:59 +0000
ROA not before: Mon 10 Aug 2026 12:22:59 +0000
ROA not after: Mon 09 Aug 2027 12:27:59 +0000
asID: 216044
IP address blocks: 2a14:7580:ffa0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:bf:6e:c0:42:1e:5b:41:f4:35:34:f4:2e:d2:c3:5a:84:d8:fa:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Aug 10 12:22:59 2026 GMT
Not After : Aug 9 12:27:59 2027 GMT
Subject: CN=E858A487DF893523097BED68B8F27AA863FFFCD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:22:a6:25:db:f2:70:d7:86:14:c4:11:6f:2e:
9e:89:86:77:24:13:b4:f6:f1:56:9f:a0:49:6c:5d:
c7:09:39:c2:94:b9:b8:c3:f6:32:35:97:ff:78:8f:
69:83:79:d5:2f:46:d0:fa:d6:49:85:d0:b9:ed:e5:
6e:4f:9f:46:fb:3f:ef:9d:8e:46:9a:dd:4d:05:7d:
a3:55:eb:24:7b:37:af:aa:ab:3e:ae:5a:aa:7c:0a:
c4:51:7c:0f:cc:5f:ce:aa:18:12:39:ab:30:e2:63:
6e:d3:2a:aa:56:1f:8b:e9:ec:f5:10:af:f6:f0:46:
b3:0c:d7:d4:34:41:66:29:29:af:89:78:9a:ce:df:
6b:3e:6e:63:5a:e4:aa:0b:fc:2d:5e:cd:96:4a:b6:
27:aa:b7:23:9a:77:46:57:bc:ab:0b:ea:8a:af:e2:
7e:ff:7f:38:f6:94:7b:e7:9c:0c:38:e7:09:d0:44:
6e:dd:02:d9:17:cb:aa:53:83:bd:d0:24:23:6e:c6:
04:2f:d0:02:7d:13:de:71:0f:89:07:33:d9:a0:3a:
7a:51:47:4f:e2:e8:77:49:77:24:78:b4:c7:5d:b6:
e4:ba:72:2a:d3:a3:f5:f9:79:a4:ad:7a:28:59:08:
45:0e:58:52:bf:10:e2:87:d8:a4:98:53:55:24:e4:
ca:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:58:A4:87:DF:89:35:23:09:7B:ED:68:B8:F2:7A:A8:63:FF:FC:D8
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS216044.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:ffa0::/44
Signature Algorithm: sha256WithRSAEncryption
76:a3:99:da:2f:9b:2a:7a:b2:ab:dc:eb:63:ac:d5:1e:a9:58:
8f:98:01:2b:79:ae:c6:ad:cb:dd:e9:b4:8a:93:c8:fd:a6:aa:
68:9b:66:2d:35:15:da:2a:c3:12:fc:ed:c7:3d:7d:7d:99:78:
cd:53:d5:ab:2a:1c:98:74:39:0d:de:f1:aa:fb:02:53:92:8e:
95:48:9e:84:12:88:3d:ec:81:fb:d3:75:10:d6:16:4b:05:50:
45:a7:13:67:a8:7b:1c:b2:b1:d0:5c:45:85:d5:f9:d5:d3:87:
ea:19:a8:b4:b7:d3:2a:46:d3:83:53:6d:d1:6c:51:06:f2:e6:
f5:43:fb:93:ea:a3:be:e5:44:0e:c6:80:f5:50:db:e3:55:14:
70:9f:a6:c3:ef:bf:d3:f0:6f:2c:ec:f9:8a:5a:19:5c:dc:0b:
9d:b7:c7:bc:96:63:6e:6f:42:7e:e3:79:50:bc:f0:84:55:71:
bc:a2:89:77:5e:82:ca:9a:b8:4b:27:ec:aa:e1:53:e2:a2:80:
87:a4:11:de:0d:84:e0:26:74:b9:00:52:52:00:f0:17:aa:b7:
ad:77:b9:f8:ef:d2:c8:4f:64:39:11:34:d5:af:30:84:22:a7:
43:67:4f:73:98:f9:04:ca:19:88:26:1d:24:30:e5:35:28:91:
47:17:e1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 11:22:58 2026 by rpki-client