Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS216100.roa
File: AS216100.roa (raw, json)
Hash identifier: KSxRtHqbSqjLWv3IYY+c3dYbM688YFf21tvAIapr+8k=
Subject key identifier: 4C:62:CA:D6:B1:DB:6F:73:12:3A:F9:DC:56:BE:56:0F:C1:D4:B3:13
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 3D0A369A62116835C64ACEA644EC8EE39D81D640
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS216100.roa
Signing time: Sun 02 Aug 2026 15:55:17 +0000
ROA not before: Sun 02 Aug 2026 15:50:17 +0000
ROA not after: Sun 01 Aug 2027 15:55:17 +0000
asID: 216100
IP address blocks: 2a14:7580:fff7::/48 maxlen: 48
2a14:7581:5b00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:0a:36:9a:62:11:68:35:c6:4a:ce:a6:44:ec:8e:e3:9d:81:d6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Aug 2 15:50:17 2026 GMT
Not After : Aug 1 15:55:17 2027 GMT
Subject: CN=4C62CAD6B1DB6F73123AF9DC56BE560FC1D4B313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:95:ad:06:44:41:bb:0b:ad:48:99:0c:c9:fa:
35:2e:7e:5f:a5:47:eb:c7:09:66:88:97:43:6e:21:
d9:f3:5c:30:e0:ad:0a:95:3d:25:cc:5f:b8:e3:8c:
ba:d8:8e:6c:c8:af:72:b8:9c:56:6d:b2:5a:de:77:
37:93:58:5d:6d:a1:27:a8:78:7b:f7:f0:4c:b2:4d:
8d:bd:92:06:df:2d:e2:af:1c:3d:c7:4c:6a:44:c8:
df:de:03:9d:f5:46:72:e9:d1:2f:72:8b:0f:23:91:
f8:ec:20:37:34:a9:f4:1f:cb:4f:f2:34:7c:ac:91:
74:4a:c0:8a:c2:08:9a:47:3a:14:aa:d6:6d:34:40:
f3:c3:40:a4:ae:88:5a:bd:df:fb:11:f1:e1:d1:93:
9d:d2:ee:1b:cc:93:54:e3:6e:bc:c0:0b:0e:52:aa:
ae:e2:d1:81:11:a1:20:0b:58:bb:45:57:01:32:b4:
8c:17:71:21:84:e6:0c:75:a6:2d:be:41:54:ff:ac:
d2:d8:ae:7e:00:5f:5d:9c:82:94:cc:06:76:b3:2a:
6f:d8:8c:f1:5a:10:29:f0:ca:a9:e1:40:9d:da:24:
e6:b2:6c:b8:a2:b8:69:48:b5:04:e0:9c:b8:6b:66:
18:e3:2b:73:0e:70:60:9c:a3:28:55:57:35:1d:c6:
a5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:62:CA:D6:B1:DB:6F:73:12:3A:F9:DC:56:BE:56:0F:C1:D4:B3:13
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS216100.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:fff7::/48
2a14:7581:5b00::/40
Signature Algorithm: sha256WithRSAEncryption
7e:77:cc:2e:87:c3:15:da:e6:3d:01:b5:3f:16:d4:b1:0c:1b:
30:2c:55:63:60:06:01:e7:fc:1b:79:7a:d7:9f:a6:ad:5d:75:
09:e5:b4:aa:92:d3:7b:fe:53:83:46:e1:e6:29:3d:39:04:4c:
5f:9d:11:04:0c:ce:bd:8c:e9:0c:11:50:5e:cc:68:ec:18:ad:
60:00:b4:88:c1:b9:b0:4c:29:16:98:50:7a:1e:f2:70:fe:17:
48:04:08:4b:b0:e0:e3:a8:8f:d8:d9:07:e1:17:89:b8:56:47:
f3:55:c9:9b:44:b5:a4:8d:41:8c:d1:3b:3f:85:1a:11:4f:5c:
71:3f:54:65:2d:c2:a6:cb:c8:fa:5b:b6:69:d5:31:ef:a7:8f:
bc:b1:2b:97:80:39:4e:60:cf:c9:19:d2:15:23:98:df:cb:3e:
e2:fc:4d:44:83:a0:74:7b:50:cf:57:8b:75:8d:21:31:2d:eb:
b2:d9:dc:51:98:b8:64:c9:b6:3b:14:7b:35:89:7d:34:e9:a8:
33:79:0b:47:3f:63:95:08:10:8f:ca:1d:37:49:82:1a:3c:33:
2e:a6:c0:7a:66:46:b0:2b:88:5a:d3:cd:e1:6f:b8:cc:e2:95:
0d:f5:7e:82:87:d6:9d:c7:e9:76:86:22:a9:b3:a5:7d:26:4b:
3b:82:89:34
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 4 21:03:59 2026 by rpki-client