Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS216367.roa
File: AS216367.roa (raw, json)
Hash identifier: whkemeysqzDUnp4xaFMsEYKnm27hZ76QpllVW0zSzDs=
Subject key identifier: 7B:BC:EE:0A:51:75:D0:AD:F1:13:3D:80:A3:E5:70:3A:49:4F:1A:5E
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 36A7468953ADD7D5E807A1F2945B6ABC32C5714D
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS216367.roa
Signing time: Thu 14 May 2026 11:05:47 +0000
ROA not before: Thu 14 May 2026 11:00:47 +0000
ROA not after: Thu 13 May 2027 11:05:47 +0000
asID: 216367
IP address blocks: 2a14:7585:a300::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 10:56:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:a7:46:89:53:ad:d7:d5:e8:07:a1:f2:94:5b:6a:bc:32:c5:71:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: May 14 11:00:47 2026 GMT
Not After : May 13 11:05:47 2027 GMT
Subject: CN=7BBCEE0A5175D0ADF1133D80A3E5703A494F1A5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:00:01:2c:6a:96:39:e8:be:58:bd:9f:24:b6:
40:b0:3f:79:ca:c2:6a:fe:b7:80:5b:1e:c8:ef:26:
57:6f:28:d0:2b:40:44:18:04:9a:79:a6:da:d9:32:
f1:4b:21:83:15:5e:e6:ff:12:88:74:d3:57:62:be:
d4:f4:90:d4:0b:57:61:4c:53:e6:a7:b6:e1:3b:ee:
41:1d:8c:00:a2:d6:ae:5a:bb:c2:4f:06:8e:f0:9b:
5e:fe:21:ab:2c:07:3d:ee:54:6a:73:ac:8e:0d:f5:
38:81:11:f6:68:06:52:d0:2a:ab:c2:ed:02:fd:f1:
d1:ef:de:c6:99:ad:5f:cd:9c:8f:2f:3e:c0:c5:25:
65:98:2b:97:22:e6:c0:ac:d5:73:c2:72:a1:bc:eb:
09:35:ef:da:65:66:21:54:56:6f:45:2c:e4:21:53:
0c:d4:88:54:5d:87:ed:3d:26:8a:5b:26:28:9e:1b:
07:90:65:42:15:be:82:c9:cb:6a:88:db:86:d1:cf:
48:f4:1f:1c:4f:7b:4f:86:7d:29:bb:64:3c:69:05:
ce:3a:75:fa:0a:e8:3e:9c:fb:76:86:1d:14:3b:b6:
06:1b:e0:28:30:d4:da:13:38:26:8c:e1:c2:a1:a9:
3b:2f:de:9a:93:1c:0b:87:4f:f0:1e:09:30:6c:57:
b6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:BC:EE:0A:51:75:D0:AD:F1:13:3D:80:A3:E5:70:3A:49:4F:1A:5E
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS216367.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7585:a300::/48
Signature Algorithm: sha256WithRSAEncryption
2f:9e:cb:ab:d1:99:e2:95:e2:7a:47:7f:f3:17:42:bb:c5:da:
26:24:08:d2:f1:22:ba:a3:fb:c2:34:4f:aa:fa:3b:db:58:6c:
7f:65:52:0f:b3:2e:22:97:70:2f:17:be:3d:b7:b4:01:d5:70:
a8:f3:99:62:87:c0:85:48:8f:aa:b7:60:2a:4f:09:64:a4:1a:
7c:48:74:fd:51:ef:f5:9d:08:81:f5:34:dc:7b:a3:da:26:bd:
b3:8a:07:7a:14:74:72:04:d9:08:0e:7a:b5:0f:3d:fb:e6:d1:
a6:81:51:33:8c:71:29:07:06:fe:02:bd:91:ab:94:93:92:f8:
8f:67:5c:a7:92:1a:8c:81:7f:bb:26:bf:52:a6:fe:03:dc:f0:
67:a2:e7:17:b5:52:db:1d:39:97:83:a4:f9:a0:a5:a7:48:57:
3c:32:d4:7a:3d:72:d5:d1:a4:18:5c:51:a9:65:5e:92:19:8f:
6d:03:a9:86:a8:f3:b1:58:7e:2c:a7:74:f6:10:ba:99:80:1b:
b6:19:0f:a6:2e:7e:c9:03:80:fe:41:8d:19:dd:19:eb:10:85:
49:5e:9e:7c:41:2a:b3:68:cf:51:ba:33:d8:24:be:d2:19:1f:
29:b3:c8:b4:f9:17:8e:2b:8a:f6:4d:81:53:03:c7:96:e6:1c:
8e:b2:ec:5c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUNqdGiVOt19XoB6HylFtqvDLFcU0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNjA1MTQxMTAwNDdaFw0yNzA1MTMxMTA1NDdaMDMxMTAvBgNV
BAMTKDdCQkNFRTBBNTE3NUQwQURGMTEzM0Q4MEEzRTU3MDNBNDk0RjFBNUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoAAEsapY56L5YvZ8ktkCwP3nK
wmr+t4BbHsjvJldvKNArQEQYBJp5ptrZMvFLIYMVXub/Eoh001divtT0kNQLV2FM
U+antuE77kEdjACi1q5au8JPBo7wm17+IassBz3uVGpzrI4N9TiBEfZoBlLQKqvC
7QL98dHv3saZrV/NnI8vPsDFJWWYK5ci5sCs1XPCcqG86wk179plZiFUVm9FLOQh
UwzUiFRdh+09JopbJiieGweQZUIVvoLJy2qI24bRz0j0HxxPe0+GfSm7ZDxpBc46
dfoK6D6c+3aGHRQ7tgYb4Cgw1NoTOCaM4cKhqTsv3pqTHAuHT/AeCTBsV7YxAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUe7zuClF10K3xEz2Ao+VwOklPGl4wHwYDVR0j
BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz
ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16
OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt
NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjE2MzY3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1
haMAMA0GCSqGSIb3DQEBCwUAA4IBAQAvnsur0ZnileJ6R3/zF0K7xdomJAjS8SK6
o/vCNE+q+jvbWGx/ZVIPsy4il3AvF749t7QB1XCo85lih8CFSI+qt2AqTwlkpBp8
SHT9Ue/1nQiB9TTce6PaJr2zigd6FHRyBNkIDnq1Dz375tGmgVEzjHEpBwb+Ar2R
q5STkviPZ1ynkhqMgX+7Jr9Spv4D3PBnoucXtVLbHTmXg6T5oKWnSFc8MtR6PXLV
0aQYXFGpZV6SGY9tA6mGqPOxWH4sp3T2ELqZgBu2GQ+mLn7JA4D+QY0Z3RnrEIVJ
Xp58QSqzaM9RujPYJL7SGR8ps8i0+ReOK4r2TYFTA8eW5hyOsuxc
-----END CERTIFICATE-----
Generated at Thu Jun 4 17:59:23 2026 by rpki-client