Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS16509.roa
File: AS16509.roa (raw, json)
Hash identifier: dLm4mJYdUS+85TS54ElH4gTLN0iU+dbywXMo3AMGT9o=
Subject key identifier: F5:F7:50:53:06:C8:3A:F8:75:AF:E6:FE:2F:92:60:71:68:C6:61:2F
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 3D50809E7BFF8F049724E7C1148C02F1AE8316F3
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS16509.roa
Signing time: Mon 24 Aug 2026 23:02:01 +0000
ROA not before: Mon 24 Aug 2026 22:57:01 +0000
ROA not after: Mon 23 Aug 2027 23:02:01 +0000
asID: 16509
IP address blocks: 51.241.200.0/24 maxlen: 24
188.220.80.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 21:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:50:80:9e:7b:ff:8f:04:97:24:e7:c1:14:8c:02:f1:ae:83:16:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 24 22:57:01 2026 GMT
Not After : Aug 23 23:02:01 2027 GMT
Subject: CN=F5F7505306C83AF875AFE6FE2F92607168C6612F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:81:30:9d:a2:b1:89:03:f5:77:27:59:da:a8:
35:36:ee:5b:b2:2e:8a:f5:f2:57:98:0e:24:a3:5c:
bb:da:89:51:c2:12:cc:4f:55:2c:1d:cc:12:09:f3:
28:ee:32:0c:0d:7b:aa:81:4d:52:70:c9:16:52:f8:
3c:14:0d:fd:ff:02:97:0a:8a:d5:08:86:4a:de:c5:
77:82:32:4e:a4:1a:98:a5:5a:6b:4c:9c:54:44:f6:
88:91:62:0b:f3:c2:64:5f:8f:59:10:e1:79:d3:e7:
96:84:76:48:98:e9:95:c3:60:75:d5:09:ca:5d:6b:
62:a0:f2:5b:58:a0:ac:1b:ef:3d:77:eb:91:88:4a:
75:59:b5:51:35:ce:ec:8b:fa:9d:8a:0f:4f:e7:e2:
6e:5e:94:77:c1:35:ec:4d:6a:c3:b1:29:14:da:0f:
e7:5d:c2:13:8a:6f:29:a2:c8:a2:55:d6:c5:5d:60:
1c:4e:ce:a2:36:9d:c2:13:e0:c8:ba:fb:f2:b3:a7:
38:1e:54:30:f9:33:b0:25:51:6f:8e:37:03:e1:63:
ce:18:a1:7f:d2:d0:a8:0d:0d:d0:f5:b7:b5:0b:75:
e0:53:0a:d3:83:6c:6b:0d:12:d7:75:c5:e0:ea:03:
4c:d8:5a:0a:3f:80:d4:eb:dc:40:76:8d:23:6d:95:
36:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F7:50:53:06:C8:3A:F8:75:AF:E6:FE:2F:92:60:71:68:C6:61:2F
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS16509.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.241.200.0/24
188.220.80.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:70:9f:4f:e7:46:b7:25:04:c2:a0:92:7d:66:d6:9d:25:42:
ae:84:31:5f:a7:65:ef:b3:05:01:4b:da:92:35:cb:93:86:09:
52:d1:a3:de:d6:e5:95:4c:37:7a:47:db:85:f3:1a:56:ac:c4:
62:af:72:67:b8:59:60:f7:26:05:d9:c0:77:ff:a6:a6:61:87:
5b:f2:6d:f6:12:9f:14:01:5d:fc:c1:b1:77:a0:7f:e5:0a:a7:
56:ab:41:fe:a5:fd:bd:12:ca:9b:0b:36:49:24:a9:5a:45:93:
96:38:5f:fa:f9:92:c2:b3:3c:d6:85:30:bb:c4:46:4f:12:9b:
a5:7f:e9:18:e0:09:0e:75:07:2f:21:02:6a:32:c1:ec:1a:c4:
96:c2:65:37:34:5d:eb:ed:c2:9b:db:f7:e7:6c:5d:a8:82:42:
15:ac:a3:42:c3:a6:0e:95:a8:65:6f:5b:f1:c3:83:8b:20:eb:
ae:0d:c8:fc:36:87:89:c5:01:f1:dd:c4:25:90:71:3e:6f:c3:
d6:41:7e:74:3c:ce:40:c5:52:be:cb:91:88:6d:73:36:fb:a2:
65:02:a1:c6:af:08:1c:eb:68:74:77:65:a7:35:dc:3a:bf:2c:
35:1d:45:d1:41:c4:ad:2e:73:4a:5d:dc:5a:40:e8:4a:4d:a2:
39:3b:0b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 07:12:35 2026 by rpki-client