Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS216129.roa
File: AS216129.roa (raw, json)
Hash identifier: ISonZ7NcMIek6qRtdt5HNqiVvuqzAOkJ7hWmIM92uow=
Subject key identifier: 70:60:47:81:4E:35:33:24:0C:89:12:C7:81:1E:A5:53:6A:AB:F4:AA
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 53A50975DB25CF485EBE7759D34A349CCC27ECBE
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS216129.roa
Signing time: Wed 17 Jun 2026 13:54:56 +0000
ROA not before: Wed 17 Jun 2026 13:49:56 +0000
ROA not after: Wed 16 Jun 2027 13:54:56 +0000
asID: 216129
IP address blocks: 188.220.148.0/24 maxlen: 24
188.220.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:a5:09:75:db:25:cf:48:5e:be:77:59:d3:4a:34:9c:cc:27:ec:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 17 13:49:56 2026 GMT
Not After : Jun 16 13:54:56 2027 GMT
Subject: CN=706047814E3533240C8912C7811EA5536AABF4AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6b:b9:54:fa:b7:07:34:a0:e6:59:4c:c0:f9:
a2:3b:34:ac:5c:44:8b:c0:99:09:d7:5f:b8:93:7a:
0b:61:ff:3c:b3:95:95:ed:0b:56:cd:d3:a1:c9:67:
a8:20:22:9c:a3:f6:60:16:29:26:b1:7d:f4:99:3d:
91:2a:c3:0e:9b:b3:b6:e7:4f:2f:b6:80:8d:b5:f2:
bf:69:13:ce:12:51:57:31:0e:62:46:f4:a3:82:28:
2e:2f:50:85:4d:0a:e4:a9:c3:46:90:1b:f9:53:26:
90:f7:6c:55:fb:87:de:87:d6:48:41:de:0b:49:f0:
6a:3c:10:82:d2:b2:15:8c:f9:6d:da:be:c5:48:5e:
b8:22:9e:14:f8:2d:59:aa:d0:66:4b:36:ae:a6:b3:
c3:98:b5:a9:c0:67:f9:cc:2c:66:88:7b:06:d0:00:
e2:15:85:7b:c3:5a:2c:e8:6d:ab:bb:08:74:b7:ba:
df:dc:50:3e:55:24:b4:03:98:f7:26:9c:35:33:cd:
43:dd:e8:43:14:83:52:9f:ad:c6:3f:4b:75:f7:c7:
d5:08:af:17:4d:61:f2:b3:09:d4:eb:7c:1d:d5:cd:
ff:03:6b:71:05:81:40:c0:31:2b:1e:87:8f:f2:48:
6f:cd:2a:04:86:f0:e1:16:fb:5c:56:4f:64:e2:e8:
13:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:60:47:81:4E:35:33:24:0C:89:12:C7:81:1E:A5:53:6A:AB:F4:AA
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS216129.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.220.148.0/24
188.220.205.0/24
Signature Algorithm: sha256WithRSAEncryption
65:21:92:77:f2:e7:d6:e3:48:4a:25:e6:a8:1f:25:22:bc:82:
58:7e:80:a9:1d:3f:de:b2:52:10:db:6c:dd:6d:b5:48:27:d1:
12:aa:ed:31:ff:8e:cd:9f:71:a1:c1:cf:55:6f:c5:37:94:8b:
dc:4e:4a:a9:bb:f8:b5:4d:f2:f9:c7:db:39:6a:0c:82:2e:92:
fc:94:1d:16:df:ed:a0:22:0c:15:b4:88:78:61:49:36:1f:db:
6f:55:91:27:7a:04:98:56:55:6c:64:9e:88:69:27:11:58:75:
cb:df:78:32:84:e9:09:0a:08:f3:b2:11:69:5b:c2:10:1e:f6:
24:b9:de:2e:65:c3:99:27:a1:7e:c8:81:8f:71:e9:1c:e1:51:
a6:1e:4b:60:21:b0:27:b5:ca:a7:d3:f0:26:f0:c4:ac:76:a9:
e3:ca:3b:48:f4:f1:01:dd:8e:47:44:e2:41:03:2a:30:1e:f4:
0e:b5:04:f2:47:8a:70:f2:ad:88:7b:f6:dd:f9:d8:99:5a:e1:
ab:e9:ca:ed:3f:7d:ae:5a:8f:6f:2b:04:27:ef:ac:e9:67:e2:
bf:47:98:7b:8d:ac:7e:d8:1f:58:aa:ce:52:78:ad:c7:01:67:
4d:a3:49:90:fd:74:60:ce:0b:a8:7a:e6:5f:fc:60:fc:a5:ee:
80:20:86:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 06:45:40 2026 by rpki-client