Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS16509.roa
File: AS16509.roa (raw, json)
Hash identifier: 6SzGj3D/9L1NpS63cqLaVNuGSJtGSP6lBRyoRsTuJFQ=
Subject key identifier: 91:AC:76:3E:54:D5:6F:C7:01:47:EB:B0:97:82:64:95:3A:FF:5B:0B
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 091F8F4130AA5E36494E92DEACAE8694420EA1AE
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS16509.roa
Signing time: Sat 04 Jul 2026 07:03:24 +0000
ROA not before: Sat 04 Jul 2026 06:58:24 +0000
ROA not after: Sat 03 Jul 2027 07:03:24 +0000
asID: 16509
IP address blocks: 141.11.12.0/22 maxlen: 24
141.11.112.0/24 maxlen: 24
141.11.115.0/24 maxlen: 24
194.60.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 21:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:1f:8f:41:30:aa:5e:36:49:4e:92:de:ac:ae:86:94:42:0e:a1:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jul 4 06:58:24 2026 GMT
Not After : Jul 3 07:03:24 2027 GMT
Subject: CN=91AC763E54D56FC70147EBB0978264953AFF5B0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f7:02:9a:76:b8:e5:26:78:50:29:1c:c6:88:
49:5b:99:09:58:4f:42:c2:5d:cd:57:fa:92:cf:e6:
9f:23:18:2f:4f:d5:be:93:aa:46:88:8c:3f:8a:73:
0f:50:17:4d:58:da:4a:89:45:65:2d:57:56:51:86:
fc:0f:5f:ce:08:d5:34:2b:46:c0:15:9e:fc:ac:1f:
98:f4:e6:a2:5d:4d:31:32:cf:5d:1e:2f:71:33:cd:
07:a4:6e:27:26:10:c0:27:50:a8:96:8c:b7:94:3c:
fb:ae:b9:5d:b4:1c:0e:08:a6:9e:43:21:fa:0e:5b:
e8:00:9a:96:04:ad:5c:82:d9:9e:9b:2f:7e:f2:21:
e2:08:f4:aa:58:25:28:93:fd:81:ce:97:01:08:7a:
87:3c:96:48:3f:58:d3:d4:0d:15:7c:0f:8e:69:9f:
0e:9b:dd:d8:b1:0d:18:da:01:69:ee:42:a3:e7:a4:
9b:20:e3:e2:ab:14:c6:48:66:87:57:bb:4a:bf:63:
ad:57:d4:1b:ea:ee:b6:de:3d:c4:a6:09:84:8b:33:
e7:cf:e1:d1:26:7b:df:7b:03:d3:3a:03:72:a6:95:
ac:8f:68:97:65:8b:a0:58:2c:70:00:5d:5d:bf:3d:
bb:69:5e:de:18:2e:23:13:57:6a:cd:e5:21:1b:6d:
d5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:AC:76:3E:54:D5:6F:C7:01:47:EB:B0:97:82:64:95:3A:FF:5B:0B
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS16509.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.12.0/22
141.11.112.0/24
141.11.115.0/24
194.60.94.0/24
Signature Algorithm: sha256WithRSAEncryption
61:7e:fc:b4:80:31:1b:ae:23:cc:8a:53:91:26:1e:40:c5:be:
53:bb:a0:22:85:56:65:27:d3:43:24:96:aa:f8:85:32:29:87:
44:8d:06:7c:66:55:60:5c:94:d3:8d:ed:98:48:51:11:1c:ef:
b5:d2:6b:2d:5c:bb:c7:d3:50:73:a7:66:d9:bd:74:c6:a2:42:
28:f4:33:b3:2e:86:db:f8:2f:98:3e:7b:51:6d:da:3f:ff:43:
54:4c:13:2c:7b:32:55:63:13:35:af:fe:91:c6:27:6a:6d:06:
00:a7:9f:8f:a2:e9:c5:63:a2:2e:08:db:31:a6:82:18:9a:7c:
0d:d6:e0:94:8a:c6:cb:91:c5:0a:93:d8:72:5a:ad:a1:40:7b:
18:85:21:15:12:f7:82:6a:d2:d1:c8:38:74:88:ee:6e:40:d4:
96:ba:17:58:c2:1e:5b:4a:13:79:e5:05:6a:d0:cf:c5:0a:e5:
a2:da:98:ed:b3:06:8a:f8:d9:a7:e3:8f:a4:94:08:9a:59:1d:
bf:e6:ff:4c:41:56:f0:46:cd:a3:b1:79:05:a7:71:5e:9c:bd:
8f:91:f2:31:08:7e:2d:48:53:ab:78:6e:db:ba:6e:fe:21:d3:
28:ec:55:94:87:23:d3:e7:41:fb:da:ec:4f:d2:9b:5d:54:58:
1c:60:56:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:06:31 2026 by rpki-client