Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS16509.roa
File: AS16509.roa (raw, json)
Hash identifier: x8UUrw8sVQYllNKCBxSmIcNTcT5YXsh5kMH4RD9A77g=
Subject key identifier: 3D:30:6C:E5:35:6B:9D:F7:2F:35:2E:47:BF:D0:D2:D9:E5:6E:9C:2F
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 01E6F2B137668BCAE532BDCE8FB382A5CB76745E
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS16509.roa
Signing time: Sat 03 Oct 2026 16:03:09 +0000
ROA not before: Sat 03 Oct 2026 15:58:09 +0000
ROA not after: Sat 02 Oct 2027 16:03:09 +0000
asID: 16509
IP address blocks: 141.11.12.0/22 maxlen: 24
141.11.93.0/24 maxlen: 24
141.11.112.0/24 maxlen: 24
141.11.115.0/24 maxlen: 24
141.11.136.0/24 maxlen: 24
194.60.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:e6:f2:b1:37:66:8b:ca:e5:32:bd:ce:8f:b3:82:a5:cb:76:74:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Oct 3 15:58:09 2026 GMT
Not After : Oct 2 16:03:09 2027 GMT
Subject: CN=3D306CE5356B9DF72F352E47BFD0D2D9E56E9C2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:39:c4:68:2a:08:bc:e0:45:f5:49:e2:e0:5c:
89:fb:94:25:32:4e:10:83:48:0f:4a:03:2b:ed:74:
ab:93:6b:bc:93:cb:a9:92:97:ef:32:d4:88:50:1c:
a9:f3:ec:5f:8f:57:67:e5:29:7c:70:3f:ad:ba:ca:
04:24:b1:ae:00:5a:f3:d5:51:02:65:da:30:c3:bd:
00:e4:ce:39:1c:19:07:72:58:b2:d8:9a:a6:6b:7d:
3f:6b:1c:6b:1c:02:36:03:a9:a7:d0:be:2e:4d:d5:
6a:28:ab:6c:eb:91:be:0a:54:d6:c1:f2:61:08:c7:
21:62:1f:f5:47:3b:bd:60:74:88:1c:23:c8:45:05:
f4:d3:bb:1a:b0:7b:09:74:4a:5a:ec:a5:a8:6d:de:
ce:ae:37:32:f6:c5:b0:e2:f2:ec:4b:0e:38:82:b1:
0e:c3:84:bf:1d:1c:05:55:28:50:d9:fe:ae:eb:81:
35:79:44:79:32:c0:94:f9:ec:ac:b8:03:e5:69:7a:
d1:35:f9:a8:4e:20:c4:bc:11:cc:4c:fd:58:36:44:
09:99:bc:59:a5:13:4c:5e:8e:ef:94:12:71:a2:5c:
9e:82:57:e4:fc:12:f1:34:c2:85:23:50:9a:08:d5:
fc:a3:1c:25:0a:b2:7f:65:4f:6b:0e:70:37:ea:82:
3d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:30:6C:E5:35:6B:9D:F7:2F:35:2E:47:BF:D0:D2:D9:E5:6E:9C:2F
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS16509.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.12.0/22
141.11.93.0/24
141.11.112.0/24
141.11.115.0/24
141.11.136.0/24
194.60.94.0/24
Signature Algorithm: sha256WithRSAEncryption
64:89:42:90:10:c4:4e:11:27:85:86:91:eb:da:a6:37:3e:d1:
98:b1:91:f1:18:8d:2f:e7:92:2f:ce:f1:ee:d6:4b:06:a2:61:
0b:94:52:50:5e:b7:d2:9c:98:59:28:30:0b:9d:3a:f4:fb:b4:
03:d0:63:a0:67:25:66:a4:7d:c5:c0:e0:62:31:7c:86:89:6a:
a4:22:03:55:c3:6a:ca:e0:ff:eb:0f:b5:2f:16:4f:af:96:42:
b0:48:6c:14:8c:9c:1c:47:72:93:f4:ae:09:44:8e:a2:77:50:
52:6f:21:37:d3:42:8c:f6:74:9f:af:a3:3c:86:11:97:b1:af:
5c:2e:5d:5b:53:97:fc:09:2d:67:15:68:42:54:97:c2:59:cc:
2d:ce:9d:75:5a:0f:69:3b:19:a6:8c:e2:b8:e1:99:12:54:0b:
d0:81:3f:18:6d:df:f3:81:d5:8b:c6:d2:73:7f:23:67:ad:9f:
c1:c7:16:08:b7:95:a4:96:4f:5a:fa:b0:d5:4b:65:15:0e:5c:
ec:42:8c:87:8a:47:3c:c1:5e:22:ac:0e:fd:d3:40:0b:b4:db:
6b:db:44:09:4e:af:64:f7:5c:90:85:78:dc:f9:1d:05:91:65:
fb:2c:2e:ef:a2:10:21:89:61:65:da:f4:5f:65:20:9e:4c:d3:
9f:7b:45:77
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgIUAebysTdmi8rlMr3Oj7OCpct2dF4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yNjEwMDMxNTU4MDlaFw0yNzEwMDIxNjAzMDlaMDMxMTAvBgNV
BAMTKDNEMzA2Q0U1MzU2QjlERjcyRjM1MkU0N0JGRDBEMkQ5RTU2RTlDMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqOcRoKgi84EX1SeLgXIn7lCUy
ThCDSA9KAyvtdKuTa7yTy6mSl+8y1IhQHKnz7F+PV2flKXxwP626ygQksa4AWvPV
UQJl2jDDvQDkzjkcGQdyWLLYmqZrfT9rHGscAjYDqafQvi5N1Wooq2zrkb4KVNbB
8mEIxyFiH/VHO71gdIgcI8hFBfTTuxqwewl0Slrspaht3s6uNzL2xbDi8uxLDjiC
sQ7DhL8dHAVVKFDZ/q7rgTV5RHkywJT57Ky4A+VpetE1+ahOIMS8EcxM/Vg2RAmZ
vFmlE0xeju+UEnGiXJ6CV+T8EvE0woUjUJoI1fyjHCUKsn9lT2sOcDfqgj1pAgMB
AAGjggInMIICIzAdBgNVHQ4EFgQUPTBs5TVrnfcvNS5Hv9DS2eVunC8wHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMTY1MDkucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwPQYIKwYBBQUHAQcBAf8ELjAsMCoEAgABMCQDBAKNCwwD
BACNC10DBACNC3ADBACNC3MDBACNC4gDBADCPF4wDQYJKoZIhvcNAQELBQADggEB
AGSJQpAQxE4RJ4WGkevapjc+0ZixkfEYjS/nki/O8e7WSwaiYQuUUlBet9KcmFko
MAudOvT7tAPQY6BnJWakfcXA4GIxfIaJaqQiA1XDasrg/+sPtS8WT6+WQrBIbBSM
nBxHcpP0rglEjqJ3UFJvITfTQoz2dJ+vozyGEZexr1wuXVtTl/wJLWcVaEJUl8JZ
zC3OnXVaD2k7GaaM4rjhmRJUC9CBPxht3/OB1YvG0nN/I2etn8HHFgi3laSWT1r6
sNVLZRUOXOxCjIeKRzzBXiKsDv3TQAu022vbRAlOr2T3XJCFeNz5HQWRZfssLu+i
ECGJYWXa9F9lIJ5M0597RXc=
-----END CERTIFICATE-----
Generated at Tue Oct 20 23:46:32 2026 by rpki-client