Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS216104.roa
File: AS216104.roa (raw, json)
Hash identifier: w+fZ4NCtkAyIYigkbcrgTFgz8aW+PFxjUAJ8KV81EKk=
Subject key identifier: AA:C1:5E:90:D7:B8:79:22:B6:C5:D5:02:96:1F:1E:42:76:38:63:7D
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 759B07846E4CDC04058FE6A6759AD8C36D503967
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS216104.roa
Signing time: Fri 28 Aug 2026 13:49:30 +0000
ROA not before: Fri 28 Aug 2026 13:44:30 +0000
ROA not after: Fri 27 Aug 2027 13:49:30 +0000
asID: 216104
IP address blocks: 141.11.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 16:58:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:9b:07:84:6e:4c:dc:04:05:8f:e6:a6:75:9a:d8:c3:6d:50:39:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Aug 28 13:44:30 2026 GMT
Not After : Aug 27 13:49:30 2027 GMT
Subject: CN=AAC15E90D7B87922B6C5D502961F1E427638637D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:45:52:ef:1a:12:7d:83:4a:eb:62:74:2b:31:
2f:72:4d:2d:5b:73:6b:cf:35:b4:f8:90:9a:76:57:
81:f3:6f:59:f7:ed:43:6e:67:9e:e1:34:dc:97:5b:
71:57:50:ca:6d:9f:a1:73:22:fa:f1:01:fb:fd:0c:
15:06:8f:86:0f:04:89:ad:37:16:8d:af:98:9b:ce:
6a:63:c7:f0:c4:26:5c:3f:3e:ed:77:90:84:40:66:
92:4e:aa:41:75:1f:68:37:c0:14:a4:7b:dc:f7:3c:
dc:8e:9e:dd:d2:02:5a:4f:c8:93:e8:ad:ca:e2:aa:
86:62:9b:e7:16:fe:e1:a0:05:70:b0:55:54:cf:e7:
d3:ec:28:4d:00:82:e9:18:66:66:a2:e3:30:0c:4d:
40:3b:a6:fa:11:c8:dd:96:92:8f:c2:ed:4d:d7:43:
a0:b2:88:76:95:e2:5b:16:64:bb:a9:d7:06:67:0d:
83:f6:b5:7a:d4:84:6d:8e:8e:6f:97:a3:b3:09:06:
c4:3a:64:1e:83:18:da:54:2c:14:6f:27:23:c1:ac:
ab:87:1b:65:44:65:6d:ac:76:13:ca:55:b7:da:dd:
9f:71:39:66:a7:d0:0d:ba:63:87:bf:cf:c8:a6:3d:
4c:c0:10:a2:82:e2:28:de:91:2a:cc:f6:b9:f7:97:
7b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C1:5E:90:D7:B8:79:22:B6:C5:D5:02:96:1F:1E:42:76:38:63:7D
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS216104.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.255.0/24
Signature Algorithm: sha256WithRSAEncryption
87:14:8f:8b:c3:a4:75:91:a0:19:10:28:ae:c4:a8:6d:20:b9:
48:11:6f:28:4e:c2:3b:04:54:38:25:4a:7d:f6:e8:e8:02:6c:
b7:05:dc:91:30:5c:80:33:6f:f5:9a:d6:85:d9:f1:08:71:3a:
55:97:a5:9f:06:18:b7:41:b8:3c:f1:cd:14:b7:33:57:55:a1:
c9:db:c3:22:e0:b8:28:a6:b1:76:ec:b1:c9:c4:bb:91:5c:25:
ed:2c:aa:56:b4:d2:09:d2:aa:8b:7e:04:3d:20:bc:77:37:24:
9f:bf:f1:29:b6:e7:ee:95:d9:67:fa:05:8f:b5:98:a4:c7:c3:
be:0f:21:62:bd:cc:83:74:12:89:5d:00:9e:1a:73:d6:8d:88:
01:b3:73:01:50:06:cc:e5:29:e9:60:8f:ed:2b:c0:fb:f5:c1:
f3:8d:b5:75:69:cf:94:53:8c:a7:4e:59:a6:ec:d7:ae:eb:f8:
38:4c:0b:83:53:b5:aa:48:1a:d3:59:3f:11:14:84:b6:1d:98:
8e:e3:2a:04:1d:31:78:91:3c:39:dc:bb:6b:a4:40:ac:78:d7:
41:01:b0:43:a6:47:56:40:2b:e2:29:37:4a:e7:e0:3d:ca:3b:
30:13:f8:5f:c9:52:00:83:d5:e7:00:99:96:8e:20:81:90:74:
2d:4e:d3:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:30:22 2026 by rpki-client