Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS16509.roa
File: AS16509.roa (raw, json)
Hash identifier: c/nLiCsDxMDJm9O8StNVRUrNHwSRoce/KTP6XNcV4KU=
Subject key identifier: DB:88:26:D0:B3:04:BB:51:50:F8:4A:89:F6:E2:42:47:6E:CE:C8:7E
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 0F8E50B8144A8458E4592A7D05F3268ECA36A6D6
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS16509.roa
Signing time: Sat 08 Aug 2026 11:32:52 +0000
ROA not before: Sat 08 Aug 2026 11:27:52 +0000
ROA not after: Sat 07 Aug 2027 11:32:52 +0000
asID: 16509
IP address blocks: 91.124.34.0/24 maxlen: 24
91.124.38.0/24 maxlen: 24
91.124.42.0/24 maxlen: 24
91.124.122.0/24 maxlen: 24
91.124.131.0/24 maxlen: 24
91.124.133.0/24 maxlen: 24
91.124.217.0/24 maxlen: 24
92.112.51.0/24 maxlen: 24
92.112.58.0/24 maxlen: 24
92.112.61.0/24 maxlen: 24
92.112.63.0/24 maxlen: 24
92.112.74.0/24 maxlen: 24
92.112.75.0/24 maxlen: 24
92.113.49.0/24 maxlen: 24
92.113.50.0/24 maxlen: 24
92.113.51.0/24 maxlen: 24
92.113.52.0/24 maxlen: 24
92.113.53.0/24 maxlen: 24
92.113.100.0/24 maxlen: 24
95.135.160.0/24 maxlen: 24
95.135.191.0/24 maxlen: 24
95.135.202.0/24 maxlen: 24
178.92.101.0/24 maxlen: 24
178.94.192.0/24 maxlen: 24
178.95.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:8e:50:b8:14:4a:84:58:e4:59:2a:7d:05:f3:26:8e:ca:36:a6:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 8 11:27:52 2026 GMT
Not After : Aug 7 11:32:52 2027 GMT
Subject: CN=DB8826D0B304BB5150F84A89F6E242476ECEC87E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:22:a3:ab:5b:7f:1f:3b:72:15:5a:2b:b5:93:
03:a5:88:7b:71:d8:e1:5b:b6:c2:c5:46:0e:c4:1c:
30:03:47:bc:f6:ae:91:48:a8:43:91:af:8e:1a:7e:
57:1d:dc:82:f8:ad:5a:f0:17:0c:98:91:aa:d4:a7:
56:13:5a:96:22:d2:bd:ea:76:db:f7:78:e2:e9:59:
15:a1:82:54:00:de:8c:1c:e2:49:b4:ff:ad:42:a9:
7a:1a:7c:5b:ba:74:d3:c8:ff:97:df:7a:f7:11:18:
7a:0a:6e:6e:3f:3a:ce:b1:4b:07:c9:f4:3c:2f:99:
b6:27:4d:5b:79:ba:f1:10:a9:21:0a:f8:59:e3:eb:
4e:9b:9a:aa:5d:79:58:6f:9f:ff:33:ea:6b:28:41:
f6:56:77:59:e0:6d:91:0a:bd:1d:7f:bd:63:57:c7:
4d:04:26:ac:1b:d5:e3:8d:d7:c2:0e:9e:10:09:7d:
c1:49:9a:27:01:0f:e5:89:2e:a9:94:7e:a4:30:14:
16:2d:29:3e:a3:82:d7:fe:8e:97:d3:02:5e:58:3c:
41:70:83:1c:94:8b:ff:53:a6:8e:83:bd:db:4b:be:
6b:cb:6b:92:e7:47:8b:13:b5:9e:c9:98:e3:54:56:
99:32:a1:2c:46:1c:da:d5:1f:de:e5:36:9c:7d:64:
fa:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:88:26:D0:B3:04:BB:51:50:F8:4A:89:F6:E2:42:47:6E:CE:C8:7E
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS16509.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.34.0/24
91.124.38.0/24
91.124.42.0/24
91.124.122.0/24
91.124.131.0/24
91.124.133.0/24
91.124.217.0/24
92.112.51.0/24
92.112.58.0/24
92.112.61.0/24
92.112.63.0/24
92.112.74.0/23
92.113.49.0-92.113.53.255
92.113.100.0/24
95.135.160.0/24
95.135.191.0/24
95.135.202.0/24
178.92.101.0/24
178.94.192.0/24
178.95.43.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:f9:1b:60:87:fe:c1:1c:08:2a:9e:f5:66:bb:d6:18:09:54:
02:9c:26:b2:fa:3d:d3:9a:80:05:ff:3c:fe:01:b9:ed:5e:5f:
43:49:f7:93:d9:d6:4c:42:c0:74:d8:e1:b6:28:c5:29:56:03:
c5:e0:74:c7:73:bb:53:d8:93:8a:07:5e:fd:02:85:6c:27:ba:
37:c3:b0:e3:06:bf:29:4b:c3:6c:05:32:2a:6f:b1:e6:a3:dc:
15:08:ec:76:6c:9a:ad:0b:f2:6a:f0:5f:fd:bc:df:71:4a:7b:
66:be:b7:0f:6b:7d:20:1d:83:a3:4b:1a:f3:f8:28:eb:6d:ce:
b8:f9:a1:5d:46:e0:10:45:da:ae:30:dd:44:d2:58:4d:18:ef:
d7:95:50:c0:5a:2a:e4:bf:2c:12:9e:bf:3a:58:2a:c2:2a:8b:
3e:cf:b8:92:12:cf:f9:0a:99:fd:fa:7a:22:24:ce:9d:5e:ef:
a6:26:a8:31:45:76:66:28:96:0a:c9:db:f6:75:e3:b4:74:92:
c6:1b:11:51:43:b4:e2:c6:ba:d0:8c:10:76:2b:61:2c:f9:00:
1e:1a:8d:d4:7c:35:b8:0f:a1:04:2f:fa:ec:0b:ce:1c:eb:fa:
a8:67:85:7b:bd:26:63:9e:a7:02:5e:9b:9d:46:48:48:db:56:
33:0d:8c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 12:16:19 2026 by rpki-client