Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS216138.roa
File: AS216138.roa (raw, json)
Hash identifier: L1WSjgYxMvfNV/nPxA/BBZ/kwOLURSSDkCsohIf+T/s=
Subject key identifier: D5:5E:FE:9C:86:85:00:A5:07:7C:5B:E7:9F:A8:3D:B6:24:C7:6A:17
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 77301B668DB31C7F1435F4AA2501FE7D2C3641E8
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS216138.roa
Signing time: Tue 12 Aug 2025 13:59:10 +0000
ROA not before: Tue 12 Aug 2025 13:54:10 +0000
ROA not after: Tue 11 Aug 2026 13:59:10 +0000
asID: 216138
IP address blocks: 96.62.85.0/24 maxlen: 24
148.135.234.0/23 maxlen: 24
148.135.240.0/23 maxlen: 24
150.241.162.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:30:1b:66:8d:b3:1c:7f:14:35:f4:aa:25:01:fe:7d:2c:36:41:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 12 13:54:10 2025 GMT
Not After : Aug 11 13:59:10 2026 GMT
Subject: CN=D55EFE9C868500A5077C5BE79FA83DB624C76A17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1c:e8:2d:01:4f:99:74:11:07:e6:61:01:24:
45:16:9d:93:84:49:ae:a3:95:21:72:c2:55:c5:97:
85:2e:6f:fe:46:9e:55:72:bb:cf:d8:63:31:98:f9:
18:fd:17:65:08:22:04:df:f4:b1:7a:6e:ff:d5:b0:
b6:ac:18:1c:13:11:a3:2e:68:26:eb:69:b1:56:7c:
7a:bd:d0:46:ac:9d:bf:6d:5b:4d:77:87:27:ed:ff:
42:33:08:77:20:58:2c:a9:5e:1e:56:e8:8c:d8:82:
c1:30:d2:31:e9:de:da:47:3e:f3:81:1e:d2:7b:fb:
5a:53:17:75:fb:a0:ce:c2:64:ba:bd:79:0a:44:02:
19:a2:c5:14:08:7c:75:d0:a6:2c:3b:5c:94:7b:a7:
81:79:ea:aa:ee:15:71:a8:8f:9b:9d:04:05:57:77:
6c:6f:d8:44:44:83:86:3a:e8:4d:dd:ab:c3:60:33:
1d:ff:1d:23:02:c7:8d:bc:6d:3c:6a:95:fe:ec:eb:
e7:f3:0e:81:8d:5e:55:cc:1c:24:64:30:84:90:0c:
3b:d3:42:54:67:a1:5d:ef:b5:f2:ed:07:63:52:7a:
6d:9c:27:c0:e9:57:dc:19:1b:66:f2:60:5c:1d:95:
d1:10:b2:41:e4:79:23:d6:6f:43:37:c1:8a:be:bc:
ad:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:5E:FE:9C:86:85:00:A5:07:7C:5B:E7:9F:A8:3D:B6:24:C7:6A:17
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS216138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.85.0/24
148.135.234.0/23
148.135.240.0/23
150.241.162.0/23
Signature Algorithm: sha256WithRSAEncryption
76:78:31:cc:08:c5:fc:9c:6c:2c:da:86:ad:7c:c7:36:16:1f:
12:e2:08:2c:6e:b1:31:aa:c5:be:5f:0d:8b:fc:59:3c:c0:a2:
d9:2e:58:0b:77:b2:a4:ac:80:d1:6e:df:cf:04:37:5d:8b:01:
db:a6:58:06:49:cd:b4:3e:5f:0d:84:fa:82:2f:a4:bf:e1:8a:
cd:02:1b:34:37:b8:d6:b5:26:dd:a1:c5:7a:47:c6:da:ec:cc:
55:a3:1c:03:30:05:b2:3d:a8:ab:5d:be:86:ec:e8:a2:1c:8c:
9d:ff:43:48:2c:b7:f8:17:55:56:6f:e7:a0:53:cf:87:51:64:
6b:20:93:af:88:7d:75:70:8d:ee:27:92:90:e2:a5:1a:4e:5f:
5f:22:ee:81:3a:ce:fa:75:f3:c7:2c:00:bd:be:dd:f3:ac:d7:
59:87:58:eb:4c:d0:13:d5:61:0f:b5:4e:85:95:c1:d7:54:7e:
1b:2c:a6:52:73:c2:4d:90:c3:15:22:d7:ab:d8:8e:80:b3:41:
e8:78:c3:74:3b:ab:9d:1b:27:3d:f9:6c:19:84:28:e0:d5:1b:
0b:ae:ec:52:34:68:6a:9d:81:4f:24:b1:d8:fe:b0:94:57:8a:
05:92:c9:96:7d:3b:1b:cb:e8:cb:2a:00:77:d8:7e:b4:16:fa:
91:14:df:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:53:42 2025 by rpki-client