Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS16509.roa
File: AS16509.roa (raw, json)
Hash identifier: 0/otV+83uR5V5w3O0r70VD3NpuqMLsYdCNV0aTxI6bc=
Subject key identifier: 6B:CC:06:E2:11:2B:2C:C4:17:F9:B8:F8:6B:4C:55:31:22:74:9E:B0
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 79D002922B2B00BFC19A9B9F4723A20EE1797682
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS16509.roa
Signing time: Wed 22 Jul 2026 05:11:42 +0000
ROA not before: Wed 22 Jul 2026 05:06:42 +0000
ROA not after: Wed 21 Jul 2027 05:11:42 +0000
asID: 16509
IP address blocks: 78.41.48.0/24 maxlen: 24
82.139.239.0/24 maxlen: 24
212.17.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:d0:02:92:2b:2b:00:bf:c1:9a:9b:9f:47:23:a2:0e:e1:79:76:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Jul 22 05:06:42 2026 GMT
Not After : Jul 21 05:11:42 2027 GMT
Subject: CN=6BCC06E2112B2CC417F9B8F86B4C553122749EB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:95:3d:57:6f:91:cc:b3:b9:5a:26:81:50:52:
9b:3b:82:88:3d:c6:db:e9:b6:8c:9d:be:93:a9:79:
e6:b1:97:7f:f5:8e:a0:4d:30:4b:07:79:1d:5e:08:
a0:55:64:55:ff:1e:4b:45:d3:48:a8:0d:86:ba:89:
44:78:66:9a:81:9d:65:23:ac:62:9d:f7:22:63:22:
73:c9:69:a0:ed:e9:ea:7e:f5:8a:1a:7f:c4:af:2e:
c4:28:dd:63:b8:35:e3:a8:be:4e:b1:40:16:56:3a:
9c:96:69:05:31:ed:b1:51:cf:11:89:a5:9a:a2:aa:
8b:b9:69:e7:76:50:6d:d9:a7:34:a5:43:8c:63:c2:
e2:8f:f7:39:b4:db:cf:27:7b:d8:5a:9c:d7:3c:3c:
f6:03:c2:f9:1a:5d:dd:a8:95:54:5e:ac:61:5b:d5:
75:6e:e4:a9:70:66:fb:bb:7f:7e:5c:13:ff:8a:d5:
dd:7c:c0:73:6f:11:3f:e7:28:db:dc:1c:15:ef:e4:
5b:4d:f5:4d:5b:ec:6c:7c:d8:8e:ec:cc:00:86:81:
3b:66:62:c6:a5:25:a2:c7:c6:36:85:2a:de:4a:59:
79:35:e2:1b:0f:6a:a4:a0:e8:46:2a:91:32:9c:6c:
af:65:84:33:42:15:c7:d0:dd:8e:fa:2a:80:ef:ea:
34:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:CC:06:E2:11:2B:2C:C4:17:F9:B8:F8:6B:4C:55:31:22:74:9E:B0
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS16509.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.41.48.0/24
82.139.239.0/24
212.17.228.0/22
Signature Algorithm: sha256WithRSAEncryption
45:54:21:54:fb:11:80:d0:96:9c:9d:25:be:7d:8e:c4:c7:49:
89:bd:4c:5a:42:fa:ec:60:4b:21:35:f2:d7:91:fe:11:03:05:
a9:3c:5f:3a:a4:ee:5c:26:3b:11:a5:cb:2f:2a:be:76:bd:1f:
4b:8a:c6:2b:97:80:d4:23:1d:9a:4a:2b:a1:29:df:3b:18:31:
a7:9f:b8:7d:f9:ce:c6:64:05:77:7e:96:ba:ba:39:91:f3:e8:
c3:92:d3:9c:c8:9b:16:9c:11:be:60:f1:99:00:48:f1:0e:ae:
d1:a6:79:0e:1b:cd:6a:dd:e0:25:6b:1d:ec:9a:f0:c4:8f:2c:
de:fa:c8:7e:cc:2f:91:37:66:48:d3:7c:70:1a:31:c1:fb:f2:
c3:cf:5d:c7:f0:6b:8f:e5:d3:3d:65:83:3a:6a:6d:87:8e:54:
cc:70:cb:6d:38:5a:28:5b:f0:6f:bb:9b:c3:2b:44:52:94:d9:
a8:c0:c0:60:3b:38:66:30:a0:ad:63:7e:f9:a7:ce:a3:c6:fd:
66:de:6f:cf:47:9b:c3:b6:4b:95:76:91:82:75:9f:ee:df:a0:
45:89:4b:c1:6c:6b:f1:2c:f5:26:af:92:17:ee:0b:91:5b:fe:
70:b4:17:89:32:07:4c:55:f5:ad:71:52:de:ec:3b:ad:06:1d:
b1:03:d3:16
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:34:15 2026 by rpki-client