Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS16509.roa
File: AS16509.roa (raw, json)
Hash identifier: uBZEEra+hd8M+txbjOu/i0KFGiD1sIfX4eSRW+WjtKg=
Subject key identifier: 89:69:F3:1F:8B:BA:43:0D:CC:FF:66:6D:AD:5B:D2:83:06:90:29:AB
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 5CD12E32CCA48C652CE94AA05AC8E4B82FECFDE9
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS16509.roa
Signing time: Wed 23 Sep 2026 08:08:10 +0000
ROA not before: Wed 23 Sep 2026 08:03:10 +0000
ROA not after: Wed 22 Sep 2027 08:08:10 +0000
asID: 16509
IP address blocks: 181.214.94.0/24 maxlen: 24
181.214.110.0/24 maxlen: 24
181.215.206.0/23 maxlen: 24
185.137.13.0/24 maxlen: 24
191.96.204.0/24 maxlen: 24
191.101.111.0/24 maxlen: 24
2a00:d1a0:10::/48 maxlen: 48
2a00:d1a0:11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:d1:2e:32:cc:a4:8c:65:2c:e9:4a:a0:5a:c8:e4:b8:2f:ec:fd:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 23 08:03:10 2026 GMT
Not After : Sep 22 08:08:10 2027 GMT
Subject: CN=8969F31F8BBA430DCCFF666DAD5BD283069029AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:fc:9b:22:70:f8:10:c2:cf:c8:ba:19:c5:fb:
ad:23:1f:29:c8:f3:e3:ef:d6:f5:67:bb:49:e1:a3:
eb:26:81:4e:da:ad:01:ab:55:d6:ff:3f:9b:be:8d:
e7:71:62:36:ad:de:65:48:81:57:58:99:1f:44:74:
10:05:b7:01:92:e5:8f:96:53:c5:42:c2:70:b1:1c:
79:c7:66:66:e9:be:1e:71:0f:46:e4:94:ad:e5:be:
46:75:e1:64:ec:bf:32:4a:83:dd:91:cc:d4:29:35:
d6:eb:e8:d0:4c:89:dd:0c:b3:f5:a1:54:58:dc:af:
64:32:74:ca:cc:b1:3c:73:ee:19:db:f8:03:66:ea:
39:9c:aa:ec:46:ef:ad:1b:31:3b:98:4d:0f:69:49:
b3:7c:18:57:79:bb:ff:05:3c:de:a5:af:d3:70:b6:
4e:71:45:2e:0a:fd:a8:aa:10:40:a9:4b:27:72:83:
63:e6:14:3e:c9:14:c3:7d:a4:d5:a8:a6:71:07:4e:
43:8d:62:38:8d:40:e5:6d:09:c1:76:ee:d7:01:87:
05:0c:76:7b:c4:a4:4d:45:e8:58:45:e8:76:be:1d:
52:b3:2d:10:87:cd:ab:99:1c:a4:ef:62:df:5d:5b:
12:6a:c5:1e:45:09:d6:9b:62:47:89:7a:fd:2f:bf:
d9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:69:F3:1F:8B:BA:43:0D:CC:FF:66:6D:AD:5B:D2:83:06:90:29:AB
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS16509.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.94.0/24
181.214.110.0/24
181.215.206.0/23
185.137.13.0/24
191.96.204.0/24
191.101.111.0/24
IPv6:
2a00:d1a0:10::/47
Signature Algorithm: sha256WithRSAEncryption
0b:95:bf:fd:37:b9:ff:7b:fc:8e:64:2f:4f:d5:91:23:43:39:
8d:4c:43:d8:d7:a8:7d:7e:7b:53:ac:da:5c:45:e8:2d:d5:66:
fc:9c:70:aa:20:e4:d4:81:ab:74:58:e6:da:ff:fd:9c:85:b5:
de:f0:e4:92:da:24:b7:a1:fa:dd:11:c4:7d:d3:08:40:ff:c4:
2d:b5:03:f1:2b:8b:54:db:03:30:4b:48:fc:90:27:5f:9c:ec:
9e:35:42:06:17:f2:bf:94:43:bd:ff:72:c9:31:d1:83:51:93:
7f:ce:ca:52:36:56:ec:b9:b5:31:5a:cb:7b:3b:2f:9c:64:d9:
32:b3:1f:72:2a:fe:d7:66:eb:27:11:b0:f7:92:68:43:65:c6:
25:72:a2:57:1d:bd:ee:66:a4:8e:c5:0a:37:7d:2f:1f:d7:c1:
87:41:51:81:17:68:7a:8b:c8:9a:fb:d1:48:74:e4:97:ec:c8:
6b:69:b7:49:c3:a9:0f:14:3e:a9:33:9a:c5:7f:73:08:70:0d:
9c:3f:77:8b:f1:6a:f8:5b:b3:f2:fd:40:59:3f:03:dd:a2:a5:
17:4a:a9:f8:f1:4d:b7:b3:18:34:cd:26:6d:2a:40:2f:ce:91:
f6:11:48:a7:9a:83:dc:6a:b9:1b:22:57:08:cd:f4:f0:01:93:
03:27:61:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:30:17 2026 by rpki-client