Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS216438.roa
File: AS216438.roa (raw, json)
Hash identifier: tpPiasOQ/WNrXhIwIIA9GFXgCa1gEJONPUvBYJqYfH4=
Subject key identifier: 60:CA:96:D0:6A:3A:2C:56:F0:C0:E8:A8:94:A0:62:CF:30:DE:27:1E
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 2AEA3828E23A750EAB370854864EA6DC083989FF
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS216438.roa
Signing time: Wed 04 Nov 2026 20:32:47 +0000
ROA not before: Wed 04 Nov 2026 20:27:47 +0000
ROA not after: Wed 03 Nov 2027 20:32:47 +0000
asID: 216438
IP address blocks: 2a0e:8f02:f077::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 08:34:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:ea:38:28:e2:3a:75:0e:ab:37:08:54:86:4e:a6:dc:08:39:89:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 20:27:47 2026 GMT
Not After : Nov 3 20:32:47 2027 GMT
Subject: CN=60CA96D06A3A2C56F0C0E8A894A062CF30DE271E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9c:a6:85:3c:76:bf:64:d7:30:57:fb:ef:a0:
b2:aa:11:b8:68:61:d3:2b:a1:76:60:48:b3:95:1b:
cf:7c:3f:88:d9:28:ac:ec:e9:39:39:22:14:1e:fb:
ef:09:4d:75:02:ba:b8:45:ca:61:13:08:51:62:57:
dd:63:3a:8d:08:ee:b5:a0:b5:2a:d4:aa:db:2c:20:
57:3b:2f:4f:45:86:b8:f0:db:c9:d6:1c:2a:1f:57:
54:a6:c2:a3:f9:38:fd:ad:ae:37:79:49:b9:ea:e0:
5e:3f:05:dd:62:ad:66:60:8f:47:63:0d:a4:bf:59:
d8:59:3d:f4:5a:c9:2e:7a:cc:b3:12:db:37:a8:0f:
0e:eb:77:05:02:7a:b2:6d:ab:2d:c4:a7:c3:e7:34:
42:06:ec:5a:0e:81:b3:2d:76:6b:af:17:ed:07:b3:
a1:b4:a1:de:4a:24:8c:c0:40:06:94:0e:c4:82:8d:
5f:19:f5:d0:c9:f6:bf:fe:3c:9b:15:c6:af:a3:cf:
95:46:eb:c1:8e:b0:3a:0a:18:2c:c9:24:49:2d:e7:
1a:05:84:0d:80:6b:74:d8:7b:82:79:d3:f6:1a:ca:
13:02:ce:79:0c:a5:76:12:b1:3e:48:74:d9:60:73:
c0:83:be:72:53:4b:92:d1:9b:93:78:72:fa:02:b6:
07:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:CA:96:D0:6A:3A:2C:56:F0:C0:E8:A8:94:A0:62:CF:30:DE:27:1E
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS216438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f077::/48
Signature Algorithm: sha256WithRSAEncryption
3b:fd:81:80:b4:a3:b9:5c:12:b1:c2:91:b8:2d:45:7d:d1:62:
23:f7:a1:b6:17:58:70:9b:97:df:e6:a6:07:50:2e:ad:34:de:
8e:12:ee:aa:b1:37:1a:63:64:f3:a6:c0:e5:9f:6b:49:d5:d1:
14:d1:b3:db:d1:bc:2a:bd:b7:49:e2:67:93:e3:f0:be:15:46:
3a:0f:d7:7b:d0:b1:76:a3:f4:fc:a1:b4:38:ce:9b:eb:07:a9:
aa:c0:72:d6:a5:d0:87:d5:89:bc:76:1d:c2:87:2c:77:30:e1:
2c:e0:c6:70:b3:a1:aa:6a:2d:5a:ea:bf:c2:09:bb:b9:3a:d0:
bc:7a:a8:6e:e5:6f:2f:5f:01:cd:1d:8e:a0:dc:20:14:0e:59:
ac:ba:0f:9b:a3:87:a1:18:91:eb:12:90:8e:a5:51:3d:e7:a0:
67:39:a3:39:24:da:b5:68:90:04:01:84:c8:f3:9a:92:e9:0e:
ae:b8:72:0d:9a:f7:db:dc:4e:d4:08:d8:a6:1d:b6:cd:8e:90:
69:be:0a:bd:2a:0e:21:66:3d:5b:96:f7:b8:e0:13:60:4a:6e:
b5:0c:eb:fc:dd:13:9e:74:99:f3:be:60:6b:76:9b:bb:4d:20:
91:01:a4:d9:de:b0:d4:5e:00:ee:e6:66:2b:03:e3:df:97:f5:
bf:10:07:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:39:59 2026 by rpki-client