Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS16125.roa
File: AS16125.roa (raw, json)
Hash identifier: aSauWiCJ1eRqkrwXEZcGT2vPKPm/mr/kZU8ZjMRvYXM=
Subject key identifier: B1:CF:5D:A4:51:23:D0:62:E1:A5:0B:A5:5B:FF:87:65:D3:BA:40:7B
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 45B0B4B5E3E243D00A8C56061ABA5EF5CA03E6EA
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS16125.roa
Signing time: Fri 08 May 2026 11:47:11 +0000
ROA not before: Fri 08 May 2026 11:42:11 +0000
ROA not after: Fri 07 May 2027 11:47:11 +0000
asID: 16125
IP address blocks: 82.23.2.0/24 maxlen: 24
82.24.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:b0:b4:b5:e3:e2:43:d0:0a:8c:56:06:1a:ba:5e:f5:ca:03:e6:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 8 11:42:11 2026 GMT
Not After : May 7 11:47:11 2027 GMT
Subject: CN=B1CF5DA45123D062E1A50BA55BFF8765D3BA407B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:03:62:45:bf:18:6d:c8:9e:da:ff:a4:40:e4:
64:8e:4c:e2:f6:48:57:f7:15:5b:33:ce:5c:01:26:
bc:68:8c:d2:39:65:1e:df:76:18:92:30:f4:00:d9:
72:ad:d6:1e:d2:53:42:e0:7c:9f:31:18:d8:60:09:
26:cc:0c:45:e9:8d:5d:3f:fd:d0:7a:4b:bd:e0:a3:
bf:eb:4a:65:29:f4:ed:b4:a4:9b:22:fd:61:be:70:
6b:f9:e5:f2:2b:ae:28:28:ba:b2:e8:e2:65:7f:68:
ec:ee:30:50:c3:b6:35:e6:bb:86:53:11:4a:66:2a:
51:c9:cd:80:0a:3d:2c:c0:c1:92:29:cb:54:93:9d:
72:6a:20:89:8e:c7:8e:50:b0:a0:b6:52:d1:07:30:
21:a4:27:53:3a:b2:f3:1f:ed:a2:ce:cf:97:9e:44:
e9:0b:a0:e6:c4:df:ce:3e:f6:60:d9:e4:c9:36:98:
d1:50:ba:a7:7b:11:e6:7d:7b:13:b8:b0:5e:62:89:
4f:84:a4:c3:8c:cf:96:a4:7e:df:3d:78:df:99:e2:
18:22:b3:7a:61:aa:a8:6a:50:32:01:1e:b0:34:99:
f5:2f:75:f9:e6:78:7f:71:35:08:a1:87:d4:ad:cc:
b7:82:0f:82:df:58:39:ea:7c:51:7e:24:ef:23:6a:
e5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:CF:5D:A4:51:23:D0:62:E1:A5:0B:A5:5B:FF:87:65:D3:BA:40:7B
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS16125.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.23.2.0/24
82.24.88.0/24
Signature Algorithm: sha256WithRSAEncryption
05:30:62:b9:c9:bb:98:d4:5d:80:06:ea:52:b0:26:9f:98:8f:
09:83:44:64:ad:69:a1:d9:fc:94:b1:6c:61:51:2a:ba:a9:9b:
8e:fe:5a:97:7c:4d:61:05:0e:3c:ed:1d:11:62:fe:6d:cf:36:
7d:36:06:70:2e:04:77:11:92:c8:18:f8:2c:21:d1:e3:34:ad:
4a:48:f5:b3:82:0b:54:6f:5f:53:9a:70:a7:fd:db:be:e1:a4:
de:96:14:52:73:b1:bd:e6:53:42:61:55:d8:f5:5a:d0:2d:4c:
35:75:b0:38:e4:c6:1b:11:cc:d4:a7:11:d5:70:8d:26:05:c6:
79:66:ef:f7:ae:45:c5:99:e2:68:35:18:f8:77:9b:b3:a5:7f:
f5:80:1b:cf:cf:69:83:20:3b:9b:ab:40:39:38:a1:cc:0d:ab:
35:09:eb:ab:75:69:d1:d1:f0:5d:62:00:e3:ed:64:a8:84:60:
f6:4c:c9:84:24:88:be:25:eb:19:34:f0:96:c1:27:f2:c8:47:
f6:01:d9:62:19:8e:21:06:f2:9b:8f:7f:0e:39:9e:b3:6f:e3:
74:60:ee:97:2d:e2:e7:e9:1d:39:14:7e:b1:cf:d6:66:a5:ce:
5c:53:ab:b0:22:61:a4:d4:c2:7e:be:40:ca:06:87:a8:55:4e:
6b:cb:55:ca
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIURbC0tePiQ9AKjFYGGrpe9coD5uowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA1MDgxMTQyMTFaFw0yNzA1MDcxMTQ3MTFaMDMxMTAvBgNV
BAMTKEIxQ0Y1REE0NTEyM0QwNjJFMUE1MEJBNTVCRkY4NzY1RDNCQTQwN0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChA2JFvxhtyJ7a/6RA5GSOTOL2
SFf3FVszzlwBJrxojNI5ZR7fdhiSMPQA2XKt1h7SU0LgfJ8xGNhgCSbMDEXpjV0/
/dB6S73go7/rSmUp9O20pJsi/WG+cGv55fIrrigourLo4mV/aOzuMFDDtjXmu4ZT
EUpmKlHJzYAKPSzAwZIpy1STnXJqIImOx45QsKC2UtEHMCGkJ1M6svMf7aLOz5ee
ROkLoObE384+9mDZ5Mk2mNFQuqd7EeZ9exO4sF5iiU+EpMOMz5akft89eN+Z4hgi
s3phqqhqUDIBHrA0mfUvdfnmeH9xNQihh9StzLeCD4LfWDnqfFF+JO8jauWXAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUsc9dpFEj0GLhpQulW/+HZdO6QHswHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTYxMjUucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBABSFwID
BABSGFgwDQYJKoZIhvcNAQELBQADggEBAAUwYrnJu5jUXYAG6lKwJp+YjwmDRGSt
aaHZ/JSxbGFRKrqpm47+Wpd8TWEFDjztHRFi/m3PNn02BnAuBHcRksgY+Cwh0eM0
rUpI9bOCC1RvX1OacKf9277hpN6WFFJzsb3mU0JhVdj1WtAtTDV1sDjkxhsRzNSn
EdVwjSYFxnlm7/euRcWZ4mg1GPh3m7Olf/WAG8/PaYMgO5urQDk4ocwNqzUJ66t1
adHR8F1iAOPtZKiEYPZMyYQkiL4l6xk08JbBJ/LIR/YB2WIZjiEG8puPfw45nrNv
43Rg7pct4ufpHTkUfrHP1malzlxTq7AiYaTUwn6+QMoGh6hVTmvLVco=
-----END CERTIFICATE-----
Generated at Tue May 12 23:27:25 2026 by rpki-client