Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS216022.roa
File: AS216022.roa (raw, json)
Hash identifier: EMAX9+AomKmFS8jyJI3HomTDMipTnzJTOjFJGiMdjVk=
Subject key identifier: B2:19:80:71:B7:67:E8:71:CA:2B:4E:21:2C:AF:76:D0:66:A2:DD:8D
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6769ACC6044B9B00830294FBA1122530C6343186
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS216022.roa
Signing time: Wed 11 Nov 2026 07:49:41 +0000
ROA not before: Wed 11 Nov 2026 07:44:41 +0000
ROA not after: Wed 10 Nov 2027 07:49:41 +0000
asID: 216022
IP address blocks: 2a13:9500:113::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:69:ac:c6:04:4b:9b:00:83:02:94:fb:a1:12:25:30:c6:34:31:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Nov 11 07:44:41 2026 GMT
Not After : Nov 10 07:49:41 2027 GMT
Subject: CN=B2198071B767E871CA2B4E212CAF76D066A2DD8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:25:b5:7b:f5:d1:0e:41:c1:94:0e:be:b5:1f:
f5:98:07:79:aa:41:82:7f:d7:0a:0f:e4:6d:57:7c:
37:4a:c4:ec:68:bc:df:07:4a:67:3d:34:8f:de:fa:
9c:89:13:4b:a1:45:44:11:f9:bb:73:d9:4b:4c:a4:
6a:64:4b:f9:e4:6f:18:09:09:3a:a1:7a:22:2e:e8:
54:13:1c:69:70:b3:5e:e6:f9:39:d0:d2:e8:f7:a2:
23:72:9b:ce:e2:8b:1b:3d:54:3d:09:7c:43:75:9b:
a1:25:79:f7:a3:70:a6:8f:19:ea:f7:a5:28:72:f4:
2e:fc:62:46:ff:0d:60:d3:7c:08:14:8e:27:53:24:
79:7a:e7:52:45:39:26:25:21:c7:a8:d7:f0:91:ad:
82:3b:34:fe:fa:cc:8f:75:be:f3:35:9b:42:ee:66:
2b:34:61:3e:7a:46:8e:c1:e5:fd:b9:cf:f7:38:c7:
21:9d:46:e5:bd:c1:e5:aa:52:b5:69:64:6b:07:b6:
da:df:09:f2:e8:76:71:ea:b1:55:ec:54:d5:7c:23:
f6:b1:23:87:b2:81:96:9d:0f:75:d3:a7:81:c7:eb:
19:17:79:87:7e:79:8b:c3:56:e4:79:0d:c4:55:f9:
84:05:38:44:d6:cc:bf:78:ae:1f:82:1f:71:c7:1b:
29:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:19:80:71:B7:67:E8:71:CA:2B:4E:21:2C:AF:76:D0:66:A2:DD:8D
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS216022.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:113::/48
Signature Algorithm: sha256WithRSAEncryption
79:19:1a:37:29:00:ad:97:e9:e5:b5:65:f2:c9:21:95:40:b8:
f0:f1:0d:55:ac:0c:ec:80:37:96:a7:cf:36:ff:23:4f:66:55:
fc:2b:5d:ba:94:14:1e:32:5d:19:dc:ea:7d:28:ee:cb:ac:55:
a3:20:1d:42:e3:71:96:64:03:27:d0:8d:b2:e1:cd:52:cc:be:
a4:f2:64:48:30:14:32:04:6f:ce:05:48:6e:e9:24:3d:bd:78:
a0:9e:52:33:50:89:7b:60:92:4e:af:b4:e9:45:da:87:49:4e:
73:ec:f0:31:a2:eb:b1:80:82:f7:8a:5f:e7:24:2d:ce:b7:92:
e9:44:87:b6:5c:7b:38:ea:06:5d:d8:69:df:74:b8:87:b1:3f:
56:14:b8:c2:d3:c6:25:ef:61:90:47:f6:e2:c1:34:0b:36:c9:
80:82:e5:cd:b4:94:52:72:61:c3:8d:3c:c7:ea:a0:35:6f:b7:
b1:a1:8c:eb:71:c0:8a:6a:03:68:b1:8f:88:11:84:ca:53:09:
98:6a:48:62:67:52:36:b2:6d:9f:02:8d:1b:87:d9:28:36:a7:
57:50:38:64:2b:aa:c6:d4:60:46:f2:e5:5d:bb:08:4f:e6:83:
55:59:d9:4a:32:76:39:50:53:9a:69:e9:c9:5d:65:38:1e:d2:
b2:af:13:cc
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUZ2msxgRLmwCDApT7oRIlMMY0MYYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjExMTEwNzQ0NDFaFw0yNzExMTAwNzQ5NDFaMDMxMTAvBgNV
BAMTKEIyMTk4MDcxQjc2N0U4NzFDQTJCNEUyMTJDQUY3NkQwNjZBMkREOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtJbV79dEOQcGUDr61H/WYB3mq
QYJ/1woP5G1XfDdKxOxovN8HSmc9NI/e+pyJE0uhRUQR+btz2UtMpGpkS/nkbxgJ
CTqheiIu6FQTHGlws17m+TnQ0uj3oiNym87iixs9VD0JfEN1m6ElefejcKaPGer3
pShy9C78Ykb/DWDTfAgUjidTJHl651JFOSYlIceo1/CRrYI7NP76zI91vvM1m0Lu
Zis0YT56Ro7B5f25z/c4xyGdRuW9weWqUrVpZGsHttrfCfLodnHqsVXsVNV8I/ax
I4eygZadD3XTp4HH6xkXeYd+eYvDVuR5DcRV+YQFOETWzL94rh+CH3HHGym9AgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUshmAcbdn6HHKK04hLK920Gai3Y0wHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjE2MDIyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhOV
AAETMA0GCSqGSIb3DQEBCwUAA4IBAQB5GRo3KQCtl+nltWXyySGVQLjw8Q1VrAzs
gDeWp882/yNPZlX8K126lBQeMl0Z3Op9KO7LrFWjIB1C43GWZAMn0I2y4c1SzL6k
8mRIMBQyBG/OBUhu6SQ9vXignlIzUIl7YJJOr7TpRdqHSU5z7PAxouuxgIL3il/n
JC3Ot5LpRIe2XHs46gZd2GnfdLiHsT9WFLjC08Yl72GQR/biwTQLNsmAguXNtJRS
cmHDjTzH6qA1b7exoYzrccCKagNosY+IEYTKUwmYakhiZ1I2sm2fAo0bh9koNqdX
UDhkK6rG1GBG8uVduwhP5oNVWdlKMnY5UFOaaenJXWU4HtKyrxPM
-----END CERTIFICATE-----
Generated at Sun Nov 15 16:06:36 2026 by rpki-client