Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS216032.roa
File: AS216032.roa (raw, json)
Hash identifier: KZqH8osmnsitXQCo9TB1tzj14sjsCyFOrfns1wKwGBw=
Subject key identifier: 82:E4:1B:A6:61:DA:AF:FB:D1:B8:1E:33:DD:86:75:46:D5:CD:53:18
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 492534DECF8F95187D43EEEEA1E73D8C08697D7E
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS216032.roa
Signing time: Tue 21 Apr 2026 13:47:05 +0000
ROA not before: Tue 21 Apr 2026 13:42:05 +0000
ROA not after: Tue 20 Apr 2027 13:47:05 +0000
asID: 216032
IP address blocks: 2a13:9500:54::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:25:34:de:cf:8f:95:18:7d:43:ee:ee:a1:e7:3d:8c:08:69:7d:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 21 13:42:05 2026 GMT
Not After : Apr 20 13:47:05 2027 GMT
Subject: CN=82E41BA661DAAFFBD1B81E33DD867546D5CD5318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:42:a6:aa:0c:c1:3f:b6:18:00:71:da:32:00:
20:91:64:70:5a:31:d2:c0:ac:cc:5b:6e:a0:b7:35:
66:0f:25:f5:c0:14:bd:fd:44:94:ef:df:ab:20:d6:
d9:df:d9:8b:f9:2c:3f:2b:6c:ca:20:91:4c:dc:e8:
0d:a9:f2:91:e4:bd:47:82:35:63:ab:9d:26:da:d9:
c0:7a:a6:f9:36:80:fb:50:da:2c:0a:b2:09:c4:4e:
72:d4:ba:96:bb:45:ba:7d:c1:e0:56:e6:05:16:90:
37:64:4f:f1:d5:16:d1:d8:3f:de:a4:09:4d:8b:68:
b8:eb:5d:87:ae:c0:ed:65:ea:e1:39:91:88:7e:3f:
4c:d4:5d:cd:36:2c:0c:85:7c:cd:9c:74:25:f6:31:
d3:62:3e:a2:00:ce:bc:c6:cc:1a:5f:35:d2:a7:41:
13:90:41:31:30:fd:7b:21:22:db:95:f4:e7:82:0b:
1b:3d:dd:68:03:6d:89:24:40:bd:17:89:6d:ce:c9:
72:0a:cb:f0:3d:f8:4f:85:03:a4:35:2c:d2:2b:41:
91:dd:33:0d:d4:d2:fa:6c:57:b3:49:5a:a1:28:f8:
8b:ec:5f:81:29:56:e0:5a:43:98:7d:f7:53:f9:93:
55:11:6d:2d:a6:68:e5:e8:fb:3f:66:73:01:0f:28:
04:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E4:1B:A6:61:DA:AF:FB:D1:B8:1E:33:DD:86:75:46:D5:CD:53:18
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS216032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:54::/48
Signature Algorithm: sha256WithRSAEncryption
36:6f:5d:bc:75:8d:72:8c:cf:15:4f:a3:2e:e6:09:6d:33:b8:
ea:39:46:21:95:67:6d:e8:70:00:db:3a:35:dd:d8:f0:69:93:
7b:bd:9b:8d:32:1d:2d:5f:15:11:39:ec:5e:8a:bd:c6:ba:57:
c0:fb:c0:a5:5e:25:f0:d4:ca:8b:f0:e4:11:a0:1c:e7:38:8f:
c5:11:71:b7:b1:db:ba:88:47:52:35:92:11:90:da:06:2c:6a:
a3:44:e3:c6:ba:05:77:59:ee:10:5b:fc:6b:9f:7e:b3:c7:96:
c0:f9:df:28:a4:77:29:d2:4c:f4:da:15:08:68:16:09:b6:bf:
6b:04:bb:89:81:1a:f6:dc:45:7f:22:95:34:16:c3:dd:60:6b:
ff:cd:a4:e3:06:68:ad:2d:b9:70:01:30:cd:b0:6b:e5:6c:f8:
36:57:21:13:58:71:b8:c5:28:5d:3b:7e:dc:c4:f4:4e:94:ac:
06:cf:3f:01:c0:bc:d7:b7:29:b9:3a:e6:ba:40:ed:89:55:da:
6e:4e:a9:c9:c1:90:30:2a:bf:e4:c6:8f:56:79:e7:4d:79:5a:
1a:b7:4e:4b:d4:09:d2:4d:78:71:d5:9d:02:02:41:f8:a2:a3:
fe:3b:a9:e5:2e:f1:6e:84:b4:21:a8:8a:74:de:e3:6e:12:51:
3f:31:87:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:05:10 2026 by rpki-client