Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS216190.roa
File: AS216190.roa (raw, json)
Hash identifier: OBoDlFTm4DBwLFJjoEq6EddPE0Kgcs2caNHZOgKzqI0=
Subject key identifier: EE:C4:E2:32:0B:A6:9D:84:AC:C5:EF:B2:4B:A3:D5:6F:B4:E0:54:78
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 586C6600D6AFA6680FBDFB642938598ED18F7F97
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS216190.roa
Signing time: Sun 22 Mar 2026 18:28:51 +0000
ROA not before: Sun 22 Mar 2026 18:23:51 +0000
ROA not after: Sun 21 Mar 2027 18:28:51 +0000
asID: 216190
IP address blocks: 82.23.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:6c:66:00:d6:af:a6:68:0f:bd:fb:64:29:38:59:8e:d1:8f:7f:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 22 18:23:51 2026 GMT
Not After : Mar 21 18:28:51 2027 GMT
Subject: CN=EEC4E2320BA69D84ACC5EFB24BA3D56FB4E05478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:28:3d:af:20:e2:79:c2:67:78:5e:b8:9c:cf:
72:7b:b2:0a:c8:82:4f:bb:52:cb:53:c5:ca:5f:6c:
ec:e7:1f:6f:44:94:6d:92:01:da:ea:6a:d7:05:f4:
2b:8d:a8:c0:ac:4b:2b:c1:3d:c5:3e:ed:24:b6:51:
d4:0b:40:53:51:6e:aa:f4:bb:cd:12:c6:b2:2e:5e:
b8:8d:20:5c:55:13:8e:82:42:dd:c9:78:b6:10:e5:
ef:71:75:e7:1c:7b:f7:36:15:e2:bf:86:71:ca:1f:
ae:30:d8:65:72:04:6d:63:c9:2c:7a:ba:a0:44:34:
a0:96:45:3f:c9:4f:36:f8:d8:fa:ee:b3:3e:97:a9:
02:ba:96:bb:aa:fc:e1:ae:f6:3f:6f:3b:6f:1b:87:
56:48:27:2c:65:a4:62:89:a7:35:12:c1:29:7e:2a:
a8:ed:04:e1:c1:06:c0:c9:03:10:f5:1c:4d:e1:1e:
71:d1:ea:6d:13:d0:13:d8:17:45:d5:2c:92:44:c5:
84:97:e5:ce:98:a8:ee:e1:91:c0:c3:f1:9d:95:d0:
80:95:a0:81:26:85:d6:3e:4f:eb:34:f2:e6:21:8e:
0a:75:92:18:af:17:53:10:be:42:16:d0:6f:3c:ba:
e8:a7:9d:07:0a:d8:12:14:b9:d9:f6:23:6c:63:84:
86:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C4:E2:32:0B:A6:9D:84:AC:C5:EF:B2:4B:A3:D5:6F:B4:E0:54:78
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS216190.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.23.134.0/24
Signature Algorithm: sha256WithRSAEncryption
27:c2:ad:4c:b8:04:2a:53:fb:6f:64:4a:9f:75:42:45:13:ab:
95:c7:25:b8:0b:69:3f:9e:7f:04:c5:f5:24:d7:20:dc:5f:e6:
51:60:cd:c3:c2:ce:6f:d1:d2:20:ce:35:d5:95:62:a0:08:2d:
03:c4:12:64:bc:20:c2:48:32:55:03:2c:90:ea:69:40:6a:ef:
bc:79:ad:7d:88:2b:1c:f3:02:b7:48:6f:dd:0d:09:52:66:e0:
1f:b2:43:88:e9:10:66:3c:fb:94:be:69:b2:8a:1b:7d:5b:c7:
2f:3f:a4:54:61:ea:01:ea:f0:0b:e7:54:58:b9:8e:5d:cb:a2:
af:d9:8f:90:47:24:3d:f4:94:a3:f3:b7:0f:24:f0:f4:ea:df:
c5:eb:e1:cf:0c:c7:38:aa:7f:9d:c0:93:95:6c:db:14:57:85:
0f:f7:fc:26:f0:fd:0f:1f:2a:fa:a1:16:a6:b4:d3:d2:92:dd:
e6:ac:8d:ea:ad:bf:9c:6a:61:81:c3:33:b3:1a:f0:09:35:be:
e8:24:03:00:57:a7:27:65:a5:dd:c1:7d:bc:2c:b5:ed:ed:e7:
2a:fc:2b:d7:3d:7b:26:62:f4:dc:41:da:f0:83:7e:2f:e6:62:
59:00:72:72:8b:b9:0f:f0:42:35:f3:49:4d:56:ea:69:a9:29:
05:40:f4:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:34:40 2026 by rpki-client