Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS216416.roa
File: AS216416.roa (raw, json)
Hash identifier: oESOPZSUOnM/01j7teiAeuML/yObiUAMik53gFDIRkU=
Subject key identifier: ED:4F:F9:0C:75:B4:28:41:B8:2A:6E:B0:F3:C4:28:7C:DA:F1:E7:CA
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 02CE14EC6B2C8F3C0FAE77CBCA616B4874643568
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS216416.roa
Signing time: Mon 11 May 2026 08:49:03 +0000
ROA not before: Mon 11 May 2026 08:44:03 +0000
ROA not after: Mon 10 May 2027 08:49:03 +0000
asID: 216416
IP address blocks: 82.26.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:ce:14:ec:6b:2c:8f:3c:0f:ae:77:cb:ca:61:6b:48:74:64:35:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 11 08:44:03 2026 GMT
Not After : May 10 08:49:03 2027 GMT
Subject: CN=ED4FF90C75B42841B82A6EB0F3C4287CDAF1E7CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:74:35:88:d3:8e:fa:2f:74:9a:d0:78:cf:05:
5b:e4:01:fa:b5:21:d4:5b:2b:ce:fe:e7:7d:ad:ae:
f8:35:9e:b8:cb:d5:63:27:1c:cc:98:af:f4:78:45:
45:5e:78:93:e7:6d:7e:a5:c9:45:65:f4:5b:5d:69:
bc:6c:9c:3e:34:85:e4:62:a8:b7:1f:87:ed:20:ad:
c9:11:8b:7b:e0:fc:a3:85:2c:ec:9b:d7:37:87:3d:
e9:84:60:cc:be:c5:e4:0c:94:0e:80:53:aa:a4:56:
70:e1:94:50:f4:3a:b2:1b:a9:6e:49:b2:32:fd:ad:
e2:68:fb:d8:e2:a2:29:db:2a:d3:2f:b1:88:01:2f:
2e:2e:5f:c5:c0:a9:a8:ef:03:c6:97:16:15:a7:13:
83:ad:88:3a:4e:a0:3c:49:2b:5c:df:fd:fc:13:01:
23:6a:7c:bb:9f:11:3d:04:41:4d:72:64:20:d9:bc:
c2:2d:9d:90:13:49:b2:9a:1c:4e:18:78:8d:b9:1c:
28:3d:98:e6:e7:de:5f:39:66:3c:cb:64:11:94:dc:
bf:7f:52:d8:45:69:8d:72:26:42:b0:5d:d0:ed:a1:
2d:2e:72:1e:7b:e9:12:e4:c8:58:91:38:20:af:d9:
3d:16:ef:da:98:2a:d2:c5:88:47:51:10:08:c7:bd:
2e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:4F:F9:0C:75:B4:28:41:B8:2A:6E:B0:F3:C4:28:7C:DA:F1:E7:CA
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS216416.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.26.127.0/24
Signature Algorithm: sha256WithRSAEncryption
76:13:bb:38:4f:ae:44:8b:23:fb:e6:8a:73:37:c0:93:ab:02:
cc:96:30:12:3e:69:68:38:45:35:35:75:0a:d1:d1:ce:78:9d:
64:a8:d5:28:f7:d4:73:35:18:2a:e2:ba:b8:bd:fa:4f:94:d7:
b9:8c:29:f9:e2:59:a7:a3:12:b0:65:67:79:6e:15:b8:9f:a2:
21:eb:45:fd:5a:3f:38:93:68:9a:d5:a5:2a:4d:a1:21:b1:17:
16:e4:af:28:71:cf:8d:8b:a2:ce:5f:79:ee:8f:d7:09:52:9e:
2e:49:0b:6f:7e:af:8b:60:1d:44:bf:87:c6:b3:19:fa:c8:8f:
ff:07:44:81:fb:78:9a:75:21:f6:6e:bb:87:24:9f:2a:9c:80:
d6:ca:3e:09:b7:8f:f5:14:8f:26:d3:4a:c6:e2:9c:49:cc:5a:
bf:4a:bb:6f:42:fb:48:57:64:fa:33:61:e0:15:d4:7e:a7:e3:
52:c4:92:56:96:46:c1:33:93:1e:6b:73:cc:9a:73:2f:0e:0c:
30:b7:ca:29:eb:df:b0:80:08:a3:08:99:0c:33:25:fd:98:95:
f7:f9:ed:b2:37:0b:ac:9d:d2:55:69:93:15:9e:7f:74:0e:d8:
c7:ab:22:b4:81:49:69:b6:44:46:cd:e8:23:5d:c5:bd:da:59:
ec:c5:db:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:24:16 2026 by rpki-client