Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS216183.roa
File: AS216183.roa (raw, json)
Hash identifier: B2Ir4PGOA/qMEIRkxeewQZTrQ5Ab0pmZ89yUC0sbeR0=
Subject key identifier: 52:DF:81:88:A8:C3:F1:C1:D6:88:65:2E:18:6A:3E:C2:83:DB:A5:F2
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 2BF656D1D5277AC34DD33552760414E03EA6FB47
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS216183.roa
Signing time: Mon 21 Sep 2026 16:49:35 +0000
ROA not before: Mon 21 Sep 2026 16:44:35 +0000
ROA not after: Mon 20 Sep 2027 16:49:35 +0000
asID: 216183
IP address blocks: 45.153.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 03:52:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:f6:56:d1:d5:27:7a:c3:4d:d3:35:52:76:04:14:e0:3e:a6:fb:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Sep 21 16:44:35 2026 GMT
Not After : Sep 20 16:49:35 2027 GMT
Subject: CN=52DF8188A8C3F1C1D688652E186A3EC283DBA5F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e5:f2:6c:ea:90:f4:4a:7f:73:dc:f8:7b:51:
65:7e:d3:a9:10:20:b9:6f:76:18:d5:6f:7b:33:cc:
fc:cc:d3:87:3c:6c:aa:9e:aa:96:e8:4d:68:c7:6e:
a8:7d:c0:ec:e3:3a:24:aa:f1:6d:c1:63:56:29:e1:
c8:52:3a:48:29:d4:1e:61:99:96:e1:82:2a:29:c3:
69:fc:e6:92:c8:ef:8a:b1:c3:58:78:81:08:7b:5e:
bc:59:54:b2:df:0d:6c:f8:34:d7:32:4b:1e:18:90:
e4:fd:38:aa:5c:63:e8:70:44:a8:e1:e2:3f:f5:e2:
be:99:3e:a5:aa:61:b5:c2:04:7f:59:95:64:14:2d:
b8:95:3a:0e:96:47:19:61:9c:4f:23:d6:c9:0c:09:
71:83:6b:0b:09:d7:4b:90:ac:43:aa:2b:7e:41:57:
9a:37:da:03:34:c1:a9:8d:29:5e:16:61:b0:46:9b:
d2:12:a7:04:13:46:8f:86:cf:90:47:b4:ca:35:a2:
70:d6:84:b2:ae:99:9b:f7:9b:bd:42:cd:bc:e2:f8:
ff:61:ec:f4:8e:d8:5c:08:fe:d6:54:de:e9:f2:ef:
ac:a4:8f:8e:27:28:76:25:7b:5e:e9:2f:7f:14:f9:
bc:63:e5:f8:77:a8:52:86:3a:22:aa:6b:ba:14:6f:
37:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:DF:81:88:A8:C3:F1:C1:D6:88:65:2E:18:6A:3E:C2:83:DB:A5:F2
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS216183.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.5.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:e7:1c:df:16:4b:52:b3:8c:34:c0:0b:74:20:40:02:ac:05:
18:10:c0:e7:de:dd:b7:85:c7:0d:5c:2b:5c:5b:5a:78:e3:f7:
93:18:02:48:03:97:80:ba:bc:60:dc:25:9d:cc:06:1b:9f:b5:
3b:77:a7:f1:c7:84:f3:6b:5e:8e:e1:1e:2d:1e:b8:40:04:82:
57:b7:65:3e:43:9d:a8:25:5a:ef:de:a9:fa:b4:8e:a7:16:68:
b1:13:72:27:7e:a6:3d:d8:21:1b:b1:0d:85:60:e0:f8:87:b1:
81:13:e7:2d:6b:ea:ce:b7:3f:68:13:ff:a8:63:0a:b2:ec:13:
67:49:50:8a:89:c8:64:59:8d:3c:11:d9:5f:5f:82:8e:64:c8:
7e:ff:15:f2:18:43:df:06:b4:51:31:d0:94:7a:05:29:8b:8e:
6a:cf:6d:e5:e7:70:f3:70:03:4a:e3:79:02:68:fa:66:e3:1c:
bb:af:fd:fb:3b:90:86:b2:fd:2f:39:e9:4f:1f:0d:de:56:06:
14:58:9c:84:11:82:78:e0:de:ab:c9:ea:77:fe:ed:36:30:d4:
38:ca:da:ff:d2:7b:9c:27:eb:2b:5e:ae:4f:ba:2c:e0:a7:01:
ea:b8:8c:a7:39:4b:14:e4:64:5a:af:ec:5a:01:cb:77:db:a6:
46:48:1f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:14:29 2026 by rpki-client