Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS216416.roa
File: AS216416.roa (raw, json)
Hash identifier: 8eN9pExyi0O4lLXMqo8OoVO6ukIij4sDhS6qxr5QT5o=
Subject key identifier: 5C:16:CC:CE:B0:45:63:5D:7A:24:B0:BC:7C:DF:C2:FA:20:51:C1:8D
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 2297BE548FFA42FA4E3E8850080AFE09A86F7FE2
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS216416.roa
Signing time: Mon 11 May 2026 08:49:02 +0000
ROA not before: Mon 11 May 2026 08:44:02 +0000
ROA not after: Mon 10 May 2027 08:49:02 +0000
asID: 216416
IP address blocks: 45.157.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:97:be:54:8f:fa:42:fa:4e:3e:88:50:08:0a:fe:09:a8:6f:7f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: May 11 08:44:02 2026 GMT
Not After : May 10 08:49:02 2027 GMT
Subject: CN=5C16CCCEB045635D7A24B0BC7CDFC2FA2051C18D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:50:16:bd:fc:65:2c:bc:76:7c:d3:91:f5:93:
0e:46:65:cb:50:f7:7d:d4:3a:a9:d7:95:a1:ec:da:
92:5d:e7:e7:72:52:bd:41:06:0a:52:5e:15:85:a0:
5d:0f:f3:56:0b:b5:d6:08:59:f1:77:f1:ed:8d:b8:
ed:57:dd:fb:99:eb:41:ad:47:f8:ef:bf:97:85:6e:
ad:69:dd:33:8f:87:63:0b:a4:12:65:2a:9f:2a:09:
84:4b:f1:6e:0f:6e:94:0d:30:59:45:34:d8:70:ea:
8e:a9:1e:31:51:26:c5:37:61:70:9c:91:c4:c0:86:
32:78:a7:80:79:0b:d0:60:db:00:63:85:6c:6b:bb:
36:cb:e0:2e:66:46:52:86:18:1a:ab:89:7e:8e:b3:
bf:08:f5:2a:0c:4d:4b:dc:a9:a7:5d:8f:d1:2c:a9:
86:74:ef:ea:69:94:9c:f8:ce:b2:33:32:93:79:86:
21:e2:06:35:9a:db:05:02:1e:16:ab:aa:6d:65:66:
95:30:6f:2d:1a:39:78:9c:15:ae:c8:53:ff:1b:20:
0d:7a:2c:10:1e:8c:2c:d8:94:56:71:89:0c:4a:67:
c8:77:b7:a3:96:6c:e1:3a:88:a5:dc:27:da:51:df:
07:09:85:08:0e:45:3e:0c:17:70:c4:fd:b7:08:08:
0d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:16:CC:CE:B0:45:63:5D:7A:24:B0:BC:7C:DF:C2:FA:20:51:C1:8D
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS216416.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.19.0/24
Signature Algorithm: sha256WithRSAEncryption
29:01:4d:32:14:84:d2:07:ee:b0:b3:9c:84:e1:e8:c7:91:b8:
a5:b3:26:c5:63:7f:0f:dd:d9:36:c9:a6:4a:20:38:ce:c5:40:
ec:5a:89:91:ff:ee:10:ef:5b:27:b6:cd:39:85:35:5d:db:7c:
32:00:93:57:e0:1d:a1:d6:c1:24:f1:27:b9:a0:20:1b:8a:fc:
a7:58:3c:a8:12:46:fc:54:96:92:a2:2a:41:41:4a:be:61:ed:
2a:c6:3b:70:a0:fb:c8:a9:47:66:ce:02:77:b0:80:cf:91:23:
47:aa:66:b5:9f:07:2c:40:8f:3e:c8:7d:76:1a:97:d7:6e:1b:
1e:38:77:32:00:db:90:d2:88:0d:24:d2:00:49:2a:d2:53:d9:
4f:c3:5d:21:2b:f3:69:bc:86:15:51:7d:d3:56:cb:64:f7:d5:
da:71:5f:ac:29:bf:eb:f4:50:0b:bd:35:69:42:2b:10:11:85:
f6:11:e7:fd:e7:75:92:46:9a:4e:48:00:8d:0e:e1:31:22:67:
b6:f3:cc:97:7c:8f:28:64:56:41:12:bc:41:5d:c8:6b:4e:82:
65:1e:67:2e:a7:20:3b:2c:2f:ef:fa:57:b7:4e:c7:42:95:32:
ca:d4:63:9b:b2:b6:99:8f:5b:21:90:eb:c4:1b:de:e7:1e:19:
42:54:96:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:59:28 2026 by rpki-client