Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS216458.roa
File: AS216458.roa (raw, json)
Hash identifier: LtgEKCKbhQwnRh/5C6goSenxxCYrBDJn+pU7D/85RSg=
Subject key identifier: 9A:B5:A6:21:5E:AB:AF:E5:81:7F:E4:28:1F:4C:40:D7:23:1D:2C:D3
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 1B7947A2E2878A6CD1051D3D4461BAE1C4E62ED8
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS216458.roa
Signing time: Fri 17 Jul 2026 15:49:13 +0000
ROA not before: Fri 17 Jul 2026 15:44:13 +0000
ROA not after: Fri 16 Jul 2027 15:49:13 +0000
asID: 216458
IP address blocks: 194.147.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 10:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:79:47:a2:e2:87:8a:6c:d1:05:1d:3d:44:61:ba:e1:c4:e6:2e:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jul 17 15:44:13 2026 GMT
Not After : Jul 16 15:49:13 2027 GMT
Subject: CN=9AB5A6215EABAFE5817FE4281F4C40D7231D2CD3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:d9:a1:bf:93:ba:26:68:5e:2c:04:e3:a5:d3:
f2:82:cc:a2:d1:48:3b:31:74:08:f1:7f:bf:ed:cb:
b5:16:11:3d:5c:a9:17:0f:e5:71:ec:e5:84:fc:d5:
8e:f9:34:0e:eb:2a:56:e6:85:b6:84:5a:c8:f3:c4:
5a:8e:01:45:2e:b0:32:d5:f2:96:c4:29:5d:83:dd:
2c:b2:74:1e:ca:65:cc:48:b1:98:f7:20:ee:12:3d:
c9:be:93:b8:a2:78:52:ae:a6:47:1b:59:22:63:09:
d9:03:63:f7:a9:87:a4:eb:af:10:8a:90:8c:dd:11:
92:5c:47:92:ac:6d:62:fc:48:41:83:6b:d5:f5:67:
a7:48:d9:08:78:7c:de:87:0f:5c:76:b8:1f:60:4d:
65:58:ff:82:9a:99:c6:ce:51:3e:0d:56:ea:cf:0f:
8e:61:6d:b0:34:65:15:8c:4b:57:55:be:3a:bb:93:
ea:85:0f:a0:28:30:1f:ee:34:4e:28:03:21:dc:eb:
6d:08:57:59:70:dc:e9:1c:6c:47:6b:15:28:15:a2:
1d:0a:29:38:d9:4e:be:d7:c3:de:2a:c2:63:10:ea:
26:fd:aa:0e:4d:27:82:29:9e:33:97:a3:27:eb:8b:
a7:e3:01:a0:38:72:d2:33:58:20:db:6f:c8:99:c2:
cc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B5:A6:21:5E:AB:AF:E5:81:7F:E4:28:1F:4C:40:D7:23:1D:2C:D3
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS216458.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.5.0/24
Signature Algorithm: sha256WithRSAEncryption
76:38:ab:bd:50:96:b4:82:81:ea:ed:a0:17:ed:f4:0b:21:b9:
03:42:87:91:4e:7a:b1:6d:0a:38:0c:cc:6c:fe:bc:44:4d:b3:
af:a3:8d:e5:03:e0:72:7e:67:9e:ae:d2:f5:7d:37:31:d5:32:
e2:6d:f7:9b:9f:8d:8b:39:6f:af:0b:1b:26:a0:da:9c:a4:20:
c6:fd:a1:98:f9:4d:23:a4:86:8e:ba:07:fe:60:3f:dc:32:ab:
63:a9:4b:ff:2e:92:ec:0c:f5:74:cb:01:38:52:13:7f:c7:f9:
eb:51:ad:14:a0:1c:6e:6e:e1:bc:77:d5:0f:d1:91:2d:cf:c5:
bc:0e:cb:5c:da:31:57:a5:65:cc:61:37:42:42:60:75:84:3e:
66:33:cb:c1:3f:c2:cd:b7:0e:9f:2d:7c:12:7a:83:19:cc:86:
e4:8e:58:74:69:b2:92:2a:6c:c7:b3:0f:6f:d1:c9:e0:52:66:
b7:05:f5:f6:1f:0c:5a:84:2e:c1:c5:09:89:af:da:d3:2e:1e:
2c:59:81:59:55:69:37:30:33:02:4b:e3:73:73:84:54:53:1c:
5c:c3:a5:fb:c7:a4:1d:e7:74:bc:8f:e6:ea:b2:3d:07:af:20:
fb:a0:a9:88:50:a7:e0:fe:35:aa:97:b9:16:68:e9:95:29:63:
a6:f8:32:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:57:34 2026 by rpki-client