Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS216100.roa
File: AS216100.roa (raw, json)
Hash identifier: yEx1cxZ9EZ0V1BfqCbY470tqg1EDUXMI0+zMAUZO4+Q=
Subject key identifier: CB:3A:75:E4:D9:30:D6:67:6E:DA:09:05:C9:8F:72:04:93:B5:A4:16
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 4D1774EA2D3899590EE22D5ED89A62F04CA7DB55
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS216100.roa
Signing time: Wed 08 Jul 2026 10:27:21 +0000
ROA not before: Wed 08 Jul 2026 10:22:21 +0000
ROA not after: Wed 07 Jul 2027 10:27:21 +0000
asID: 216100
IP address blocks: 2a14:7580:fff7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:17:74:ea:2d:38:99:59:0e:e2:2d:5e:d8:9a:62:f0:4c:a7:db:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jul 8 10:22:21 2026 GMT
Not After : Jul 7 10:27:21 2027 GMT
Subject: CN=CB3A75E4D930D6676EDA0905C98F720493B5A416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6a:f6:fc:df:58:5f:ce:24:1d:52:c6:4a:71:
4e:95:09:6c:6c:fd:92:2d:34:c2:b8:0c:70:b1:ba:
da:46:15:6f:0d:9c:48:c3:75:b3:a4:f3:fb:0c:2c:
d8:a6:56:1b:70:f1:93:38:7a:d8:50:bf:be:ad:32:
37:90:c1:33:5e:ed:be:50:ac:b6:21:05:f4:99:ae:
32:0b:e3:d9:30:34:79:aa:d5:d1:14:dc:64:68:8c:
23:04:9d:69:70:a9:b0:49:3a:cb:c7:4a:de:63:2d:
bc:19:c0:37:32:3e:54:f3:b4:84:7b:84:31:57:dc:
1e:e7:dd:15:f2:25:7f:15:f0:16:f1:13:23:de:28:
c3:a3:30:9a:8f:9e:bc:83:e7:db:62:1a:97:9c:05:
10:5b:72:16:59:98:68:8d:d6:1c:27:68:4e:d4:17:
63:ae:f5:4c:92:c8:66:40:cb:3a:4c:57:2e:b2:10:
f9:9e:a6:02:d3:df:59:63:33:2b:09:33:55:84:76:
a1:78:ea:0a:07:85:4c:e0:60:54:69:92:37:b8:78:
df:3f:78:c4:7f:7a:08:22:27:0c:a4:6e:c6:75:c2:
cc:c4:dc:38:42:37:e2:43:89:2b:5b:8b:58:bb:77:
58:5f:f3:3e:c7:3f:67:ea:a1:f8:cb:52:26:b7:6a:
d6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:3A:75:E4:D9:30:D6:67:6E:DA:09:05:C9:8F:72:04:93:B5:A4:16
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS216100.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:fff7::/48
Signature Algorithm: sha256WithRSAEncryption
37:d3:d6:ea:23:83:56:f2:61:b5:92:87:78:c5:80:54:ad:ef:
ff:22:17:51:44:a4:ae:12:0c:97:06:47:24:aa:20:3c:d4:b1:
97:10:da:5e:65:11:3d:89:2e:5f:84:8c:18:4a:61:47:db:0e:
15:c6:4f:21:75:a0:35:59:78:fe:be:a5:7e:fb:8a:17:b2:0e:
bb:f8:af:df:3f:52:1a:ff:4f:98:ae:03:d5:89:72:8a:34:f5:
4a:3c:cc:27:eb:f6:79:d2:3c:52:35:da:b9:2a:79:0d:ff:c2:
b1:7b:16:bf:34:64:42:b6:43:b3:b1:16:0f:f4:f7:dd:e5:2a:
de:d7:af:ae:12:91:45:c8:ef:0f:76:57:c2:d0:70:21:3d:af:
88:19:84:8c:07:45:66:68:31:38:3c:30:bb:f8:a2:e6:53:2a:
2b:8a:10:cc:a1:ce:52:0e:ce:34:ab:3a:72:01:b7:cf:f4:81:
92:76:7e:2f:89:a0:dd:f3:28:ca:08:45:b5:a8:c4:00:87:4d:
f8:6c:ca:33:64:b7:03:65:17:92:3f:8c:39:10:62:e9:43:cd:
93:d0:5d:45:b8:4f:52:02:b6:e5:ca:0b:b8:9c:f1:65:2b:b0:
fc:3f:55:bc:63:a8:50:8a:83:ed:87:c7:7f:70:91:69:6e:11:
00:52:7d:ed
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUTRd06i04mVkO4i1e2Jpi8Eyn21UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNjA3MDgxMDIyMjFaFw0yNzA3MDcxMDI3MjFaMDMxMTAvBgNV
BAMTKENCM0E3NUU0RDkzMEQ2Njc2RURBMDkwNUM5OEY3MjA0OTNCNUE0MTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXavb831hfziQdUsZKcU6VCWxs
/ZItNMK4DHCxutpGFW8NnEjDdbOk8/sMLNimVhtw8ZM4ethQv76tMjeQwTNe7b5Q
rLYhBfSZrjIL49kwNHmq1dEU3GRojCMEnWlwqbBJOsvHSt5jLbwZwDcyPlTztIR7
hDFX3B7n3RXyJX8V8BbxEyPeKMOjMJqPnryD59tiGpecBRBbchZZmGiN1hwnaE7U
F2Ou9UySyGZAyzpMVy6yEPmepgLT31ljMysJM1WEdqF46goHhUzgYFRpkje4eN8/
eMR/eggiJwykbsZ1wszE3DhCN+JDiStbi1i7d1hf8z7HP2fqofjLUia3atbBAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUyzp15Nkw1mdu2gkFyY9yBJO1pBYwHwYDVR0j
BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz
ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16
OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt
NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjE2MTAwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1
gP/3MA0GCSqGSIb3DQEBCwUAA4IBAQA309bqI4NW8mG1kod4xYBUre//IhdRRKSu
EgyXBkckqiA81LGXENpeZRE9iS5fhIwYSmFH2w4Vxk8hdaA1WXj+vqV++4oXsg67
+K/fP1Ia/0+YrgPViXKKNPVKPMwn6/Z50jxSNdq5KnkN/8Kxexa/NGRCtkOzsRYP
9Pfd5Sre16+uEpFFyO8PdlfC0HAhPa+IGYSMB0VmaDE4PDC7+KLmUyorihDMoc5S
Ds40qzpyAbfP9IGSdn4viaDd8yjKCEW1qMQAh034bMozZLcDZReSP4w5EGLpQ82T
0F1FuE9SArblygu4nPFlK7D8P1W8Y6hQioPth8d/cJFpbhEAUn3t
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:46:28 2026 by rpki-client