Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS16509.roa
File: AS16509.roa (raw, json)
Hash identifier: Js7J1iCqTvBUVyysIn9sb8IYAhgG2XlHx+dzTmLFs08=
Subject key identifier: 6B:FE:BF:9E:A3:B8:03:A7:97:55:4D:FD:4C:7E:F1:FF:5D:19:86:61
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 780940552FC933AE32F160B484B5CCEDDD61A28F
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS16509.roa
Signing time: Thu 23 Jul 2026 15:42:00 +0000
ROA not before: Thu 23 Jul 2026 15:37:00 +0000
ROA not after: Thu 22 Jul 2027 15:42:00 +0000
asID: 16509
IP address blocks: 91.124.34.0/24 maxlen: 24
91.124.38.0/24 maxlen: 24
91.124.42.0/24 maxlen: 24
91.124.52.0/24 maxlen: 24
91.124.122.0/24 maxlen: 24
91.124.131.0/24 maxlen: 24
91.124.133.0/24 maxlen: 24
91.124.217.0/24 maxlen: 24
92.112.51.0/24 maxlen: 24
92.112.58.0/24 maxlen: 24
92.112.61.0/24 maxlen: 24
92.112.63.0/24 maxlen: 24
92.112.74.0/24 maxlen: 24
92.112.75.0/24 maxlen: 24
92.113.49.0/24 maxlen: 24
92.113.50.0/24 maxlen: 24
92.113.51.0/24 maxlen: 24
92.113.52.0/24 maxlen: 24
92.113.53.0/24 maxlen: 24
92.113.100.0/24 maxlen: 24
95.135.160.0/24 maxlen: 24
95.135.166.0/24 maxlen: 24
95.135.191.0/24 maxlen: 24
95.135.202.0/24 maxlen: 24
178.92.101.0/24 maxlen: 24
178.94.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:09:40:55:2f:c9:33:ae:32:f1:60:b4:84:b5:cc:ed:dd:61:a2:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jul 23 15:37:00 2026 GMT
Not After : Jul 22 15:42:00 2027 GMT
Subject: CN=6BFEBF9EA3B803A797554DFD4C7EF1FF5D198661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c8:2d:a8:ad:67:54:12:6a:fe:66:ff:0b:29:
fe:5a:6e:35:e8:bc:d8:e1:a5:ec:40:21:c9:c2:ed:
11:14:b4:3c:3e:5f:74:16:6c:6b:45:68:38:bf:4f:
3f:af:b5:ba:1d:c0:e4:82:4c:f1:2f:27:ed:c4:50:
6d:a1:63:79:1e:50:8c:6e:db:8e:dd:f5:bc:a4:81:
64:2c:50:53:7f:68:0d:3b:f9:bb:4f:ca:4b:ae:d8:
b6:bb:60:45:bb:45:15:bb:61:a2:58:dc:1c:d4:61:
90:6e:f8:f4:90:6a:74:16:86:4e:74:49:56:4f:88:
63:e4:92:ef:8f:25:85:c6:ad:23:0c:95:2f:ef:f7:
ca:15:b9:44:fb:24:91:f0:de:f5:22:d2:79:58:2a:
79:21:12:09:a1:47:c2:4b:b3:4a:8f:4a:e7:14:90:
23:04:31:2e:19:ee:ee:f6:ea:c1:87:f8:5b:d2:f9:
92:6c:6b:de:3d:30:10:b7:e2:70:56:9d:aa:2d:b4:
21:e5:8e:17:fa:c4:70:5f:be:31:ce:9d:d1:29:32:
45:84:7f:1c:26:24:4f:9b:4f:3c:1b:64:aa:0b:76:
83:bc:50:f3:03:1c:7b:db:a2:b1:52:04:35:4d:5e:
39:ba:da:37:e4:a0:c1:f0:f1:15:dd:75:a4:87:96:
fe:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:FE:BF:9E:A3:B8:03:A7:97:55:4D:FD:4C:7E:F1:FF:5D:19:86:61
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS16509.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.34.0/24
91.124.38.0/24
91.124.42.0/24
91.124.52.0/24
91.124.122.0/24
91.124.131.0/24
91.124.133.0/24
91.124.217.0/24
92.112.51.0/24
92.112.58.0/24
92.112.61.0/24
92.112.63.0/24
92.112.74.0/23
92.113.49.0-92.113.53.255
92.113.100.0/24
95.135.160.0/24
95.135.166.0/24
95.135.191.0/24
95.135.202.0/24
178.92.101.0/24
178.94.192.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:a9:aa:1b:a8:41:3f:0e:67:22:77:f8:d2:a4:b9:1c:2d:8a:
90:8a:e9:f0:43:e9:ee:3b:b4:56:a9:8e:60:db:4f:fd:0d:2a:
e1:84:24:d2:92:af:f2:f4:ca:ec:47:af:6f:a3:76:a6:75:76:
af:49:f0:13:76:55:45:af:c0:56:1d:cc:da:ba:55:8b:11:a5:
fb:ec:62:3e:b0:12:92:c0:50:95:5a:01:dd:c1:3e:95:5f:99:
ae:26:b7:ed:9a:09:61:b6:1b:03:79:75:81:d9:6a:d7:b9:1d:
e2:c9:9f:2b:6e:46:b8:74:57:65:e2:a5:95:1b:a1:4e:25:a5:
45:b4:29:4e:d1:3e:5f:a4:14:83:45:5c:5a:d7:95:9c:f3:53:
a4:20:85:91:d0:13:51:f9:5d:13:4a:7a:3e:cc:00:d0:e7:1f:
f5:0e:35:82:13:3b:6b:9b:df:a2:df:67:c7:41:09:fc:9f:5c:
e1:a5:b8:3e:8e:62:6c:e6:4a:92:d8:f3:fa:cb:45:74:73:64:
a2:78:71:df:67:73:34:ba:88:d0:0c:61:d0:4f:c1:78:55:ef:
19:02:c0:0c:31:88:d9:b1:e9:61:fb:f5:c5:c6:8f:ed:e3:e5:
7d:99:24:69:dc:d0:a6:e1:60:e6:6e:9a:ac:0b:83:b0:3d:6a:
15:15:da:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:29:16 2026 by rpki-client