Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS216050.roa
File: AS216050.roa (raw, json)
Hash identifier: o9KkbpKurHxhI09dL+6YFceu9fJXHfnqlyaiwu4npkI=
Subject key identifier: 48:60:12:7B:39:71:7B:E6:96:9E:7C:9A:9B:7C:7D:8D:68:67:4D:B1
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 579C9989A759974BA74202628479374EAEAC653B
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS216050.roa
Signing time: Thu 26 Jun 2025 06:57:35 +0000
ROA not before: Thu 26 Jun 2025 06:52:35 +0000
ROA not after: Thu 25 Jun 2026 06:57:35 +0000
asID: 216050
IP address blocks: 46.202.204.0/24 maxlen: 24
46.202.205.0/24 maxlen: 24
46.203.151.0/24 maxlen: 24
46.203.165.0/24 maxlen: 24
46.203.166.0/24 maxlen: 24
46.203.167.0/24 maxlen: 24
46.203.170.0/24 maxlen: 24
46.203.181.0/24 maxlen: 24
46.203.191.0/24 maxlen: 24
46.203.192.0/24 maxlen: 24
46.203.193.0/24 maxlen: 24
46.203.194.0/24 maxlen: 24
46.203.211.0/24 maxlen: 24
46.203.213.0/24 maxlen: 24
46.203.240.0/24 maxlen: 24
91.124.39.0/24 maxlen: 24
91.124.48.0/24 maxlen: 24
91.124.50.0/24 maxlen: 24
91.124.51.0/24 maxlen: 24
92.112.131.0/24 maxlen: 24
92.113.41.0/24 maxlen: 24
92.113.55.0/24 maxlen: 24
92.113.65.0/24 maxlen: 24
92.113.68.0/24 maxlen: 24
92.113.69.0/24 maxlen: 24
92.113.75.0/24 maxlen: 24
92.113.76.0/24 maxlen: 24
92.113.78.0/24 maxlen: 24
92.113.79.0/24 maxlen: 24
92.113.81.0/24 maxlen: 24
92.113.82.0/24 maxlen: 24
92.113.84.0/24 maxlen: 24
92.113.85.0/24 maxlen: 24
92.113.87.0/24 maxlen: 24
92.113.88.0/24 maxlen: 24
92.113.90.0/24 maxlen: 24
92.113.166.0/24 maxlen: 24
92.113.167.0/24 maxlen: 24
95.135.51.0/24 maxlen: 24
95.135.73.0/24 maxlen: 24
95.135.111.0/24 maxlen: 24
95.135.114.0/24 maxlen: 24
95.135.115.0/24 maxlen: 24
95.135.128.0/24 maxlen: 24
95.135.129.0/24 maxlen: 24
95.135.130.0/24 maxlen: 24
95.135.131.0/24 maxlen: 24
95.135.132.0/24 maxlen: 24
95.135.133.0/24 maxlen: 24
95.135.235.0/24 maxlen: 24
178.92.32.0/24 maxlen: 24
178.92.33.0/24 maxlen: 24
178.92.34.0/24 maxlen: 24
178.92.35.0/24 maxlen: 24
178.92.57.0/24 maxlen: 24
178.92.63.0/24 maxlen: 24
178.94.163.0/24 maxlen: 24
178.94.164.0/24 maxlen: 24
178.94.165.0/24 maxlen: 24
178.94.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:9c:99:89:a7:59:97:4b:a7:42:02:62:84:79:37:4e:ae:ac:65:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jun 26 06:52:35 2025 GMT
Not After : Jun 25 06:57:35 2026 GMT
Subject: CN=4860127B39717BE6969E7C9A9B7C7D8D68674DB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:19:37:f5:01:e0:20:a9:95:2a:5d:5c:06:de:
60:5c:e0:a2:d4:2b:e0:32:5a:54:4c:68:00:ed:67:
bf:ac:f0:40:77:34:c2:59:20:42:6d:92:88:54:17:
06:13:71:43:a6:b9:bb:76:fd:f8:66:da:29:9d:59:
c1:39:23:43:4b:ca:86:75:62:93:9c:59:12:08:32:
db:45:f7:39:c9:7c:ae:d3:4a:ea:02:81:c1:df:57:
00:e0:fc:f1:eb:5e:30:59:67:de:4e:52:2f:89:82:
26:c8:c3:5e:78:f9:3a:61:d7:24:97:da:e9:65:79:
01:b0:7d:cc:f5:45:b0:d6:59:f7:e7:77:12:00:67:
a7:ea:b5:11:d1:7d:8f:d3:a3:88:5d:72:3c:bb:e5:
d1:cd:22:83:2a:b7:ee:69:de:bd:d5:53:5a:02:f0:
f2:c4:6a:20:e6:5a:1f:4b:17:10:0b:4a:23:d3:4b:
08:d0:69:2f:94:c4:a4:8d:0f:c7:f7:c1:d4:30:13:
9f:54:6b:14:f3:52:df:58:24:a7:4d:35:72:e8:fb:
9d:1b:09:18:c9:8c:d8:da:b6:02:dd:62:7e:f9:7d:
c4:77:8e:5f:c4:cd:19:5d:e1:a0:7f:92:56:ec:25:
b3:eb:61:b7:d7:7a:2a:96:d5:c9:9c:13:b2:a9:f1:
af:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:60:12:7B:39:71:7B:E6:96:9E:7C:9A:9B:7C:7D:8D:68:67:4D:B1
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS216050.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.204.0/23
46.203.151.0/24
46.203.165.0-46.203.167.255
46.203.170.0/24
46.203.181.0/24
46.203.191.0-46.203.194.255
46.203.211.0/24
46.203.213.0/24
46.203.240.0/24
91.124.39.0/24
91.124.48.0/24
91.124.50.0/23
92.112.131.0/24
92.113.41.0/24
92.113.55.0/24
92.113.65.0/24
92.113.68.0/23
92.113.75.0-92.113.76.255
92.113.78.0/23
92.113.81.0-92.113.82.255
92.113.84.0/23
92.113.87.0-92.113.88.255
92.113.90.0/24
92.113.166.0/23
95.135.51.0/24
95.135.73.0/24
95.135.111.0/24
95.135.114.0/23
95.135.128.0-95.135.133.255
95.135.235.0/24
178.92.32.0/22
178.92.57.0/24
178.92.63.0/24
178.94.163.0-178.94.166.255
Signature Algorithm: sha256WithRSAEncryption
95:8c:bf:57:b3:34:50:d4:ed:c5:05:3e:e0:32:94:2e:ae:8e:
eb:f8:7a:5d:7b:67:a8:fc:16:78:bd:05:b3:df:da:1f:c1:02:
14:1e:4d:e8:8d:a6:09:b1:5b:63:23:d6:a6:bb:0c:80:3f:c0:
bf:f3:e3:cc:c6:9b:3e:e0:39:be:ec:dd:6d:25:6e:23:ab:d8:
d0:aa:3c:65:0c:b2:3e:73:69:2a:a5:3b:d8:fc:99:82:28:f8:
40:56:7c:fc:7e:fe:a9:11:b4:e3:55:ae:f2:db:70:8a:ec:cc:
db:9c:d3:be:f6:c4:dc:e9:ca:82:7a:d6:d0:9d:53:b1:28:68:
79:43:0a:20:42:b1:a7:f7:c1:81:5d:69:90:1a:b9:36:85:ff:
d7:a7:b7:04:7b:c8:1d:95:af:83:50:0f:bc:6f:90:67:d0:35:
d1:43:33:69:b9:ce:5a:ed:5f:5d:d5:84:3e:68:43:2e:04:99:
38:40:98:af:a8:53:74:aa:8d:40:8e:b1:87:d1:1b:95:b1:87:
89:5f:62:9c:94:78:66:e3:22:9b:f1:39:ac:6a:61:81:9e:a0:
f5:e7:48:41:b9:4f:ab:2f:5d:2b:4f:14:3e:c3:8d:6f:d4:e7:
bf:0d:d9:33:f5:3e:20:c8:69:84:94:9b:fd:35:e1:a6:72:84:
72:57:e4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 05:02:45 2025 by rpki-client