Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS216145.roa
File: AS216145.roa (raw, json)
Hash identifier: W7OZq339aZSqDajKP879qfvUt4+7JvJSPiD43oFWt8I=
Subject key identifier: 3D:E0:93:6E:17:F8:1A:4E:19:27:C7:8F:B4:45:B8:05:86:CA:82:4C
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 1D87A2FAC559B5D52D6DFE78721A931EE94DE76F
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS216145.roa
Signing time: Fri 06 Mar 2026 15:19:13 +0000
ROA not before: Fri 06 Mar 2026 15:14:13 +0000
ROA not after: Fri 05 Mar 2027 15:19:13 +0000
asID: 216145
IP address blocks: 46.203.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:87:a2:fa:c5:59:b5:d5:2d:6d:fe:78:72:1a:93:1e:e9:4d:e7:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Mar 6 15:14:13 2026 GMT
Not After : Mar 5 15:19:13 2027 GMT
Subject: CN=3DE0936E17F81A4E1927C78FB445B80586CA824C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b0:39:ee:04:3c:3e:74:99:a6:65:b1:ee:63:
42:23:c8:1a:12:43:13:5e:4c:29:ed:23:18:b2:10:
89:50:fd:d1:15:94:c9:7a:5d:29:c9:f2:c3:14:ef:
48:1d:b1:72:6d:f5:27:de:52:5f:cc:10:7a:75:a1:
c3:10:56:e6:ff:63:45:89:d6:d6:f6:9f:ca:43:0f:
16:49:c3:9e:3e:01:45:35:7b:ad:3f:cb:be:d1:45:
f0:dd:13:02:ff:7f:d7:56:3e:71:26:95:f8:41:40:
6b:1b:b4:d9:c7:7a:d1:1e:8b:fa:b8:e8:28:fe:c4:
7e:4c:89:00:21:12:9a:a1:a7:49:b9:82:61:96:60:
30:c5:9a:bf:45:89:f9:20:7b:16:b6:df:7e:f4:f0:
bf:b8:db:59:93:f1:14:37:b9:39:e8:32:30:dc:5e:
28:98:b0:d4:98:a7:ad:e1:06:72:43:25:26:b9:66:
c8:8e:d2:0b:52:50:cd:a5:31:dc:50:ef:ed:6b:e4:
00:d4:19:78:f2:eb:96:b6:d9:9c:53:2b:dd:e9:4b:
de:44:7a:b8:cb:c9:2f:42:82:d2:c3:fc:92:2e:4d:
ab:45:ef:7a:27:b0:61:fe:59:f7:e3:6d:66:51:d6:
eb:1b:4d:61:a1:e6:71:9b:30:21:1b:e3:20:bf:2e:
02:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E0:93:6E:17:F8:1A:4E:19:27:C7:8F:B4:45:B8:05:86:CA:82:4C
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS216145.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.75.0/24
Signature Algorithm: sha256WithRSAEncryption
70:bd:35:1d:2a:2f:46:14:47:7c:1f:83:90:9f:51:3e:1a:d7:
53:e4:e3:55:86:c2:3e:c0:18:0e:de:75:56:f2:57:a8:01:fe:
ca:81:41:4f:94:8d:02:58:2c:f7:04:f3:e4:21:ad:83:d8:7b:
94:77:f3:8b:12:a9:c5:a4:a5:81:31:d5:31:8e:e6:ad:99:c5:
8c:89:b7:fb:92:b6:3c:68:5e:af:1b:f7:02:a8:38:a2:49:e0:
f8:9e:18:c6:a2:27:62:78:99:4f:cb:4f:2c:99:b7:81:d8:a2:
e7:2e:b7:4d:fc:3e:9a:53:a6:64:b1:e1:55:79:8f:26:20:aa:
1c:3a:99:a3:68:7c:8b:44:a0:27:31:b1:0c:55:8d:f3:31:3a:
61:9e:2c:de:f2:4b:68:ea:43:d0:11:50:4f:b7:b3:84:bc:3d:
b7:1b:f3:6a:92:a4:95:80:3d:87:cf:9f:4c:fe:8d:d4:eb:9d:
76:04:64:e0:14:01:80:1c:8d:44:40:d2:f6:b4:15:41:4f:63:
90:4e:ff:73:33:c6:da:d1:95:b2:05:2d:35:de:9f:ac:4f:6c:
f4:a9:ab:0d:8a:3b:62:ff:6e:c8:23:d9:42:3f:48:2d:d6:a3:
fb:fb:69:80:bb:ab:f2:aa:f7:36:3c:45:3f:8c:6f:34:01:cf:
23:e8:27:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:18:35 2026 by rpki-client