Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS216121.roa
File: AS216121.roa (raw, json)
Hash identifier: hyUNqbO5VUifdMqDeRr9bxWU/p9udlvXSYQ9yrIjG3g=
Subject key identifier: 07:48:5F:19:09:7C:7D:7E:3B:1D:0A:28:14:9C:B1:CD:CC:2E:98:C7
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 1DD9FF90E0D23812CC81EE3A23DC202D935CC372
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS216121.roa
Signing time: Thu 03 Sep 2026 08:49:32 +0000
ROA not before: Thu 03 Sep 2026 08:44:32 +0000
ROA not after: Thu 02 Sep 2027 08:49:32 +0000
asID: 216121
IP address blocks: 143.14.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:d9:ff:90:e0:d2:38:12:cc:81:ee:3a:23:dc:20:2d:93:5c:c3:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 3 08:44:32 2026 GMT
Not After : Sep 2 08:49:32 2027 GMT
Subject: CN=07485F19097C7D7E3B1D0A28149CB1CDCC2E98C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:29:8e:33:47:54:95:c8:0f:d5:cb:85:fb:d5:
ef:15:d0:17:f9:2b:9a:db:40:1c:68:af:7f:65:0c:
74:7a:91:47:1f:79:0c:c0:3c:da:f5:84:90:9a:6d:
97:95:57:ae:bc:e1:20:44:15:87:ee:7a:3c:75:3e:
65:53:a1:27:60:c1:9e:51:b6:0d:80:14:b0:5f:e4:
bb:c3:c9:94:fd:ee:b8:f1:68:a0:fa:54:6d:82:19:
59:5d:58:fa:94:e5:65:2a:0c:34:87:f4:22:3c:d4:
49:65:88:ce:7a:34:22:55:e4:0f:c7:fb:a3:f6:12:
3c:65:7c:ae:17:ad:ac:17:2c:70:a5:d9:46:58:bf:
21:18:d9:04:c0:06:03:a0:6c:97:eb:2f:04:bc:ed:
ba:8a:b8:72:d6:8a:60:f8:9b:af:20:13:38:9f:bf:
25:0d:6a:de:b8:fb:ee:18:97:4f:14:ce:72:89:a5:
24:05:2d:0b:1c:52:2a:24:7f:2b:f2:8d:a0:44:23:
b8:73:25:2c:43:e2:16:63:29:d2:71:87:8d:30:cb:
29:71:ec:23:51:29:6e:1f:16:48:f9:8d:25:dc:a1:
81:4d:b7:ce:0b:e8:c2:7b:77:fa:c8:4d:b2:82:9e:
cb:9a:d6:36:4d:93:2d:60:9c:00:d9:6a:72:ab:b5:
f0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:48:5F:19:09:7C:7D:7E:3B:1D:0A:28:14:9C:B1:CD:CC:2E:98:C7
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS216121.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.89.0/24
Signature Algorithm: sha256WithRSAEncryption
44:8c:62:fc:fb:ea:76:f4:02:ab:c1:82:d6:67:9f:1a:b9:c0:
fe:72:b4:73:bc:b7:72:fe:1d:f8:66:83:bd:56:c1:eb:a5:17:
83:b9:20:71:31:71:f0:1c:a1:3c:22:2a:75:7a:9a:5b:dc:0b:
72:67:12:1b:bf:e4:24:04:5b:fd:ee:f5:55:4c:76:e4:96:c6:
40:35:1d:46:21:8e:a4:37:9c:a8:bf:10:14:85:35:f8:5f:8a:
df:63:17:ac:b8:e0:53:89:ff:67:97:0c:53:7c:bb:6e:64:6b:
05:0e:f6:0d:b1:0f:28:af:c6:94:5f:45:38:b8:55:84:19:22:
f6:dd:74:ba:19:e1:05:70:43:5e:f2:ad:62:e0:4e:bf:0d:ff:
38:32:0d:0a:eb:32:d3:18:60:a4:48:e2:d0:92:be:b0:5b:57:
9b:ec:b2:08:e7:96:21:c6:29:80:a7:0b:f2:00:44:7d:2d:75:
31:5d:34:1d:f6:fe:f5:57:e6:46:36:46:28:13:b9:fc:46:d1:
64:5c:9a:8c:20:d0:3d:d9:ac:11:cd:73:05:33:00:8e:18:1f:
13:d2:1c:b8:8f:21:29:59:bc:21:9f:6e:d6:ed:c0:92:42:16:
bd:1d:8f:88:53:9a:63:71:50:bc:9d:c0:47:ce:7a:76:87:f0:
2c:79:cb:ce
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUHdn/kODSOBLMge46I9wgLZNcw3IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA5MDMwODQ0MzJaFw0yNzA5MDIwODQ5MzJaMDMxMTAvBgNV
BAMTKDA3NDg1RjE5MDk3QzdEN0UzQjFEMEEyODE0OUNCMUNEQ0MyRTk4QzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyKY4zR1SVyA/Vy4X71e8V0Bf5
K5rbQBxor39lDHR6kUcfeQzAPNr1hJCabZeVV6684SBEFYfuejx1PmVToSdgwZ5R
tg2AFLBf5LvDyZT97rjxaKD6VG2CGVldWPqU5WUqDDSH9CI81ElliM56NCJV5A/H
+6P2EjxlfK4XrawXLHCl2UZYvyEY2QTABgOgbJfrLwS87bqKuHLWimD4m68gEzif
vyUNat64++4Yl08UznKJpSQFLQscUiokfyvyjaBEI7hzJSxD4hZjKdJxh40wyylx
7CNRKW4fFkj5jSXcoYFNt84L6MJ7d/rITbKCnsua1jZNky1gnADZanKrtfDrAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUB0hfGQl8fX47HQooFJyxzcwumMcwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjE2MTIxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjw5Z
MA0GCSqGSIb3DQEBCwUAA4IBAQBEjGL8++p29AKrwYLWZ58aucD+crRzvLdy/h34
ZoO9VsHrpReDuSBxMXHwHKE8Iip1eppb3AtyZxIbv+QkBFv97vVVTHbklsZANR1G
IY6kN5yovxAUhTX4X4rfYxesuOBTif9nlwxTfLtuZGsFDvYNsQ8or8aUX0U4uFWE
GSL23XS6GeEFcENe8q1i4E6/Df84Mg0K6zLTGGCkSOLQkr6wW1eb7LII55YhximA
pwvyAER9LXUxXTQd9v71V+ZGNkYoE7n8RtFkXJqMINA92awRzXMFMwCOGB8T0hy4
jyEpWbwhn27W7cCSQha9HY+IU5pjcVC8ncBHznp2h/AsecvO
-----END CERTIFICATE-----
Generated at Sun Sep 20 14:50:37 2026 by rpki-client