Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS216138.roa
File: AS216138.roa (raw, json)
Hash identifier: Jd+G+3mlI2guvOHEye5pafEmCQu1oK063cjLe2LivSw=
Subject key identifier: 60:3F:0A:9B:9A:6C:51:B4:B2:EE:C0:C7:51:E1:B8:6C:3F:A1:0D:9C
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 98CEFB0366EAEB350F06B87F70B7B77F3C4F5E
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS216138.roa
Signing time: Tue 28 Oct 2025 08:24:59 +0000
ROA not before: Tue 28 Oct 2025 08:19:59 +0000
ROA not after: Tue 27 Oct 2026 08:24:59 +0000
asID: 216138
IP address blocks: 96.62.0.0/19 maxlen: 24
96.62.85.0/24 maxlen: 24
148.135.234.0/23 maxlen: 24
148.135.240.0/23 maxlen: 24
150.241.162.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
98:ce:fb:03:66:ea:eb:35:0f:06:b8:7f:70:b7:b7:7f:3c:4f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 28 08:19:59 2025 GMT
Not After : Oct 27 08:24:59 2026 GMT
Subject: CN=603F0A9B9A6C51B4B2EEC0C751E1B86C3FA10D9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ac:18:d1:77:74:d7:98:89:dd:63:c2:9f:47:
bd:b9:0e:21:af:5f:e5:1e:85:ac:25:ac:ae:6f:99:
34:e1:38:a9:e6:20:0d:3c:2e:35:ac:2d:aa:0f:bd:
00:c7:71:76:7c:b1:69:a1:53:61:14:e8:de:a9:13:
31:0e:af:78:12:8e:d2:2f:1a:ce:61:97:47:9b:95:
43:9a:b9:b1:3a:93:1e:73:02:89:38:85:9f:6b:f5:
e3:4c:a7:d8:49:1b:06:f2:65:1d:63:5f:d3:82:a6:
8e:19:bb:05:1f:32:8e:81:19:42:b6:40:2d:89:9b:
f7:ac:82:d2:a3:35:fb:94:82:4a:2a:34:af:ed:8c:
aa:f2:dd:c7:bb:9b:44:98:8a:28:06:18:8b:1f:13:
69:85:6a:5f:59:2d:16:bb:37:44:3e:9a:20:d3:14:
01:f3:1e:62:06:69:c2:0d:93:00:7b:97:70:cb:b2:
e4:c4:f9:ef:a7:88:ea:e7:2d:aa:68:2e:93:d7:0e:
a4:f7:b8:61:6a:02:bb:f1:bb:8c:f5:d3:a9:dd:94:
24:99:54:a2:96:ff:d5:85:07:34:ae:e8:f2:7a:ce:
8a:15:1f:14:dc:de:6a:c5:a2:b0:70:79:d6:3d:91:
b8:d8:a3:62:68:be:6b:3b:52:d3:19:9b:44:bb:12:
74:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:3F:0A:9B:9A:6C:51:B4:B2:EE:C0:C7:51:E1:B8:6C:3F:A1:0D:9C
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS216138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.0.0/19
96.62.85.0/24
148.135.234.0/23
148.135.240.0/23
150.241.162.0/23
Signature Algorithm: sha256WithRSAEncryption
75:7c:ab:1d:d1:16:d6:6f:cc:a1:d3:09:8c:6a:e3:99:e5:19:
e7:f9:07:ef:66:a0:19:cf:d3:1a:f2:e4:28:c2:c2:55:0e:4c:
26:a5:e9:6d:4f:5c:c4:4a:b1:f3:96:df:bf:f0:62:3a:40:08:
fb:a4:e0:74:e3:b8:7a:53:65:f4:6a:47:07:3c:62:21:1e:46:
cb:84:ff:5b:43:ef:8d:4a:4c:3b:7b:37:c0:ee:cb:46:a5:0f:
1a:68:aa:18:54:65:34:ba:95:fe:29:22:90:a6:8f:b5:fe:21:
27:ab:05:31:02:48:37:ab:2f:80:f0:9d:ff:74:ed:b9:f0:26:
8c:86:cb:3f:96:f7:cc:bd:3b:8a:96:9b:9f:7b:8a:4f:a4:69:
d0:6a:3f:34:8d:b1:e8:46:0d:6b:13:57:4d:f3:37:67:b5:54:
73:f4:07:c2:0b:fd:19:d1:14:0a:47:ad:ce:47:33:72:b5:3a:
68:62:d0:9c:3b:80:63:19:f9:48:da:96:92:06:0b:df:d1:5a:
52:62:20:e1:ce:b9:c8:9a:a7:89:41:8d:ff:2e:f9:c1:d4:c4:
a8:2c:85:8e:f0:10:42:7a:3b:12:77:60:1e:93:9a:11:c1:28:
54:5e:2e:45:73:76:26:4e:f7:57:d7:96:76:7a:b0:dd:b4:a2:
04:61:b2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:54:45 2025 by rpki-client