Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS216147.roa
File: AS216147.roa (raw, json)
Hash identifier: FrNJ9FMcqe3NAPgl82HdNeB+2psnwFz4vKlCGyA4XKo=
Subject key identifier: 81:12:A8:C9:14:73:0A:CE:F8:5F:C4:30:5F:E2:07:C0:D9:12:4D:12
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 2591A06373FCC16C09227FA430ADF974699B4C2A
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS216147.roa
Signing time: Sat 23 May 2026 12:47:16 +0000
ROA not before: Sat 23 May 2026 12:42:16 +0000
ROA not after: Sat 22 May 2027 12:47:16 +0000
asID: 216147
IP address blocks: 147.79.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 19:43:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:91:a0:63:73:fc:c1:6c:09:22:7f:a4:30:ad:f9:74:69:9b:4c:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: May 23 12:42:16 2026 GMT
Not After : May 22 12:47:16 2027 GMT
Subject: CN=8112A8C914730ACEF85FC4305FE207C0D9124D12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:88:81:21:d0:8b:f6:33:75:2d:f2:7f:e9:00:
97:20:18:fd:c8:75:8b:38:9b:20:a1:4f:cb:c3:0a:
69:64:c6:aa:44:70:22:57:1d:43:98:c2:6c:61:e0:
8d:96:82:1a:51:19:7b:9e:bb:9a:10:1d:5d:3d:0e:
7f:82:71:82:7e:3d:40:e1:96:9e:a5:24:9b:d8:59:
1e:b6:e5:4a:39:8a:ef:bf:e5:fc:03:5b:92:d4:fd:
3b:15:48:a1:6f:f5:ca:3c:0c:64:cb:8e:10:6d:e9:
ad:34:bf:25:25:0e:e0:0d:2d:3b:2e:cb:41:12:80:
67:e1:a5:03:c4:ae:6e:08:6a:6a:5d:ba:c0:c4:2c:
70:05:fe:69:fe:85:9a:ba:6f:8a:e9:0f:f5:82:d3:
59:0d:a5:19:c5:07:87:4a:51:38:c5:58:d9:4f:fd:
04:74:25:fa:d7:c8:91:7e:4c:4b:41:7b:04:d7:b0:
92:40:04:7c:dd:c2:65:6b:38:7d:24:20:cb:6c:0e:
5c:52:6e:04:71:7a:29:61:c8:5d:b6:e1:42:d5:13:
8d:91:3e:ed:44:11:8d:92:e1:ab:fe:e2:e1:42:60:
46:e5:bd:7c:a7:0a:12:a2:04:04:0c:de:04:a0:60:
37:6d:8a:aa:19:4d:7a:83:ff:38:4b:ca:08:e3:ae:
ba:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:12:A8:C9:14:73:0A:CE:F8:5F:C4:30:5F:E2:07:C0:D9:12:4D:12
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS216147.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.79.21.0/24
Signature Algorithm: sha256WithRSAEncryption
91:0d:1e:9a:60:44:58:18:d8:4c:9a:58:e5:b7:ec:b3:1e:46:
74:c7:2b:f2:4c:17:4a:3a:ef:c5:d8:28:9e:e5:75:3f:0e:9c:
63:6a:b3:95:78:71:d9:67:5a:50:88:0c:41:cc:8f:31:db:23:
41:6b:11:1b:61:08:e3:9e:71:72:4d:06:b0:c1:25:4e:47:55:
d7:44:38:67:80:de:76:3d:32:ff:7f:5a:df:fe:68:03:9d:f9:
a3:9f:6f:d0:d5:9f:8c:b5:40:fa:f6:19:22:15:3b:db:66:b5:
63:b8:4d:04:2d:cf:63:74:c3:37:62:71:de:08:03:94:90:84:
e2:72:ba:1c:27:d2:29:a4:4c:a8:73:4d:19:4f:7e:1f:d9:a6:
95:27:65:52:bd:7c:24:62:c6:47:45:67:c3:ab:bb:6d:a3:c7:
b1:f1:95:6b:92:b7:3b:e4:c5:ba:fe:88:9c:03:0a:b6:de:bb:
ef:ad:d3:ed:7a:04:cb:bf:0d:09:f8:92:f7:39:2e:ea:41:18:
f1:4c:7a:47:c1:29:1d:fc:72:31:02:b1:7a:ec:bd:7f:1a:97:
1c:e2:9c:4e:12:64:a5:09:43:30:f5:ce:fb:99:aa:60:4d:df:
34:f0:e5:d9:85:57:2e:0e:32:1b:c5:de:c4:ef:ec:63:97:9f:
ed:e9:c2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:13:47 2026 by rpki-client