Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS216405.roa
File: AS216405.roa (raw, json)
Hash identifier: S1kueXjpQ605I19e1D8kKRJ+sdo631sLQrFo9Qb9ZTQ=
Subject key identifier: 7D:4E:E2:6F:A7:E7:57:E4:73:9F:82:23:DD:F2:1F:08:3B:4E:E0:C0
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 224513B40EFAEDE7D450B196D7C88BBEB75887E0
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS216405.roa
Signing time: Wed 16 Sep 2026 07:25:21 +0000
ROA not before: Wed 16 Sep 2026 07:20:21 +0000
ROA not after: Wed 15 Sep 2027 07:25:21 +0000
asID: 216405
IP address blocks: 212.74.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:45:13:b4:0e:fa:ed:e7:d4:50:b1:96:d7:c8:8b:be:b7:58:87:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Sep 16 07:20:21 2026 GMT
Not After : Sep 15 07:25:21 2027 GMT
Subject: CN=7D4EE26FA7E757E4739F8223DDF21F083B4EE0C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cd:f8:61:13:1e:a8:0e:ad:e1:c9:55:fb:4e:
aa:41:da:23:5b:c4:15:0a:e4:4a:7c:04:8e:ac:c1:
98:0f:89:32:00:a5:cf:25:e8:fb:de:c7:a2:78:9e:
b3:39:ad:2d:18:21:b8:f0:60:d3:0f:31:dd:a0:96:
02:7b:19:a1:c5:b7:64:90:00:86:b2:f0:1e:97:8f:
d2:02:67:57:f7:4e:2b:d8:ca:d8:1c:50:ef:3e:94:
a2:ee:ad:0d:3e:3b:50:85:a3:e6:cc:54:18:bd:76:
94:60:e8:45:1a:dc:b6:18:d6:08:1b:12:39:c7:9b:
27:ad:c9:96:ef:98:d7:5e:6e:0e:0a:72:2e:cf:10:
fd:1f:45:2a:01:e5:88:a3:73:12:d9:a6:46:fd:18:
4e:15:c8:13:55:f7:05:bd:20:9a:3e:d0:80:dd:ca:
8f:0f:b0:91:ec:b3:96:bd:58:0b:09:eb:d7:c4:4a:
cc:0d:38:48:2e:38:03:8a:ca:2c:ee:fb:7c:cd:5f:
7d:cc:47:c5:a4:e3:31:e9:e2:b1:00:6a:d5:bc:86:
44:e3:84:e2:a2:43:de:46:66:7b:46:45:5c:35:79:
a5:cf:06:c1:92:0c:9b:72:5f:f4:40:af:80:3c:17:
10:fb:13:f7:ce:5a:31:76:32:60:bf:57:ae:2e:d1:
62:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:4E:E2:6F:A7:E7:57:E4:73:9F:82:23:DD:F2:1F:08:3B:4E:E0:C0
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS216405.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.74.33.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:52:80:f9:53:4e:f9:43:7a:9e:a9:2b:cb:f0:a6:31:8e:da:
14:88:2d:9f:b6:79:79:de:c5:4b:bf:57:ad:b1:ce:3d:25:5d:
b1:06:87:6c:4f:11:d1:04:fe:94:6c:80:d2:a8:05:90:2a:db:
4a:ff:44:ec:3b:5e:2d:06:76:4c:24:2c:65:6d:ec:53:f6:db:
a8:49:96:89:f6:3b:c4:27:3f:ef:62:50:62:36:be:1e:49:97:
23:99:49:5b:ec:1d:54:54:43:f3:be:48:e7:60:89:74:87:bd:
cb:d6:0a:61:fd:b9:51:2a:d8:0c:bb:c8:5f:34:2b:9c:75:79:
56:dc:4b:d8:21:4a:68:1c:db:a0:76:b0:d5:78:5a:58:af:15:
98:1e:95:46:1b:62:a2:82:8a:72:cf:47:f5:50:7b:99:6d:4a:
c3:5e:09:fc:c1:a4:9d:93:b5:85:d4:0e:08:d0:9b:54:23:46:
e7:09:95:4a:57:a7:cd:e9:95:91:dc:51:58:36:41:70:01:c3:
b1:61:6f:99:e8:59:97:97:49:f7:6a:f1:5f:e9:6d:24:64:35:
33:a0:88:8d:fd:f2:80:c4:1c:88:aa:d0:bf:cf:6c:a9:94:13:
b7:eb:05:45:79:ce:6d:a7:35:7b:4a:a4:d3:3e:2c:46:21:29:
f4:3c:9f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:14:04 2026 by rpki-client