Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS16509.roa
File: AS16509.roa (raw, json)
Hash identifier: FoSSYBkUI+n77C1fMvuIaaZHLRCUc/kRKBZwEKMnuko=
Subject key identifier: 50:8A:D1:EE:8F:8F:EA:96:92:6F:6B:4B:22:BC:9D:5E:37:38:B4:04
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 0DEB2F56ACC4D79B6967E1B9FF0F402D4F8B13F1
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS16509.roa
Signing time: Wed 16 Sep 2026 08:08:44 +0000
ROA not before: Wed 16 Sep 2026 08:03:44 +0000
ROA not after: Wed 15 Sep 2027 08:08:44 +0000
asID: 16509
IP address blocks: 181.214.94.0/24 maxlen: 24
181.214.110.0/24 maxlen: 24
181.215.206.0/23 maxlen: 24
185.137.13.0/24 maxlen: 24
191.96.204.0/24 maxlen: 24
191.101.111.0/24 maxlen: 24
2a00:d1a0:10::/48 maxlen: 48
2a00:d1a0:11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:20:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:eb:2f:56:ac:c4:d7:9b:69:67:e1:b9:ff:0f:40:2d:4f:8b:13:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 16 08:03:44 2026 GMT
Not After : Sep 15 08:08:44 2027 GMT
Subject: CN=508AD1EE8F8FEA96926F6B4B22BC9D5E3738B404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c5:a2:f1:fb:ad:89:ea:ff:95:db:61:ba:3c:
f7:b8:a6:c5:a0:4e:51:53:a6:30:28:6a:20:f9:51:
00:eb:98:ad:53:e4:71:f1:50:6a:33:1c:90:3b:a5:
8c:46:d6:f6:21:b7:dc:7f:d0:80:2b:56:1f:19:48:
a5:0a:03:e2:c9:8e:75:f5:8c:ac:69:8c:32:e2:50:
4c:77:a1:d5:0b:f8:65:37:7a:26:66:0c:0c:48:58:
fa:a8:43:ee:41:3f:9e:2f:a7:37:db:a4:d9:4c:2e:
54:8a:5c:94:93:8c:e4:27:58:53:02:ea:67:cb:eb:
dd:49:3b:a8:9e:60:a1:ab:02:eb:fb:ef:85:91:c4:
29:8d:fc:8e:0c:5f:8d:22:cb:ea:94:07:f1:30:aa:
17:0a:f4:41:a6:09:c5:fa:a8:78:63:bc:dd:5f:10:
63:6a:ed:39:a2:73:49:af:0b:d8:f6:6d:2d:51:33:
04:54:ea:e5:d0:f9:46:d5:29:3f:fe:bf:69:33:6b:
34:43:05:64:d5:8a:26:44:69:79:67:f4:ad:4b:0b:
a0:42:04:ff:59:6a:a0:63:7a:08:61:72:f7:59:f2:
b3:c1:4f:42:e6:c0:68:d3:31:53:55:00:b4:32:f2:
38:c7:8e:f4:4c:b9:7f:02:4a:47:c0:57:9e:72:b4:
ac:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:8A:D1:EE:8F:8F:EA:96:92:6F:6B:4B:22:BC:9D:5E:37:38:B4:04
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS16509.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.94.0/24
181.214.110.0/24
181.215.206.0/23
185.137.13.0/24
191.96.204.0/24
191.101.111.0/24
IPv6:
2a00:d1a0:10::/47
Signature Algorithm: sha256WithRSAEncryption
aa:a8:af:18:69:79:37:49:8e:58:3d:a3:26:90:ef:d1:ac:88:
9b:f2:5f:04:8d:46:32:88:82:40:f4:33:4b:4e:e2:8d:0a:83:
73:f4:dd:3c:bf:54:41:48:89:0c:fb:d0:96:73:fa:23:19:ad:
8b:bb:1d:d2:d9:18:0e:b4:77:68:89:fd:a2:c8:86:cd:3a:e3:
11:6d:f6:f1:9c:b4:de:61:2b:8e:4d:12:4f:93:19:b1:8d:2f:
11:e9:86:1f:98:f9:02:52:e1:f1:be:d0:c9:f7:3e:f2:64:4f:
a5:a3:35:5f:59:95:91:ee:05:99:41:e8:df:d3:34:08:3a:cf:
ee:5d:19:72:86:b3:e1:ab:6a:a6:0a:97:d9:e6:0f:28:0f:8e:
8c:2c:e7:d9:8b:dc:fc:39:d2:19:6a:65:6f:42:4f:48:e4:66:
98:bf:dc:9a:df:ee:95:1c:40:1c:75:30:77:d9:d8:c3:80:64:
d7:e2:4e:08:dd:35:73:c4:b0:e0:89:76:6c:1e:10:f7:37:0d:
40:c1:14:4f:74:6d:e8:86:21:2b:8f:5d:09:dc:49:fa:e9:97:
d3:c5:63:dc:c2:3f:50:a6:e7:2c:05:06:09:7d:34:d2:b7:15:
e3:87:32:d5:01:19:c5:53:8d:b7:e5:47:15:9e:46:7f:29:04:
e6:ec:cb:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:03:19 2026 by rpki-client