Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS16509.roa
File: AS16509.roa (raw, json)
Hash identifier: +YXeT9aPIYKCloNKTt351on6F9PGmHfWHgnzTKLJ3DI=
Subject key identifier: 9D:0F:A1:8C:55:37:C7:96:B3:B3:C1:D1:A6:0C:D1:C7:E6:4A:23:EC
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 7AC6D01306937E69D759C6BF6EBD1FA3BD1D1B9E
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS16509.roa
Signing time: Thu 05 Nov 2026 10:01:24 +0000
ROA not before: Thu 05 Nov 2026 09:56:24 +0000
ROA not after: Thu 04 Nov 2027 10:01:24 +0000
asID: 16509
IP address blocks: 181.214.94.0/24 maxlen: 24
181.214.110.0/24 maxlen: 24
185.137.13.0/24 maxlen: 24
191.96.204.0/24 maxlen: 24
191.101.111.0/24 maxlen: 24
2a00:d1a0:10::/48 maxlen: 48
2a00:d1a0:11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:c6:d0:13:06:93:7e:69:d7:59:c6:bf:6e:bd:1f:a3:bd:1d:1b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Nov 5 09:56:24 2026 GMT
Not After : Nov 4 10:01:24 2027 GMT
Subject: CN=9D0FA18C5537C796B3B3C1D1A60CD1C7E64A23EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:df:18:5d:c5:15:fd:a5:d7:1a:8a:65:48:16:
cc:3a:23:1f:fc:c1:b9:e3:cc:51:9c:a9:19:d6:0d:
a8:3d:39:1c:16:77:59:99:99:8c:be:84:1f:51:f7:
b3:07:88:d5:b0:75:03:1a:b3:0b:72:e4:5f:be:45:
a8:9f:4d:5c:75:7e:ce:62:6e:f7:23:8c:16:a3:ec:
13:da:bf:6f:56:b5:fa:37:ed:b5:ee:a6:e7:bf:bb:
35:77:7b:9e:42:bb:a9:18:b2:64:2c:aa:87:23:26:
49:39:3f:05:7e:26:b2:87:d3:f9:ff:55:d2:f2:89:
41:aa:23:aa:91:d5:e2:b4:9e:60:d4:20:5a:90:7e:
89:d9:5c:78:43:04:f8:4b:46:45:7f:da:14:65:84:
f8:7b:12:97:75:75:7c:6b:f4:14:64:6e:60:7f:12:
30:3a:ff:be:8e:74:0f:2a:1b:48:e7:18:87:3f:8c:
b4:98:90:0c:af:f1:ef:a7:b3:d2:e4:ce:92:bf:72:
0a:ba:06:25:d5:8e:d9:be:77:e5:63:08:d6:d1:21:
eb:d4:36:17:42:cb:76:c7:8f:35:49:ba:a9:00:b7:
dd:e0:1c:dd:48:ca:84:68:84:78:83:01:98:9c:f6:
81:05:5d:c8:63:05:65:1c:55:d7:de:ac:3f:da:c8:
ca:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:0F:A1:8C:55:37:C7:96:B3:B3:C1:D1:A6:0C:D1:C7:E6:4A:23:EC
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS16509.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.94.0/24
181.214.110.0/24
185.137.13.0/24
191.96.204.0/24
191.101.111.0/24
IPv6:
2a00:d1a0:10::/47
Signature Algorithm: sha256WithRSAEncryption
18:fc:2b:06:4d:ed:02:37:80:33:3f:56:4a:f9:bc:1f:a7:e7:
b3:2b:dc:91:19:6c:be:2d:a7:27:e7:fa:86:9f:3f:98:e3:9d:
1b:38:1e:ce:b1:52:e4:67:59:05:25:fc:ea:a3:2f:ce:10:c5:
c1:46:df:29:2b:5b:00:f8:06:6d:9f:05:0b:a2:07:6f:a8:e6:
2f:b5:a3:c7:65:60:ec:f6:3c:ee:a4:d3:d6:09:1f:05:55:4f:
47:d4:9a:c8:de:2a:24:0e:0c:3f:f6:ef:12:79:29:cc:55:55:
2b:fc:fc:1e:16:43:f1:10:56:c4:28:3a:18:88:1c:cc:71:5f:
50:ab:1b:60:c7:7d:26:31:85:b4:92:d3:70:14:79:6a:9c:0b:
4a:95:74:61:8a:5f:b3:d4:e9:d7:09:54:61:4c:be:1a:b1:d1:
49:cb:f1:84:dd:c4:5a:86:17:41:ce:33:72:87:32:31:59:b2:
79:78:15:b0:5d:a8:ab:88:06:0f:a7:45:7e:d7:d4:e7:5a:be:
5d:8a:cb:b9:e9:9f:55:8b:9c:63:6a:eb:a2:92:35:48:aa:61:
20:8b:bf:1a:e2:de:be:2a:2b:97:bc:72:e3:78:e8:36:3a:0a:
81:b8:f2:09:e6:16:b4:d1:e5:12:72:d6:83:dd:1a:14:8a:f6:
a6:b1:63:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:19:53 2026 by rpki-client