Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS16509.roa
File: AS16509.roa (raw, json)
Hash identifier: J73gc2BTjQcU+1IbZm3OqSiYY8mRa9hrlzDEs/RCyM0=
Subject key identifier: 48:C7:C1:8D:50:F9:C6:52:4D:E9:93:02:4C:82:2E:EB:F7:36:4E:98
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 79A05A1A5303E9AFD1F67075198B102CE1728D7C
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS16509.roa
Signing time: Thu 31 Jul 2025 00:01:57 +0000
ROA not before: Wed 30 Jul 2025 23:56:57 +0000
ROA not after: Thu 30 Jul 2026 00:01:57 +0000
asID: 16509
IP address blocks: 45.155.17.0/24 maxlen: 24
193.151.181.0/24 maxlen: 24
193.164.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 00:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:a0:5a:1a:53:03:e9:af:d1:f6:70:75:19:8b:10:2c:e1:72:8d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jul 30 23:56:57 2025 GMT
Not After : Jul 30 00:01:57 2026 GMT
Subject: CN=48C7C18D50F9C6524DE993024C822EEBF7364E98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:58:20:d5:b0:99:20:4c:b8:37:e6:1a:4a:0e:
ca:ec:b9:a1:29:73:b5:f1:d6:62:37:5e:3f:8e:24:
15:97:47:16:40:cb:1b:cb:88:c4:df:9a:39:c7:18:
60:5f:1f:d2:45:aa:81:67:38:c2:f0:e7:fa:aa:87:
ef:4d:b8:d0:9b:85:62:8d:aa:fd:56:ca:b8:d6:34:
50:42:ce:da:e2:45:5a:bf:6b:c7:46:d0:1e:2a:2c:
5c:cc:11:5b:16:44:99:c9:b6:c5:a3:eb:d4:9c:df:
53:ed:60:05:36:b0:fc:28:2c:79:c6:c2:71:80:c4:
65:d9:0e:e9:c5:85:d0:95:46:bc:83:81:97:8b:25:
2a:d4:fa:8f:17:be:3e:5a:30:89:5f:a6:f7:ce:95:
bf:79:8e:f0:fd:65:32:dd:54:1e:eb:f3:cc:24:ff:
a3:1a:51:c4:e4:6c:81:8d:cb:db:be:5b:3a:46:39:
58:46:b3:fa:04:63:ff:03:59:a3:05:f5:08:13:4c:
97:32:84:06:e8:5c:0c:60:e2:7b:90:14:89:6b:f9:
e0:e9:f7:f2:f4:be:c6:28:e0:54:97:96:d3:ef:c6:
6d:53:59:36:0c:a3:81:39:cb:90:41:f5:35:14:44:
48:16:06:41:3f:d1:f3:8e:7c:11:dc:74:11:7b:89:
b6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C7:C1:8D:50:F9:C6:52:4D:E9:93:02:4C:82:2E:EB:F7:36:4E:98
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS16509.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.17.0/24
193.151.181.0/24
193.164.10.0/24
Signature Algorithm: sha256WithRSAEncryption
55:8e:33:7d:f2:9e:2d:0a:76:3b:85:32:8e:a0:99:f5:29:f3:
b4:25:7f:41:20:e4:8b:1c:20:f1:e0:ee:43:7d:70:24:c0:59:
3c:53:b5:e4:db:94:a2:94:15:59:bf:46:7d:f4:64:58:90:95:
13:42:e4:59:44:3b:13:c3:87:f6:5c:78:59:c5:4e:f9:b3:5d:
7a:bc:f6:c3:a1:fd:c4:77:d7:91:0d:96:ea:aa:5e:d4:19:95:
bb:04:07:7e:40:f6:1e:ce:01:8d:33:1f:ca:2b:77:56:bb:12:
60:78:f1:ef:2b:6b:1c:5f:77:1d:f2:75:56:23:7e:19:cf:a2:
14:e5:5b:15:c4:e6:4b:63:3e:57:99:f3:a1:25:45:5c:b4:74:
03:68:e6:d9:39:e6:63:62:1d:9c:9b:6a:8b:9c:a3:1b:c1:85:
01:b4:15:4e:b4:36:e1:1d:46:79:4e:61:b0:87:c5:37:31:e5:
62:68:63:d1:01:62:3b:81:31:b5:96:f3:07:d7:50:a6:21:c7:
f6:68:fc:ca:f1:ee:0c:e7:ae:0a:4a:69:ed:bc:a9:f1:50:82:
9b:bc:3f:15:2b:2c:f3:83:f2:f7:10:0f:1a:ec:5e:4f:70:79:
a9:c2:5a:18:49:7a:70:06:56:31:2e:79:1d:0a:ef:95:3b:44:
e0:7b:9f:01
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Aug 4 07:38:46 2025 by rpki-client