Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS216276.roa
File: AS216276.roa (raw, json)
Hash identifier: pZvkek+gImDfou7dMyhgY7q693V4WzIg0le1q9Q9E5M=
Subject key identifier: AC:D8:D8:E4:06:06:F7:13:0E:FB:3E:BD:81:F2:3E:85:67:E8:E2:17
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 0967BF2EB085A7C9E6549918774BEA83B106BE3D
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS216276.roa
Signing time: Tue 08 Sep 2026 11:09:07 +0000
ROA not before: Tue 08 Sep 2026 11:04:07 +0000
ROA not after: Tue 07 Sep 2027 11:09:07 +0000
asID: 216276
IP address blocks: 2a0f:85c1:ceb::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:67:bf:2e:b0:85:a7:c9:e6:54:99:18:77:4b:ea:83:b1:06:be:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Sep 8 11:04:07 2026 GMT
Not After : Sep 7 11:09:07 2027 GMT
Subject: CN=ACD8D8E40606F7130EFB3EBD81F23E8567E8E217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c8:6d:e9:e8:e7:98:6a:a5:c6:3b:20:70:36:
f7:7d:d4:82:31:0c:63:e1:ec:1b:4b:cb:bc:97:36:
e5:ea:2e:72:e8:a2:3d:d2:1f:31:48:35:e0:3e:b8:
26:b9:4e:91:82:6f:3f:88:f8:df:2a:cf:0d:24:14:
d8:01:24:ac:50:5c:db:4b:27:e1:0c:9f:be:e5:0f:
09:5e:f0:01:5a:12:6e:18:25:db:2c:8e:67:ed:f0:
30:85:a2:ea:dc:13:9d:d9:9f:a0:94:89:b8:19:9f:
3e:3f:93:d7:80:95:65:d6:ff:97:5c:c4:64:10:dc:
38:ea:b0:32:a4:76:d3:05:d8:dd:ec:5a:24:94:3d:
99:65:59:a5:0f:9d:0b:64:84:17:a9:dc:cc:e1:e3:
51:3e:83:61:9b:04:74:a0:12:c8:fa:0d:eb:5d:52:
32:88:b1:54:0c:e2:5a:3f:0e:99:89:15:51:04:1b:
dc:0f:33:93:1f:71:db:b6:a4:6f:68:a6:a0:c1:e4:
f0:22:a8:f2:0d:40:41:43:c7:dd:c4:b7:ed:86:a4:
0c:47:55:72:47:b2:c8:fd:09:11:f9:a3:0a:00:c8:
2c:34:64:09:b8:14:96:5b:71:b4:00:3b:6f:9c:00:
7a:51:80:76:be:67:28:71:71:47:75:b5:1e:0e:18:
e4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D8:D8:E4:06:06:F7:13:0E:FB:3E:BD:81:F2:3E:85:67:E8:E2:17
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS216276.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:ceb::/48
Signature Algorithm: sha256WithRSAEncryption
1c:29:f7:8f:76:7f:02:11:78:91:b7:8f:be:3d:30:84:71:2c:
58:fa:7a:56:de:76:e3:2f:31:32:b7:ee:22:cc:cc:ad:1a:94:
81:e9:1c:3e:ef:59:e3:34:ce:56:54:e7:f8:e8:8b:14:95:1c:
09:a1:46:53:10:ed:50:3d:96:e8:f7:91:75:66:8b:e9:a0:d8:
33:b0:ff:f5:be:a6:c0:f6:a6:bf:c0:10:75:81:86:da:20:90:
cf:41:65:63:f9:67:2c:ed:e0:85:95:33:95:c6:57:3e:8c:0a:
be:18:5a:2c:57:23:6f:31:a1:c8:05:62:66:d0:7a:9b:42:64:
f6:db:be:28:ac:b6:d1:d9:a6:81:41:64:81:37:e1:7c:bb:c5:
70:d4:eb:f6:a4:e1:2f:76:82:c9:0a:8c:fe:b0:93:1e:f4:cb:
a7:29:08:c3:af:d5:4b:bf:2a:6e:ab:b1:ab:ba:88:f2:25:e4:
b3:95:a4:0a:10:ec:df:c1:58:7f:49:16:9d:9e:ed:ae:78:25:
1a:ab:6e:5b:d8:c8:75:1a:a9:64:c6:21:97:02:41:2b:00:cd:
23:bd:7d:79:7b:9f:ee:9a:55:d7:b9:b5:a8:1c:84:87:0e:9d:
f9:b8:44:1a:22:7f:63:11:a4:4a:12:82:4c:af:05:11:43:7a:
5d:71:83:57
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUCWe/LrCFp8nmVJkYd0vqg7EGvj0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNjA5MDgxMTA0MDdaFw0yNzA5MDcxMTA5MDdaMDMxMTAvBgNV
BAMTKEFDRDhEOEU0MDYwNkY3MTMwRUZCM0VCRDgxRjIzRTg1NjdFOEUyMTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDByG3p6OeYaqXGOyBwNvd91IIx
DGPh7BtLy7yXNuXqLnLooj3SHzFINeA+uCa5TpGCbz+I+N8qzw0kFNgBJKxQXNtL
J+EMn77lDwle8AFaEm4YJdssjmft8DCFourcE53Zn6CUibgZnz4/k9eAlWXW/5dc
xGQQ3DjqsDKkdtMF2N3sWiSUPZllWaUPnQtkhBep3Mzh41E+g2GbBHSgEsj6Detd
UjKIsVQM4lo/DpmJFVEEG9wPM5Mfcdu2pG9opqDB5PAiqPINQEFDx93Et+2GpAxH
VXJHssj9CRH5owoAyCw0ZAm4FJZbcbQAO2+cAHpRgHa+ZyhxcUd1tR4OGOTZAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUrNjY5AYG9xMO+z69gfI+hWfo4hcwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjE2Mjc2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQzrMA0GCSqGSIb3DQEBCwUAA4IBAQAcKfePdn8CEXiRt4++PTCEcSxY+npW3nbj
LzEyt+4izMytGpSB6Rw+71njNM5WVOf46IsUlRwJoUZTEO1QPZbo95F1ZovpoNgz
sP/1vqbA9qa/wBB1gYbaIJDPQWVj+Wcs7eCFlTOVxlc+jAq+GFosVyNvMaHIBWJm
0HqbQmT2274orLbR2aaBQWSBN+F8u8Vw1Ov2pOEvdoLJCoz+sJMe9MunKQjDr9VL
vypuq7GruojyJeSzlaQKEOzfwVh/SRadnu2ueCUaq25b2Mh1GqlkxiGXAkErAM0j
vX15e5/umlXXubWoHISHDp35uEQaIn9jEaRKEoJMrwURQ3pdcYNX
-----END CERTIFICATE-----
Generated at Mon Sep 21 06:01:22 2026 by rpki-client