Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS216069.roa
File: AS216069.roa (raw, json)
Hash identifier: Jp2juStat9qj+qT3Ml2lAGqHxocAbCaP8S+NBN4gWJo=
Subject key identifier: 78:09:51:BD:91:F1:09:33:27:47:05:8B:04:CD:46:D0:4F:4A:6C:50
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 4BDF851952EC6084E060DADA8848CB2250D088E7
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS216069.roa
Signing time: Mon 07 Sep 2026 02:28:22 +0000
ROA not before: Mon 07 Sep 2026 02:23:22 +0000
ROA not after: Mon 06 Sep 2027 02:28:22 +0000
asID: 216069
IP address blocks: 2a14:7583:c000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 11:30:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:df:85:19:52:ec:60:84:e0:60:da:da:88:48:cb:22:50:d0:88:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Sep 7 02:23:22 2026 GMT
Not After : Sep 6 02:28:22 2027 GMT
Subject: CN=780951BD91F109332747058B04CD46D04F4A6C50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:30:38:bb:4a:03:ee:55:2f:d1:97:62:6a:c1:
ec:a6:95:0a:ad:cd:2b:d8:45:3b:9b:20:6c:41:42:
06:bb:42:53:71:a7:8a:0d:1a:22:af:84:7f:8e:e5:
5c:ee:fd:7f:9d:cf:50:ab:28:5c:4d:18:8f:1c:ec:
79:e6:5d:54:dc:02:13:e6:95:65:93:53:54:9f:56:
88:d9:e8:54:fe:15:dc:15:1b:ee:c3:0c:79:7d:2a:
1a:ac:2d:fe:c2:cb:15:5d:d5:27:54:4e:aa:cd:94:
5d:32:77:9d:79:75:20:17:f0:5d:28:b1:63:0a:a7:
f8:c8:77:03:63:69:3b:c7:30:8a:9b:10:6e:07:dd:
34:78:89:b1:5c:63:b7:22:c5:28:64:3e:06:d4:ec:
1c:b3:02:42:ea:6d:a5:1b:40:c4:55:55:34:b4:55:
4f:b7:ab:bb:a1:24:ef:86:3d:69:a9:29:19:0f:85:
60:89:d4:76:a4:e5:1c:ea:3b:8c:25:b1:7b:c2:27:
49:07:6a:fd:72:de:84:56:29:4d:2f:cc:f1:29:31:
83:01:8f:21:54:bb:b5:a2:b7:ac:e0:f9:42:c5:65:
0d:64:8f:08:0a:eb:f3:d4:15:4a:a5:1f:78:ca:71:
ef:16:4d:50:9e:40:d5:bd:09:f8:32:25:06:88:9a:
d1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:09:51:BD:91:F1:09:33:27:47:05:8B:04:CD:46:D0:4F:4A:6C:50
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS216069.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:c000::/36
Signature Algorithm: sha256WithRSAEncryption
33:ec:80:5e:ce:af:be:dd:49:4c:e4:a9:e6:2b:37:26:15:ad:
b3:12:4b:54:92:28:1c:ee:26:55:76:6d:dd:11:02:53:b6:43:
79:19:c1:ed:40:71:41:2e:9a:d6:de:1e:3e:5b:78:3f:68:0b:
e5:aa:fd:55:fe:84:56:83:80:42:f2:e3:4f:f2:9d:ad:c4:4e:
b0:7d:f1:2d:ce:c5:92:8e:56:6d:1e:14:55:2a:1f:23:38:2f:
9c:28:c5:8f:1d:66:4d:a1:ab:fb:af:d0:5f:36:33:ae:64:1b:
49:ad:0b:79:64:c5:53:6e:ba:9c:23:49:f4:fc:dd:4b:14:cb:
02:25:84:17:62:a2:2d:ab:2d:b2:1d:78:1d:d0:bf:2c:ec:f1:
26:06:71:ae:dd:55:3c:d7:8b:07:7a:a6:a5:3a:35:4f:0b:b1:
79:cf:09:87:3b:95:14:f9:c5:b7:f3:53:6d:7e:39:07:1f:db:
a8:c6:d9:05:4e:bf:ea:ed:4d:5c:cd:5d:50:0b:2d:4e:d9:ba:
85:67:9b:23:f1:2b:86:9e:af:c0:e9:bd:44:f3:cc:51:e7:b5:
f3:60:b4:e2:36:dc:c1:f0:32:83:b2:1d:5e:d4:71:53:dd:a1:
44:8f:a7:de:05:5e:e2:1a:16:12:10:16:2c:9e:94:5a:18:75:
7d:3e:fb:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:51:21 2026 by rpki-client