Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS16509.roa
File: AS16509.roa (raw, json)
Hash identifier: VN6vAtFnQ3NQTU+m6j7KnZkAjhviG4CZO94a/Mb4Fck=
Subject key identifier: D1:E3:76:55:80:E6:0C:2C:73:0A:2F:F5:B8:52:CE:2C:22:77:1E:E3
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 55F360A596ED6863D852788026F894F354571940
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS16509.roa
Signing time: Wed 16 Sep 2026 07:00:03 +0000
ROA not before: Wed 16 Sep 2026 06:55:03 +0000
ROA not after: Wed 15 Sep 2027 07:00:03 +0000
asID: 16509
IP address blocks: 51.241.200.0/24 maxlen: 24
87.81.32.0/19 maxlen: 24
188.220.80.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:f3:60:a5:96:ed:68:63:d8:52:78:80:26:f8:94:f3:54:57:19:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 16 06:55:03 2026 GMT
Not After : Sep 15 07:00:03 2027 GMT
Subject: CN=D1E3765580E60C2C730A2FF5B852CE2C22771EE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:39:5c:bf:7d:11:1a:f6:18:8f:25:c5:71:6a:
69:0b:90:03:fb:b3:58:f7:e9:88:56:8e:43:8c:11:
c0:a6:40:1a:8b:e7:26:d1:79:08:74:b6:ec:64:6d:
16:89:2f:94:cb:af:4e:b6:ca:05:2f:cc:bc:58:7f:
91:b7:4d:56:47:8f:5e:07:13:85:26:d1:31:25:82:
fb:ee:af:34:cc:ca:25:b5:aa:ac:06:c9:8c:5d:55:
e8:37:32:33:88:7c:ad:9a:7a:93:fb:2f:d5:ca:0f:
12:35:f1:c7:a8:f9:80:8f:5d:c8:0c:09:56:0d:8a:
47:a5:d5:ac:fa:5c:2b:64:f0:66:79:2c:08:ec:c5:
7c:d4:ee:0e:85:25:86:b3:a5:86:87:28:ff:80:1c:
d0:82:6d:03:83:17:30:e6:3c:db:1f:25:65:7f:91:
2b:66:b9:6d:95:79:f2:3f:60:08:08:67:c8:30:ad:
f0:ff:ba:23:5d:19:c4:0f:a5:f2:38:fb:3f:b6:f1:
4f:35:cb:a2:18:11:0c:1e:ef:58:a5:c5:e9:18:b4:
b2:b6:8a:36:0d:48:70:da:02:92:e4:a3:ac:e3:c3:
68:20:00:4b:de:b9:3b:46:d5:34:a1:ac:bc:9e:d9:
40:e7:a5:95:6e:70:4f:30:a5:f3:d2:3e:74:da:1e:
7e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E3:76:55:80:E6:0C:2C:73:0A:2F:F5:B8:52:CE:2C:22:77:1E:E3
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS16509.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.241.200.0/24
87.81.32.0/19
188.220.80.0/22
Signature Algorithm: sha256WithRSAEncryption
03:cf:cd:83:27:63:81:72:a6:7d:cf:1d:3c:e3:49:e3:a4:bf:
b6:50:d4:06:1f:11:c2:9b:0a:dd:d7:b4:02:2e:1b:37:f1:b5:
d2:af:e5:65:39:23:c6:14:1a:55:a4:f2:6a:33:26:32:98:d6:
c1:98:e0:57:e7:10:38:99:1c:a2:fd:04:c7:1b:8c:2f:9d:9f:
98:79:11:57:91:02:96:f0:a1:f0:21:ed:fb:dd:ae:10:5a:ff:
eb:01:f6:14:cb:73:f0:06:34:04:cf:16:94:00:66:6a:97:a7:
f1:80:bb:94:b3:11:4b:d8:39:8c:06:b7:ed:92:b6:e1:51:cf:
a1:e9:05:9b:07:e5:71:2e:36:db:31:86:b7:d3:4a:81:d3:6a:
f4:5f:65:fc:29:5d:42:45:ee:27:de:5a:55:b6:95:ec:d0:b5:
87:b7:73:ee:77:94:c6:88:67:c9:6d:09:98:d0:9a:24:29:92:
a8:7d:d2:6f:e0:e5:ff:53:94:2a:78:b1:59:33:5b:1e:b5:3f:
0f:c8:8a:0e:23:c1:d9:84:c3:25:bb:7c:74:80:06:fb:bf:b4:
6f:eb:2b:2a:86:c0:97:86:11:d6:f8:5a:12:8b:62:1f:c9:c9:
51:f6:c2:12:43:2f:24:24:9b:ad:50:64:d8:49:1f:bc:8a:ef:
4e:d6:a4:10
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIUVfNgpZbtaGPYUniAJviU81RXGUAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA5MTYwNjU1MDNaFw0yNzA5MTUwNzAwMDNaMDMxMTAvBgNV
BAMTKEQxRTM3NjU1ODBFNjBDMkM3MzBBMkZGNUI4NTJDRTJDMjI3NzFFRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8OVy/fREa9hiPJcVxamkLkAP7
s1j36YhWjkOMEcCmQBqL5ybReQh0tuxkbRaJL5TLr062ygUvzLxYf5G3TVZHj14H
E4Um0TElgvvurzTMyiW1qqwGyYxdVeg3MjOIfK2aepP7L9XKDxI18ceo+YCPXcgM
CVYNikel1az6XCtk8GZ5LAjsxXzU7g6FJYazpYaHKP+AHNCCbQODFzDmPNsfJWV/
kStmuW2VefI/YAgIZ8gwrfD/uiNdGcQPpfI4+z+28U81y6IYEQwe71ilxekYtLK2
ijYNSHDaApLko6zjw2ggAEveuTtG1TShrLye2UDnpZVucE8wpfPSPnTaHn5XAgMB
AAGjggIVMIICETAdBgNVHQ4EFgQU0eN2VYDmDCxzCi/1uFLOLCJ3HuMwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMTY1MDkucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBAAz8cgD
BAVXUSADBAK83FAwDQYJKoZIhvcNAQELBQADggEBAAPPzYMnY4Fypn3PHTzjSeOk
v7ZQ1AYfEcKbCt3XtAIuGzfxtdKv5WU5I8YUGlWk8mozJjKY1sGY4FfnEDiZHKL9
BMcbjC+dn5h5EVeRApbwofAh7fvdrhBa/+sB9hTLc/AGNATPFpQAZmqXp/GAu5Sz
EUvYOYwGt+2StuFRz6HpBZsH5XEuNtsxhrfTSoHTavRfZfwpXUJF7ifeWlW2lezQ
tYe3c+53lMaIZ8ltCZjQmiQpkqh90m/g5f9TlCp4sVkzWx61Pw/Iig4jwdmEwyW7
fHSABvu/tG/rKyqGwJeGEdb4WhKLYh/JyVH2whJDLyQkm61QZNhJH7yK707WpBA=
-----END CERTIFICATE-----
Generated at Sun Sep 20 12:33:33 2026 by rpki-client