Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS216129.roa
File: AS216129.roa (raw, json)
Hash identifier: 5iZHyJFzv/ErIgPQke7m/mQFMHLBvBkBmRlVqnbTGiE=
Subject key identifier: DC:F0:6E:F8:45:CD:1E:17:17:B6:74:60:E7:A2:13:72:15:D4:10:74
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 576E16A0E76045E923316C63F62485D833783D91
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS216129.roa
Signing time: Fri 12 Jun 2026 11:22:29 +0000
ROA not before: Fri 12 Jun 2026 11:17:29 +0000
ROA not after: Fri 11 Jun 2027 11:22:29 +0000
asID: 216129
IP address blocks: 188.220.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:6e:16:a0:e7:60:45:e9:23:31:6c:63:f6:24:85:d8:33:78:3d:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 12 11:17:29 2026 GMT
Not After : Jun 11 11:22:29 2027 GMT
Subject: CN=DCF06EF845CD1E1717B67460E7A2137215D41074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:08:08:b7:f4:d2:ef:0f:bd:f0:13:1d:5b:a6:
e6:03:b6:1d:1d:33:a8:71:25:c9:dc:2c:b7:72:9e:
0d:a3:8c:a3:c3:09:77:09:00:d7:55:9c:66:68:28:
27:b9:98:d2:46:79:90:27:40:2f:77:be:48:89:d8:
a2:64:b3:f2:d4:15:13:2e:54:8f:0f:75:46:1f:b7:
1a:dd:53:d8:2d:9b:42:8b:55:b6:dd:5b:92:9c:3a:
e7:cf:07:99:4c:d9:91:13:93:ab:b9:5d:8f:f0:a5:
57:df:41:13:41:8b:24:9f:2f:4f:1f:75:66:b2:d4:
be:96:bc:e1:dc:b5:f2:74:79:1a:2f:0c:8f:55:9a:
0b:60:49:e7:3e:ae:f3:75:26:3d:6b:87:13:1d:d0:
18:f7:09:50:86:23:f6:4a:5b:8b:be:a5:ea:3f:cb:
a5:70:e9:28:8c:b1:18:d5:66:be:8e:59:03:fb:ce:
32:88:38:9d:fd:8b:ec:8e:2f:82:05:fe:20:0b:19:
1e:e1:76:7f:97:8b:27:53:47:3f:b6:ce:9c:c0:71:
22:74:a3:5c:32:8f:2a:8b:7a:42:38:33:ab:1c:ef:
da:ba:1a:4d:43:7f:52:b9:b4:25:2c:f1:c0:e3:0c:
ed:57:c7:03:ec:e9:4b:53:24:04:da:20:61:2a:f0:
24:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F0:6E:F8:45:CD:1E:17:17:B6:74:60:E7:A2:13:72:15:D4:10:74
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS216129.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.220.148.0/24
Signature Algorithm: sha256WithRSAEncryption
39:96:32:ac:0a:3d:0d:13:4e:94:6c:5e:5e:26:ca:c4:f3:c1:
6e:ad:5e:52:ff:dd:42:d9:a6:f3:66:d2:05:32:be:16:17:23:
37:dd:96:bb:59:c9:db:0f:eb:cb:5b:da:c2:ba:e2:2d:e1:eb:
7f:dd:d2:4a:48:55:63:6f:b3:92:db:9a:4a:b5:42:e1:5f:14:
42:7a:ee:76:01:8b:4e:4f:14:24:e6:46:79:2e:ee:5a:91:50:
95:7c:a5:57:f4:48:66:dc:21:a2:07:2a:56:11:27:d2:98:65:
e0:22:9f:14:cd:32:87:c4:d1:52:38:80:c5:69:4f:f3:33:88:
c7:e9:76:e7:95:2f:22:bf:d2:f9:10:7b:6e:79:94:f8:23:9e:
ec:48:98:c4:1c:5c:e5:8b:ea:b0:66:07:26:26:20:56:15:f7:
06:8d:d8:2a:53:03:f6:d1:2e:c2:3b:c6:57:f2:c8:63:47:c3:
07:8a:a8:f6:e4:6f:a7:47:53:d9:1b:a3:89:4b:6e:8c:c9:a2:
5f:9f:6f:3d:b7:59:06:a7:bc:14:bf:4f:6e:5d:c0:83:84:ae:
c5:e5:ad:4a:b2:67:5e:c5:fd:b9:0f:ba:42:71:d1:f1:3d:5e:
04:98:08:e7:2c:ba:7c:df:ed:a9:fc:88:d4:38:86:45:b6:f9:
c3:9c:c1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:37:20 2026 by rpki-client