Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS216405.roa
File: AS216405.roa (raw, json)
Hash identifier: BYhtMvpbVfAsb6gxywa5aOl32UT35kCNdZ8LlMmyGNI=
Subject key identifier: 07:22:2A:16:B0:CA:AE:F5:77:2E:81:BE:48:E5:52:36:8E:5C:74:B0
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 4D889AC3F1F02BDBE26D5E87DCDDA31CBF910951
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS216405.roa
Signing time: Mon 26 Oct 2026 21:13:56 +0000
ROA not before: Mon 26 Oct 2026 21:08:56 +0000
ROA not after: Mon 25 Oct 2027 21:13:56 +0000
asID: 216405
IP address blocks: 51.241.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 04:24:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:88:9a:c3:f1:f0:2b:db:e2:6d:5e:87:dc:dd:a3:1c:bf:91:09:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 26 21:08:56 2026 GMT
Not After : Oct 25 21:13:56 2027 GMT
Subject: CN=07222A16B0CAAEF5772E81BE48E552368E5C74B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ce:dc:d8:34:1f:31:1d:b0:15:ae:2c:c0:d2:
fb:6d:8d:6a:06:22:c8:5a:e6:c6:a5:2f:33:1c:01:
52:13:3b:5c:3e:89:38:71:53:f7:ea:de:5d:49:26:
4b:78:9e:ef:b1:7b:8b:ab:1c:8f:62:57:45:da:07:
d9:30:17:c7:9e:57:9f:9a:84:b2:6f:92:31:f3:e3:
13:d1:f6:e9:0d:55:34:52:15:ef:2c:32:e3:e8:40:
71:08:4c:8f:57:17:64:07:e4:4d:69:15:74:95:ca:
d2:bf:3a:79:40:5e:f1:59:c4:ff:1f:f0:7d:87:6d:
02:e1:9a:4a:f1:0a:86:5c:88:94:05:7d:b2:92:df:
1d:56:a9:a9:85:2e:7e:a3:8b:ff:a7:d8:67:8b:fa:
63:03:d7:51:67:5f:b6:1c:a7:f6:8e:df:1b:e2:36:
26:93:a2:1a:a5:23:cf:2d:dc:ce:c7:a0:c4:4e:73:
31:46:7a:1c:03:dd:74:c8:f4:0c:17:24:07:5f:fc:
46:0d:60:98:18:0f:6c:e1:b8:c9:48:2d:1c:84:d2:
7d:9a:c0:18:7b:1a:d5:bf:75:21:20:69:7f:9f:6a:
41:4a:92:54:26:c6:84:88:01:87:ec:b4:13:f3:fb:
cc:df:f0:94:8e:a4:4a:33:92:7b:b3:fb:4a:35:a1:
9d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:22:2A:16:B0:CA:AE:F5:77:2E:81:BE:48:E5:52:36:8E:5C:74:B0
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS216405.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.241.49.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:d9:db:a0:d8:a2:de:2a:d2:1b:53:5d:e5:53:35:19:5d:73:
d7:73:2d:ed:f8:52:63:d5:f7:db:83:61:b7:a1:07:0f:bb:fe:
e2:2e:65:7a:85:36:65:6d:b8:6a:e6:4a:b4:e1:f0:39:a3:2b:
89:15:cd:78:36:29:8d:01:cc:47:87:24:ab:5f:cc:a0:38:fc:
08:44:19:fa:d4:14:7e:ce:7f:55:b0:7a:99:fe:f5:08:46:54:
b8:f0:57:fc:59:60:3c:71:f3:e4:38:e0:04:ce:49:66:ca:4f:
25:e6:32:14:27:92:b6:1d:e7:6b:72:e7:3d:1e:ec:b2:52:54:
4b:23:67:83:93:02:20:d7:0a:80:19:11:ba:da:36:73:63:dd:
a8:6f:f9:e1:cd:36:b0:31:12:da:dd:49:79:e1:47:96:fe:d1:
a6:60:bd:e4:16:40:08:ec:71:79:a2:52:e5:e7:59:42:42:29:
71:a6:4d:f7:47:49:2b:d9:f3:0f:0f:4b:6d:99:12:51:b4:70:
bf:43:84:60:8f:0f:1b:e7:0b:6a:d0:35:ef:2d:87:e8:c8:7b:
81:d5:42:c9:f4:69:ea:d4:6a:33:ba:89:90:58:9b:01:e0:45:
2e:ff:83:14:c2:b0:a6:b7:03:4b:72:46:81:69:db:c0:c0:8f:
91:f5:f4:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:48:48 2026 by rpki-client