Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS16509.roa
File: AS16509.roa (raw, json)
Hash identifier: dId+UgRmMfHdfRglsyGr9fecQqQzpU5RMGardg1CUZo=
Subject key identifier: EA:A6:81:BC:CE:58:61:3F:ED:EB:D2:D4:67:53:FE:A6:72:64:AB:DD
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 071CA461C049879358B4D5792FA84E85C9A2CFAA
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS16509.roa
Signing time: Sun 20 Sep 2026 02:03:47 +0000
ROA not before: Sun 20 Sep 2026 01:58:47 +0000
ROA not after: Sun 19 Sep 2027 02:03:47 +0000
asID: 16509
IP address blocks: 141.11.12.0/22 maxlen: 24
141.11.112.0/24 maxlen: 24
141.11.115.0/24 maxlen: 24
141.11.136.0/24 maxlen: 24
194.60.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:26:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:1c:a4:61:c0:49:87:93:58:b4:d5:79:2f:a8:4e:85:c9:a2:cf:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Sep 20 01:58:47 2026 GMT
Not After : Sep 19 02:03:47 2027 GMT
Subject: CN=EAA681BCCE58613FEDEBD2D46753FEA67264ABDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e2:b4:72:21:a1:9a:39:a2:ae:cd:07:67:09:
aa:2b:c6:12:ae:f7:34:3d:9b:cb:45:9b:79:9e:74:
6c:27:5b:1e:b9:8d:01:42:a0:bd:9e:28:ed:4b:12:
d3:36:3f:df:7a:c6:77:a3:0c:14:e1:35:5d:c5:2e:
a5:12:e4:7a:1a:00:6c:8d:6c:bf:02:86:3a:1c:bb:
90:9a:e4:b4:87:71:b0:c2:42:ea:57:94:ed:4f:ef:
bf:70:c3:79:4d:fa:25:56:ff:c8:38:72:73:cd:7d:
1d:4f:a8:55:01:4c:6c:88:58:c0:65:a1:8b:17:15:
d2:3d:5a:a2:20:ee:e7:d6:b4:fe:72:cc:75:a0:3e:
3a:5a:60:bd:81:b5:ad:61:69:65:cd:1a:e5:1f:cc:
10:27:30:ea:73:56:57:f2:2f:01:e3:0b:9c:22:ed:
57:4d:30:d0:29:7a:8d:f2:7b:6b:76:2c:c0:dc:1e:
e8:70:5c:47:9f:d0:40:4a:32:33:fe:02:7c:d5:75:
bb:48:32:c6:fd:62:ed:23:e3:a2:b9:f6:e0:f1:d2:
32:df:bd:1d:f9:30:f3:a3:f1:f5:08:bf:f0:06:bc:
99:a8:b5:63:66:d6:42:cf:1b:7d:79:52:35:84:7f:
41:bd:43:bb:e0:a4:6c:11:17:f8:cb:a5:0e:a7:0a:
83:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A6:81:BC:CE:58:61:3F:ED:EB:D2:D4:67:53:FE:A6:72:64:AB:DD
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS16509.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.12.0/22
141.11.112.0/24
141.11.115.0/24
141.11.136.0/24
194.60.94.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:5c:e1:30:1f:37:4b:f6:a5:fd:60:0b:74:2a:5e:66:8e:43:
9b:be:f7:4f:50:88:bb:39:aa:64:44:09:60:45:43:8a:9f:6c:
67:e6:6a:49:09:14:62:0a:94:09:7a:3a:c0:5f:5d:96:10:7b:
03:ad:89:a3:d8:4a:1c:9f:2d:08:ce:05:89:c5:ae:78:cd:3e:
c7:b4:c2:31:6a:50:90:9c:e0:52:f7:2d:09:e5:d2:6c:ed:3b:
0e:4e:60:6a:46:50:a9:f4:95:64:56:1b:f9:37:ab:39:da:9a:
a5:fe:c2:7a:f0:be:28:91:7b:b5:bd:d9:c3:7c:ac:7c:83:34:
b8:da:cf:91:32:2f:4f:1c:91:72:24:b9:26:f9:d1:51:39:92:
ce:fd:2b:47:5b:25:dd:6b:8e:ca:2a:44:fa:15:db:5b:9e:b1:
16:16:aa:a7:90:26:89:eb:4b:9f:6e:b6:64:47:a2:a1:f8:e5:
9c:b1:75:a1:23:6e:9c:f9:75:12:d4:22:ee:56:c1:df:cc:a9:
ce:36:2f:6d:fc:97:76:0f:39:57:2e:86:78:66:ef:84:12:27:
d8:a6:3e:19:ef:ae:c1:4c:68:2b:af:f9:54:fb:e6:c7:f3:86:
16:40:0b:68:62:d5:b4:ad:15:1a:5c:77:dd:5d:80:b2:7d:fb:
48:69:8f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:57:19 2026 by rpki-client