Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS216022.roa
File: AS216022.roa (raw, json)
Hash identifier: Vi+Mp5WHbxW10nlbrc9O3v1CzI6hvg2pL2z83nsmVVg=
Subject key identifier: 22:28:67:E3:B6:8C:49:89:0C:64:BA:FE:D1:D5:FB:1E:2C:F4:8A:10
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 2ED78C228C4FBA46508B77C093D9DF08EC881316
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS216022.roa
Signing time: Sat 04 Apr 2026 00:00:14 +0000
ROA not before: Fri 03 Apr 2026 23:55:14 +0000
ROA not after: Sat 03 Apr 2027 00:00:14 +0000
asID: 216022
IP address blocks: 141.11.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:d7:8c:22:8c:4f:ba:46:50:8b:77:c0:93:d9:df:08:ec:88:13:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Apr 3 23:55:14 2026 GMT
Not After : Apr 3 00:00:14 2027 GMT
Subject: CN=222867E3B68C49890C64BAFED1D5FB1E2CF48A10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d7:4d:9a:d2:11:29:b9:f3:68:ef:2c:e8:bb:
7e:ef:5e:2b:1c:65:d4:ba:3b:77:88:ad:c0:8f:5c:
e9:13:09:a2:12:5b:f9:18:bb:6a:1c:31:12:38:25:
f4:70:e3:4b:3f:b3:e9:62:cf:4b:ad:20:60:1b:86:
08:de:f6:ca:24:15:4f:ce:8f:0a:40:4f:cf:fc:ac:
f6:2c:a7:38:25:e3:48:7d:c2:63:ec:41:8b:ca:af:
10:df:94:fb:9d:d9:1c:5b:32:b6:d4:04:a3:2a:5a:
06:0a:4a:3f:08:ed:ef:27:cd:5e:c1:1d:f6:4c:21:
28:2e:5c:34:13:f9:a9:90:a0:65:2c:ab:4b:e5:db:
ba:1b:82:4c:07:bf:2d:8d:82:c5:74:ab:a6:da:d8:
6a:99:aa:2e:46:08:fe:7c:6c:c3:6b:12:fb:98:f5:
32:32:5f:0e:e3:bc:b2:1b:27:44:7c:49:fb:64:90:
0f:50:3b:36:4e:a1:11:bd:c3:c3:69:ef:87:a2:2b:
4a:fe:2d:e9:a7:f4:7a:b6:f9:98:a2:e4:1c:1e:2a:
39:28:dc:ca:bd:c1:d2:e3:4e:71:57:87:1c:a5:9d:
b4:40:af:4c:17:96:13:d7:d0:0e:d7:da:27:ce:1b:
42:58:49:be:ed:c9:cd:f9:92:c8:98:fa:ce:25:f9:
88:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:28:67:E3:B6:8C:49:89:0C:64:BA:FE:D1:D5:FB:1E:2C:F4:8A:10
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS216022.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.60.0/24
Signature Algorithm: sha256WithRSAEncryption
57:17:a5:73:1b:2e:17:7f:28:b8:5c:dd:80:a1:02:93:14:02:
aa:56:d9:fc:6b:1d:75:db:2d:10:98:2b:81:57:a1:3d:e3:12:
e5:8a:92:18:07:20:34:7e:a5:ce:b5:07:17:87:c1:f8:c5:3c:
f2:5d:ff:9e:0e:50:d2:be:85:59:8c:cb:c5:a0:df:33:57:1e:
df:89:71:14:31:6c:ff:e5:ac:22:fd:54:33:e2:79:93:e7:a8:
38:dd:d5:47:e5:d1:96:02:ef:af:bf:36:79:d5:a6:7b:d0:25:
8e:63:05:e5:0d:6a:e6:54:09:d3:10:aa:f0:c6:6d:70:e1:5b:
02:33:d6:ab:59:17:47:32:7d:96:ba:e4:1e:81:31:c2:f9:75:
35:dc:37:4c:dd:0b:ce:7d:e7:66:47:72:a9:35:61:33:9f:7e:
81:35:06:e8:4a:2f:34:09:45:e9:a4:47:ae:d3:90:00:03:b3:
b7:68:4b:46:52:44:98:11:a0:b9:81:e6:25:cf:b5:3f:0c:6f:
cf:ef:aa:15:97:f2:fe:1f:49:10:7b:24:56:8a:61:c3:9d:1e:
46:3a:0e:5e:5e:ec:b3:65:e4:48:17:ce:29:c0:aa:6f:94:ab:
f7:fb:c8:68:5a:1c:ba:d1:85:c5:a3:d8:05:ec:c4:06:5e:3f:
72:19:e8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:43:42 2026 by rpki-client