Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS216145.roa
File: AS216145.roa (raw, json)
Hash identifier: iEnd1x2H73/0UfdKAms5RpP8NLd8GSmq1VWRlJ3dZGo=
Subject key identifier: 6F:FE:85:FE:DF:C1:87:25:B6:FF:A0:E5:8F:C8:B8:9F:7A:88:E1:F1
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 2D0AF432A25EC851FB668B734E1B6C2953B589F2
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS216145.roa
Signing time: Tue 07 Apr 2026 13:14:14 +0000
ROA not before: Tue 07 Apr 2026 13:09:14 +0000
ROA not after: Tue 06 Apr 2027 13:14:14 +0000
asID: 216145
IP address blocks: 141.11.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:0a:f4:32:a2:5e:c8:51:fb:66:8b:73:4e:1b:6c:29:53:b5:89:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Apr 7 13:09:14 2026 GMT
Not After : Apr 6 13:14:14 2027 GMT
Subject: CN=6FFE85FEDFC18725B6FFA0E58FC8B89F7A88E1F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:45:c4:20:31:2e:4d:2e:a5:de:ec:18:6f:ba:
70:86:52:71:f1:e8:37:e4:2d:88:a9:9e:39:e6:d3:
7f:9a:dc:06:34:23:dd:fe:d0:18:f3:47:d4:06:00:
34:5e:e8:cf:25:7e:65:66:ea:16:12:da:96:47:94:
25:f0:7f:50:0c:3c:aa:7b:f2:44:0a:05:82:75:a9:
dd:d6:ba:a5:ef:c8:45:d6:7c:ee:fe:29:61:38:17:
9a:c4:e4:d5:4a:f0:97:94:c5:25:8a:b1:b5:78:1f:
60:58:f2:b5:b6:b2:46:6f:e0:93:4a:1f:ab:d8:c9:
46:71:b8:14:e8:ae:eb:2a:cc:8d:63:4b:d9:e9:bd:
31:a7:4b:bb:2d:7c:62:58:ad:55:31:ab:b1:94:1d:
81:da:26:13:f9:3e:e9:5a:99:4c:cc:13:8b:68:57:
86:a7:06:ea:4a:7b:e1:7a:54:df:3b:0e:72:0f:76:
47:b9:e6:eb:64:00:5e:65:8e:0f:d2:03:ad:ca:56:
85:7c:75:29:3d:48:df:b5:bf:5c:ec:dc:66:17:7e:
3d:4f:af:e4:dc:58:2d:1c:44:e3:dd:de:b6:b8:ab:
ea:e0:4c:82:56:ac:13:a9:98:a5:95:56:55:02:09:
2a:00:3e:66:58:bd:dd:b3:85:3a:3e:ff:32:ff:22:
c7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:FE:85:FE:DF:C1:87:25:B6:FF:A0:E5:8F:C8:B8:9F:7A:88:E1:F1
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS216145.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.181.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:56:2a:b8:54:d7:6a:0f:1f:4a:37:60:d6:9b:21:08:91:0f:
2f:21:95:d3:db:80:ba:2e:c9:79:35:49:4f:b1:8e:57:bc:2b:
fb:11:d4:9c:83:b1:66:7a:8f:84:33:59:eb:be:d3:9a:5b:b4:
99:05:89:7b:27:04:cc:eb:31:ca:74:12:1e:6d:52:06:a4:58:
dd:3e:2c:2f:5c:b1:11:1d:04:0e:c9:7e:c7:13:5e:93:25:c3:
23:1d:68:2b:bc:4f:91:2c:08:ca:30:de:c1:91:aa:f3:3c:a5:
47:ec:55:76:d4:db:38:9a:77:c3:cf:4d:75:ea:2e:e8:f9:d5:
e8:6f:22:25:cd:ae:0e:69:4e:15:c5:17:6b:8e:ab:20:29:3a:
a9:3e:62:56:5c:53:06:ec:e5:e7:c8:30:01:7a:7e:5f:da:bf:
4d:a0:3c:b7:01:88:10:0e:6b:9a:2c:3c:e1:c7:43:36:e4:b5:
7a:89:cd:dc:99:a9:6e:5c:41:b6:9f:55:1e:a7:ab:db:61:ab:
9f:1d:cc:72:6f:6e:09:d8:45:19:70:d3:93:14:db:cc:be:a5:
6c:4a:14:76:77:ab:8e:29:39:59:45:93:8b:75:4f:96:d1:6b:
49:4e:d1:c0:3f:6d:c4:87:c2:70:c7:71:6b:f6:ad:81:1c:62:
d5:04:71:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:38:21 2026 by rpki-client