Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS16509.roa
File: AS16509.roa (raw, json)
Hash identifier: MRwRszsGZxZG5dzirSfGrKpqCDPDeATyo9dzK+lHBJ8=
Subject key identifier: 5B:7B:0C:D8:40:F9:87:FB:70:16:95:D2:1B:B8:71:39:96:4E:68:74
Certificate issuer: /CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Certificate serial: 0964DBA0CB7044F305432509B427B3B4012480E0
Authority key identifier: 39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS16509.roa
Signing time: Mon 21 Sep 2026 16:43:23 +0000
ROA not before: Mon 21 Sep 2026 16:38:23 +0000
ROA not after: Mon 20 Sep 2027 16:43:23 +0000
asID: 16509
IP address blocks: 177.28.8.0/24 maxlen: 24
177.28.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:64:db:a0:cb:70:44:f3:05:43:25:09:b4:27:b3:b4:01:24:80:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Validity
Not Before: Sep 21 16:38:23 2026 GMT
Not After : Sep 20 16:43:23 2027 GMT
Subject: CN=5B7B0CD840F987FB701695D21BB87139964E6874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f9:2d:fa:53:e7:a5:35:21:cc:0b:bf:58:33:
77:2e:92:cb:99:f9:07:3b:e4:a1:2c:ef:26:a0:42:
d4:39:2f:18:e0:70:5a:ae:b3:6f:00:32:87:6a:4d:
15:93:50:8a:2a:43:ec:87:3e:32:e2:f0:e8:ad:4c:
09:99:30:eb:4c:ab:65:5d:f0:74:68:f6:1e:53:48:
f1:23:bf:71:41:20:91:54:d0:fc:30:af:5a:65:9c:
fb:dd:43:b2:63:ea:b8:c2:5e:a0:bb:9a:ed:ab:c9:
ed:96:41:07:28:d5:07:a1:2c:01:8b:44:20:f2:98:
01:b6:90:a5:e3:97:64:74:5f:17:3f:c3:16:83:2d:
75:88:ba:ac:b9:08:08:86:63:ae:3d:c9:0e:85:e2:
fd:fb:81:02:8a:e4:52:03:5d:e5:6b:0e:7c:d7:79:
5a:46:bb:3f:1f:66:42:23:17:c0:66:9d:f3:88:4f:
f7:91:96:28:28:21:a1:0e:45:c6:a7:45:8c:2c:0f:
21:6d:ab:c9:18:31:b7:91:35:ef:dc:c5:10:ad:d3:
e9:19:b6:30:c5:de:99:c5:b4:9b:56:74:b5:fe:a8:
45:15:cc:04:67:cf:53:b1:7b:3a:ef:24:e8:e0:5c:
e8:ed:a0:c9:6c:72:4c:84:f7:01:97:be:d9:5d:65:
58:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:7B:0C:D8:40:F9:87:FB:70:16:95:D2:1B:B8:71:39:96:4E:68:74
X509v3 Authority Key Identifier:
keyid:39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS16509.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.28.8.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:d5:4f:85:04:e4:a9:96:c2:b1:19:df:f1:c8:20:6d:2f:62:
0f:89:5f:89:c6:e9:35:eb:4d:55:c2:6c:9f:de:f1:14:72:70:
34:04:59:2f:53:a9:c3:74:19:0e:29:4a:08:8a:c7:32:a5:c9:
33:44:4b:24:2b:1f:b2:7e:db:a5:36:9d:00:63:0c:92:5d:20:
6b:a9:43:30:0c:87:e8:78:64:9c:9b:39:4c:29:7f:ed:59:cb:
08:96:77:df:c1:20:94:3c:46:cd:0c:4e:e7:11:10:2f:c5:ad:
9d:c0:ca:ad:9b:d3:fe:5d:f2:d8:9c:b9:50:5e:27:0a:c9:90:
fc:64:7c:66:11:29:6f:e3:24:e3:a7:2f:3a:58:9c:44:ca:8a:
58:06:eb:61:85:c3:b0:52:17:43:e8:c8:a2:88:5a:8f:e9:19:
f8:f3:3f:dc:d4:7c:90:d0:f7:c8:aa:bd:01:19:ad:a9:f5:d6:
fc:1f:68:c1:3b:68:0c:ef:18:e3:75:63:57:68:87:1c:5b:95:
7e:9b:90:2c:87:97:3a:6d:98:1d:27:15:df:bc:d8:21:76:96:
af:72:4b:a3:f8:9f:d9:e0:ce:b5:97:6d:13:29:49:62:ab:fb:
32:7e:67:8d:3c:94:9c:b5:2e:63:52:1b:53:17:51:7c:09:2f:
86:dc:34:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:11:14 2026 by rpki-client