Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS16509.roa
File: AS16509.roa (raw, json)
Hash identifier: qrvkrzDFzkDXLs4bolzh2SWARrveXoRCjrunzowu+Cs=
Subject key identifier: 1C:8B:19:51:F0:78:19:A2:8E:44:ED:70:22:08:80:64:58:8A:3E:2E
Certificate issuer: /CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Certificate serial: 4A6954ACEF46BD264637F39EE009F5DE8979424A
Authority key identifier: 39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS16509.roa
Signing time: Wed 11 Nov 2026 17:31:03 +0000
ROA not before: Wed 11 Nov 2026 17:26:03 +0000
ROA not after: Wed 10 Nov 2027 17:31:03 +0000
asID: 16509
IP address blocks: 177.28.8.0/24 maxlen: 24
177.28.9.0/24 maxlen: 24
177.29.200.0/24 maxlen: 24
177.122.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:69:54:ac:ef:46:bd:26:46:37:f3:9e:e0:09:f5:de:89:79:42:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Validity
Not Before: Nov 11 17:26:03 2026 GMT
Not After : Nov 10 17:31:03 2027 GMT
Subject: CN=1C8B1951F07819A28E44ED7022088064588A3E2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2e:e0:9c:07:48:14:ef:45:2e:c9:54:39:c1:
c4:35:c1:c6:71:9c:85:81:95:89:7c:2e:f5:0d:86:
1e:37:8a:a7:ae:e1:0b:ca:5e:2c:5c:c8:7c:0d:f2:
a3:c5:be:67:25:9a:eb:52:f2:30:6b:f0:5a:ec:a4:
5d:1f:44:5e:14:c1:6a:20:c3:97:37:91:18:64:21:
0f:56:9d:b1:5e:02:2b:87:84:a6:d8:b9:09:0f:f3:
cb:b6:18:9a:37:08:db:c3:99:1e:ef:9b:14:41:1c:
11:7d:9e:e5:51:51:e1:f3:70:89:e9:87:8c:b7:6e:
41:4b:07:cb:eb:70:7a:27:13:f0:e3:1b:6f:12:0a:
01:67:32:b9:a0:80:f0:da:82:26:be:95:94:1f:92:
e7:06:f6:ba:32:f8:c2:e1:65:af:89:2c:10:42:7d:
11:be:ba:4f:47:ea:4d:cb:00:fa:bb:37:45:fd:93:
fa:b9:ce:93:0b:b0:5e:ce:5c:3d:25:20:30:d5:1d:
01:b8:11:db:67:50:a3:98:34:10:7d:8f:cc:f6:99:
b2:23:b5:d9:9c:44:97:90:08:89:28:0a:d4:15:d8:
fc:0d:e2:56:ba:01:b5:af:d3:8b:94:c0:10:bb:91:
96:82:e4:56:82:14:d2:f0:d4:83:ca:52:54:9b:b0:
a5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:8B:19:51:F0:78:19:A2:8E:44:ED:70:22:08:80:64:58:8A:3E:2E
X509v3 Authority Key Identifier:
keyid:39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS16509.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.28.8.0/23
177.29.200.0/24
177.122.73.0/24
Signature Algorithm: sha256WithRSAEncryption
74:30:74:19:05:5a:36:0a:ab:7b:79:5f:9f:36:bd:72:e4:59:
ed:80:62:0f:95:5e:36:40:28:32:ff:9c:66:60:5d:9d:5c:1c:
fe:31:e9:be:63:39:b3:a1:e5:09:8c:43:1e:11:e7:94:23:08:
fa:94:bc:44:58:45:5f:07:c8:c4:4b:a6:23:25:bd:ef:8e:36:
75:98:80:36:19:d6:00:9d:82:e9:46:70:63:90:5c:2c:98:44:
36:5e:cf:4e:a8:f9:60:fb:59:c3:c6:e8:21:70:d2:dd:4b:56:
1d:34:46:a3:e9:a7:de:21:44:9b:8c:af:55:d9:de:5c:4d:88:
bb:41:26:10:4e:ce:c6:b8:ac:90:fa:00:16:a3:0f:b1:2a:25:
da:88:39:0f:89:27:93:aa:dc:c5:28:79:71:cd:88:26:55:94:
cb:3b:99:32:8b:3b:30:55:7f:6f:37:5d:13:af:2d:7e:7b:65:
a8:6d:d9:7c:71:02:9b:18:82:ec:68:29:b5:bd:c2:e6:c1:50:
d6:b7:08:59:16:b1:18:9e:05:d6:66:ac:67:2c:d9:90:72:1a:
ae:fa:23:77:26:cb:f2:2e:7d:9a:39:33:90:0f:17:e5:ee:a0:
a3:b6:82:b1:45:ea:57:80:46:75:8f:5c:c7:f9:e7:05:3b:ce:
19:00:fa:f3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Nov 15 22:02:51 2026 by rpki-client