Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS16509.roa
File: AS16509.roa (raw, json)
Hash identifier: VyqMcigekMvwkwQp1m80JhWwfTkbAdoOvL37Pwh3Wq0=
Subject key identifier: E4:1F:D0:E8:A3:72:A5:81:34:90:D5:1A:E7:91:41:80:FC:8F:AA:5A
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 592DCB69E20B457B0D7AA0CD67D4B3E4C6597FD8
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS16509.roa
Signing time: Fri 28 Aug 2026 04:49:30 +0000
ROA not before: Fri 28 Aug 2026 04:44:30 +0000
ROA not after: Fri 27 Aug 2027 04:49:30 +0000
asID: 16509
IP address blocks: 143.20.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:37:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:2d:cb:69:e2:0b:45:7b:0d:7a:a0:cd:67:d4:b3:e4:c6:59:7f:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Aug 28 04:44:30 2026 GMT
Not After : Aug 27 04:49:30 2027 GMT
Subject: CN=E41FD0E8A372A5813490D51AE7914180FC8FAA5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0f:be:f8:a7:af:c1:18:bc:09:cd:9a:bc:ad:
45:18:4d:01:ac:4a:a1:a0:9a:72:a8:24:9f:79:ef:
d9:00:93:69:19:4c:aa:eb:fd:80:0e:29:de:a0:fb:
86:16:31:66:37:02:27:5b:49:d9:99:80:c0:c9:44:
44:70:54:c9:84:6b:9e:ee:b8:2f:b5:3c:f7:8b:47:
97:7b:ba:15:8b:6c:21:60:05:9b:25:3f:04:1c:ac:
03:10:09:04:90:5e:cd:84:d8:ed:0e:58:a0:a0:e9:
e1:e7:a1:26:58:87:ce:75:2e:5c:0b:b3:d6:22:f1:
82:a9:55:f2:0a:76:53:8c:76:54:35:b2:0d:e9:e7:
8b:f6:6b:1d:b7:11:fb:2e:2e:4f:5b:71:d2:e2:07:
37:f4:fb:35:5e:d8:f4:2f:d4:a1:0a:77:d6:c6:73:
16:26:73:07:53:25:8d:50:aa:fe:57:ed:85:dc:4c:
63:d4:6c:f5:f2:0d:00:59:42:6b:82:f3:96:b4:4d:
62:48:26:fd:00:af:ac:79:95:9a:b0:0d:49:12:da:
e2:51:1d:e6:1e:d4:97:b7:0c:18:2b:05:cc:ad:20:
5e:41:ea:6c:03:29:70:d8:e9:8e:a0:f4:77:21:56:
41:df:7f:9a:48:bd:49:e0:f0:02:15:70:de:b0:a9:
9f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:1F:D0:E8:A3:72:A5:81:34:90:D5:1A:E7:91:41:80:FC:8F:AA:5A
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS16509.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.174.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:39:cd:ac:aa:1f:80:ba:be:79:30:6f:00:93:0f:6b:91:cd:
01:2b:0f:7d:bf:1a:6e:40:be:6c:45:2e:5d:44:42:35:a0:29:
f4:38:08:dc:21:59:b5:e4:66:18:49:45:fc:43:1e:4a:05:81:
28:29:18:01:f8:89:93:75:5b:c2:e6:2d:20:6d:42:bd:32:98:
04:18:8d:bb:7a:38:24:27:a1:36:41:52:04:8c:3b:9a:60:85:
30:81:99:77:de:65:a1:8e:53:4e:48:5d:df:67:cf:2b:31:39:
1f:cf:72:4e:a4:23:0c:43:7a:3a:62:1c:d9:77:21:c0:34:59:
a5:75:d3:c9:64:ff:fe:ce:e5:76:a9:74:aa:64:16:1b:45:44:
f8:e5:f0:23:ac:86:4e:30:b3:dd:f9:78:08:14:b4:e5:9f:7e:
cd:9d:c9:91:71:d2:b8:e2:ca:27:af:c2:65:eb:fe:5b:87:3d:
3d:27:18:12:f5:50:20:d8:8d:6c:40:2b:e0:6d:9c:94:6b:e6:
cd:9f:c2:78:93:7d:6e:f9:16:37:9c:24:40:ca:1a:cf:f7:c1:
75:1e:0f:5d:06:be:55:8c:22:3b:cf:40:33:24:42:88:3a:67:
27:0d:fe:d5:2a:02:19:21:1f:09:ee:65:4b:57:93:83:00:33:
a4:62:df:0d
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUWS3LaeILRXsNeqDNZ9Sz5MZZf9gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk
ZWI5M2Q5ZDAeFw0yNjA4MjgwNDQ0MzBaFw0yNzA4MjcwNDQ5MzBaMDMxMTAvBgNV
BAMTKEU0MUZEMEU4QTM3MkE1ODEzNDkwRDUxQUU3OTE0MTgwRkM4RkFBNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjD774p6/BGLwJzZq8rUUYTQGs
SqGgmnKoJJ9579kAk2kZTKrr/YAOKd6g+4YWMWY3AidbSdmZgMDJRERwVMmEa57u
uC+1PPeLR5d7uhWLbCFgBZslPwQcrAMQCQSQXs2E2O0OWKCg6eHnoSZYh851LlwL
s9Yi8YKpVfIKdlOMdlQ1sg3p54v2ax23EfsuLk9bcdLiBzf0+zVe2PQv1KEKd9bG
cxYmcwdTJY1Qqv5X7YXcTGPUbPXyDQBZQmuC85a0TWJIJv0Ar6x5lZqwDUkS2uJR
HeYe1Je3DBgrBcytIF5B6mwDKXDY6Y6g9HchVkHff5pIvUng8AIVcN6wqZ/BAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQU5B/Q6KNypYE0kNUa55FBgPyPqlowHwYDVR0j
BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2
MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2
NVBaMC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt
NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTMTY1MDkucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACPFK4w
DQYJKoZIhvcNAQELBQADggEBACo5zayqH4C6vnkwbwCTD2uRzQErD32/Gm5AvmxF
Ll1EQjWgKfQ4CNwhWbXkZhhJRfxDHkoFgSgpGAH4iZN1W8LmLSBtQr0ymAQYjbt6
OCQnoTZBUgSMO5pghTCBmXfeZaGOU05IXd9nzysxOR/Pck6kIwxDejpiHNl3IcA0
WaV108lk//7O5XapdKpkFhtFRPjl8COshk4ws935eAgUtOWffs2dyZFx0rjiyiev
wmXr/luHPT0nGBL1UCDYjWxAK+BtnJRr5s2fwniTfW75FjecJEDKGs/3wXUeD10G
vlWMIjvPQDMkQog6ZycN/tUqAhkhHwnuZUtXk4MAM6Ri3w0=
-----END CERTIFICATE-----
Generated at Mon Sep 21 20:37:46 2026 by rpki-client