Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS16509.roa
File: AS16509.roa (raw, json)
Hash identifier: M0BiV06X2lrkHNOu+B4VWrCq5w5vkfH9AKvXJ3wez40=
Subject key identifier: 7B:AC:52:36:99:F7:56:4B:65:37:EC:04:38:3F:65:C7:45:50:7C:88
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 35A179E678D9BB84B86B386159FD127A4D4F6FC0
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS16509.roa
Signing time: Tue 08 Sep 2026 18:03:35 +0000
ROA not before: Tue 08 Sep 2026 17:58:35 +0000
ROA not after: Tue 07 Sep 2027 18:03:35 +0000
asID: 16509
IP address blocks: 91.124.34.0/24 maxlen: 24
91.124.38.0/24 maxlen: 24
91.124.122.0/24 maxlen: 24
91.124.131.0/24 maxlen: 24
91.124.133.0/24 maxlen: 24
91.124.217.0/24 maxlen: 24
92.112.51.0/24 maxlen: 24
92.112.58.0/24 maxlen: 24
92.112.61.0/24 maxlen: 24
92.112.63.0/24 maxlen: 24
92.112.74.0/24 maxlen: 24
92.112.75.0/24 maxlen: 24
92.113.49.0/24 maxlen: 24
92.113.50.0/24 maxlen: 24
92.113.51.0/24 maxlen: 24
92.113.52.0/24 maxlen: 24
92.113.53.0/24 maxlen: 24
92.113.100.0/24 maxlen: 24
95.134.127.0/24 maxlen: 24
95.134.161.0/24 maxlen: 24
95.135.160.0/24 maxlen: 24
95.135.191.0/24 maxlen: 24
95.135.202.0/24 maxlen: 24
178.92.101.0/24 maxlen: 24
178.94.192.0/24 maxlen: 24
178.95.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:a1:79:e6:78:d9:bb:84:b8:6b:38:61:59:fd:12:7a:4d:4f:6f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 8 17:58:35 2026 GMT
Not After : Sep 7 18:03:35 2027 GMT
Subject: CN=7BAC523699F7564B6537EC04383F65C745507C88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:dd:e6:33:e0:57:03:9e:bc:95:d4:25:97:3f:
c9:9c:f5:a9:5a:28:c2:bd:b0:94:4a:a1:d6:ca:06:
f1:42:bb:b5:f3:ba:04:24:21:88:1c:28:b9:e0:03:
08:04:b6:d0:19:1a:7c:a9:fc:b9:5c:31:99:4b:20:
38:8e:9d:1c:26:15:d1:1b:84:0f:66:69:e8:98:2e:
11:39:59:76:ed:40:d1:ea:79:76:08:e4:64:13:89:
12:46:f3:90:a4:ac:80:10:97:ad:b3:82:20:ec:f2:
6d:dd:cd:79:cd:8b:85:e2:03:fd:da:f1:53:92:78:
56:38:12:da:9a:f0:b5:89:08:0b:80:d6:d6:bc:57:
81:df:9e:04:d8:0a:62:83:c8:95:bc:cf:fd:05:5c:
56:b9:64:3b:ea:ee:88:7a:ba:d2:10:78:18:52:6c:
32:2d:e8:34:d2:1e:0e:07:d6:ef:c8:9f:d5:08:e4:
65:28:85:cf:fe:47:30:21:92:cf:5c:bf:ae:ae:80:
5e:1c:43:7d:a7:f9:1e:72:a5:32:4d:2c:61:d3:53:
1c:62:ac:27:2f:39:c8:b2:d1:47:9e:84:2f:cd:43:
e8:bd:40:f9:fc:8b:24:a2:7b:41:65:2d:fd:03:a1:
d6:50:a1:a3:8e:2a:b5:d8:3a:c3:ed:25:d1:3b:82:
c3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:AC:52:36:99:F7:56:4B:65:37:EC:04:38:3F:65:C7:45:50:7C:88
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS16509.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.34.0/24
91.124.38.0/24
91.124.122.0/24
91.124.131.0/24
91.124.133.0/24
91.124.217.0/24
92.112.51.0/24
92.112.58.0/24
92.112.61.0/24
92.112.63.0/24
92.112.74.0/23
92.113.49.0-92.113.53.255
92.113.100.0/24
95.134.127.0/24
95.134.161.0/24
95.135.160.0/24
95.135.191.0/24
95.135.202.0/24
178.92.101.0/24
178.94.192.0/24
178.95.43.0/24
Signature Algorithm: sha256WithRSAEncryption
32:22:f2:1c:03:ed:49:76:d2:83:f9:28:cf:e2:d5:2a:91:ab:
60:26:71:7f:a0:8c:74:93:32:df:0c:a2:1a:cd:dc:85:4a:c7:
4f:5d:cb:27:c0:3f:13:4c:20:55:fd:c6:c5:3d:32:9f:06:80:
78:f9:59:8a:33:17:09:da:53:af:c4:40:7d:47:53:bf:b7:1a:
7a:cc:5a:7b:ba:b6:ac:c6:42:f9:75:1b:37:6d:04:47:5a:74:
11:76:4b:fd:94:d8:08:0f:4c:97:5a:46:b8:3a:cd:f8:32:3f:
2e:cd:c1:79:0b:8c:a0:18:b4:4d:24:07:79:29:ae:80:d5:69:
d6:f4:7a:c3:2e:77:95:36:98:8a:8e:4c:8a:03:dd:57:90:8a:
82:2f:7b:66:8a:ea:a5:d5:7a:46:34:34:a1:bf:8a:e6:97:fb:
e0:1d:bc:9d:19:4d:16:e0:d8:55:af:72:c9:39:f8:04:4b:41:
ea:ea:ba:68:9b:bd:9f:b7:4a:1d:41:11:c8:d1:25:b0:cc:7c:
9b:96:30:5f:a6:02:ae:71:50:cf:c8:46:5c:c0:a3:3f:1c:d3:
76:a3:9d:d2:f3:f5:49:c9:3a:c4:9a:96:b5:34:55:49:79:11:
c1:f8:55:de:b4:cf:7e:ba:7b:d8:9a:cb:98:fd:62:fa:2e:89:
03:da:34:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:09:15 2026 by rpki-client