Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS16509.roa
File: AS16509.roa (raw, json)
Hash identifier: PVeC8Tk6/oc6/ORTLl8vglJIHMVAaFNtBj37T2xf3XQ=
Subject key identifier: 02:3D:75:59:53:3F:54:89:F5:87:3A:B4:83:46:45:74:63:E8:7B:5D
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 2009BC025EB1A8C78BFA69C69464A6095F6CAC18
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS16509.roa
Signing time: Mon 26 Oct 2026 03:59:03 +0000
ROA not before: Mon 26 Oct 2026 03:54:03 +0000
ROA not after: Mon 25 Oct 2027 03:59:03 +0000
asID: 16509
IP address blocks: 91.124.34.0/24 maxlen: 24
91.124.38.0/24 maxlen: 24
91.124.122.0/24 maxlen: 24
91.124.131.0/24 maxlen: 24
91.124.133.0/24 maxlen: 24
91.124.217.0/24 maxlen: 24
92.112.51.0/24 maxlen: 24
92.112.58.0/24 maxlen: 24
92.112.61.0/24 maxlen: 24
92.112.63.0/24 maxlen: 24
92.112.74.0/24 maxlen: 24
92.112.75.0/24 maxlen: 24
92.113.49.0/24 maxlen: 24
92.113.50.0/24 maxlen: 24
92.113.51.0/24 maxlen: 24
92.113.52.0/24 maxlen: 24
92.113.53.0/24 maxlen: 24
92.113.100.0/24 maxlen: 24
95.134.127.0/24 maxlen: 24
95.134.161.0/24 maxlen: 24
95.135.160.0/24 maxlen: 24
95.135.191.0/24 maxlen: 24
95.135.202.0/24 maxlen: 24
178.92.101.0/24 maxlen: 24
178.92.111.0/24 maxlen: 24
178.94.192.0/24 maxlen: 24
178.95.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 04:36:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:09:bc:02:5e:b1:a8:c7:8b:fa:69:c6:94:64:a6:09:5f:6c:ac:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 26 03:54:03 2026 GMT
Not After : Oct 25 03:59:03 2027 GMT
Subject: CN=023D7559533F5489F5873AB48346457463E87B5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d3:19:34:fa:f0:98:00:11:4e:01:ef:31:12:
12:76:8a:fa:0c:74:90:de:63:69:51:1c:95:b6:ba:
24:c7:86:9d:e1:42:a4:b4:40:78:d6:ca:3a:85:b7:
7a:be:74:b5:e9:d9:c3:58:85:02:ad:90:30:c8:12:
bc:7e:8d:b9:f9:cc:60:0f:ac:ae:5d:d1:f8:bb:f1:
b3:ce:a3:6b:d6:a5:26:53:17:17:8d:08:9f:e3:3c:
8b:ff:f0:37:91:63:ae:52:52:03:e5:7c:69:03:55:
4b:fc:87:7e:a4:27:d3:1b:73:ce:99:37:af:97:00:
71:05:c3:51:a8:89:1a:6e:7d:4b:38:ef:80:ae:d8:
ca:fb:1e:81:be:e3:24:f7:23:93:4f:85:3a:6e:56:
81:4a:05:32:ad:77:66:9e:6e:ee:c8:c2:b4:c6:14:
b2:b8:e9:e1:bd:3f:77:08:2c:51:d9:ff:67:d8:1d:
f0:b0:5c:d1:a0:2a:fa:76:70:72:7a:20:4d:bd:09:
68:13:41:20:9f:0c:0e:f1:80:9e:00:68:11:a6:ac:
55:1f:0f:30:83:d1:48:e6:6f:a9:f4:66:f1:59:79:
61:ca:1e:ee:59:e1:02:fd:a1:b6:44:cd:97:35:e0:
d2:c6:ec:90:ea:4b:e0:12:e1:4f:54:2f:2c:12:79:
11:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:3D:75:59:53:3F:54:89:F5:87:3A:B4:83:46:45:74:63:E8:7B:5D
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS16509.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.34.0/24
91.124.38.0/24
91.124.122.0/24
91.124.131.0/24
91.124.133.0/24
91.124.217.0/24
92.112.51.0/24
92.112.58.0/24
92.112.61.0/24
92.112.63.0/24
92.112.74.0/23
92.113.49.0-92.113.53.255
92.113.100.0/24
95.134.127.0/24
95.134.161.0/24
95.135.160.0/24
95.135.191.0/24
95.135.202.0/24
178.92.101.0/24
178.92.111.0/24
178.94.192.0/24
178.95.43.0/24
Signature Algorithm: sha256WithRSAEncryption
83:bf:ae:ec:72:23:b8:04:ee:22:32:fa:6b:b0:ad:10:2f:a1:
32:e9:be:86:fd:a1:fc:89:00:92:c5:dd:fe:cf:71:6a:72:ca:
46:d5:de:45:b9:15:3c:53:a7:44:d0:b3:f9:cd:95:51:bb:0f:
47:1a:d5:95:df:c5:4f:8f:e4:dd:be:03:9f:a2:cc:e6:f1:2a:
df:0f:36:d9:76:69:30:0b:79:e1:54:cc:96:e2:6e:37:39:63:
be:03:00:04:ef:e3:72:79:65:7d:34:20:ed:c9:be:4b:3c:0e:
84:59:c2:15:a0:0b:6d:04:b6:5a:ed:2f:98:af:40:ed:f9:6f:
78:b0:2c:0a:39:9b:15:e6:05:b2:74:00:c0:60:24:1d:a7:64:
df:4b:2d:85:8a:25:a6:bd:16:2d:f2:8f:6e:bb:c1:0b:14:95:
73:99:b7:41:9c:28:b3:62:fe:bf:fa:01:94:48:a0:60:2a:e4:
9a:d3:5a:bc:b0:23:84:60:ec:55:16:c0:25:8a:04:47:32:0a:
43:82:a6:ba:0f:49:bb:b8:41:d8:c8:52:ee:dc:c1:9f:f0:03:
2a:ac:b3:95:8b:50:fe:c2:d5:1b:66:ac:59:f3:18:b1:a6:31:
41:70:40:b8:e2:52:28:90:ef:c1:97:62:34:32:f8:34:92:76:
7a:33:6f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:18:16 2026 by rpki-client