Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS216291.roa
File: AS216291.roa (raw, json)
Hash identifier: oeDlhHLWUvTegSlQzN6DEBbGuo60MfLzqBwbykcymV4=
Subject key identifier: AC:67:03:73:66:9D:CA:22:31:16:78:94:D2:99:17:E6:FF:10:14:37
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 77077CF253FD26427C5805C8B5F136C286EC1966
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS216291.roa
Signing time: Tue 08 Sep 2026 14:49:33 +0000
ROA not before: Tue 08 Sep 2026 14:44:33 +0000
ROA not after: Tue 07 Sep 2027 14:49:33 +0000
asID: 216291
IP address blocks: 185.36.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:07:7c:f2:53:fd:26:42:7c:58:05:c8:b5:f1:36:c2:86:ec:19:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 8 14:44:33 2026 GMT
Not After : Sep 7 14:49:33 2027 GMT
Subject: CN=AC670373669DCA2231167894D29917E6FF101437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:33:3d:ce:ac:87:0d:03:07:60:3f:db:f1:21:
b4:f1:8b:2f:03:56:89:7c:be:85:2d:81:b5:f4:48:
d6:34:14:c4:60:7b:68:ad:b1:88:22:58:d0:ab:2e:
e0:34:38:2a:63:b2:ab:e9:11:be:14:ff:38:c7:5c:
b7:ab:86:97:37:99:8a:67:36:47:79:c8:4c:1f:51:
46:d2:2f:40:59:22:a7:87:b9:fe:fa:f1:d0:0e:c1:
09:5a:93:70:12:e3:a0:36:da:76:2d:c8:76:a4:bb:
e5:36:68:1e:50:4d:48:8f:22:66:84:b0:e9:34:8c:
4f:57:00:92:0e:d5:2c:bb:67:88:13:74:8c:dc:22:
da:fc:c5:af:b1:80:db:21:a8:9a:86:ca:2c:d3:4a:
4b:db:4e:1c:2b:94:8a:ce:61:e9:19:98:29:64:95:
d9:2f:e0:46:55:e2:70:a1:f3:49:7d:a0:25:30:ca:
6f:3c:d4:98:d3:fe:5b:2d:f3:b2:e1:0f:24:46:28:
4d:ac:d0:71:1c:a1:ae:53:19:ca:14:d9:5f:28:61:
f3:c8:3e:71:21:d1:8d:a3:8b:74:53:21:f2:e7:c0:
01:8c:8e:e4:be:c9:81:47:fe:dd:5e:ad:f8:93:32:
2d:4c:7f:f6:ed:53:80:b5:1a:74:04:cb:35:5c:2f:
56:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:67:03:73:66:9D:CA:22:31:16:78:94:D2:99:17:E6:FF:10:14:37
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS216291.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.57.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:bb:06:58:cf:34:33:18:62:21:ab:c2:06:f4:88:8f:4f:90:
03:c9:03:c0:4b:d4:c6:28:ca:ff:fc:b0:ac:c0:59:1f:a6:d2:
a7:47:5e:8d:4d:9a:c0:36:1d:63:66:fd:09:fc:7a:1e:50:cb:
51:33:85:f5:6a:42:5a:f9:51:e8:3a:8e:e7:68:42:d7:65:75:
2e:a3:d7:11:cb:5e:66:18:dc:b7:b5:0c:c4:06:ba:2a:c0:ba:
e5:cd:0d:f0:5c:4f:89:55:be:88:fe:08:c9:b1:3c:36:8f:1f:
25:b6:6a:55:43:11:95:da:24:53:76:e9:4f:e6:61:d1:41:e1:
e2:d0:72:64:db:cd:09:6f:0a:60:dc:83:df:89:86:ae:6f:ff:
cb:a8:f1:72:21:fc:a4:08:76:c8:1a:18:d9:95:0a:2f:0a:b5:
a3:e7:fa:de:74:aa:d3:85:9a:f0:db:f9:a8:be:78:52:e3:af:
3e:91:41:16:63:d1:4e:c8:18:93:78:21:96:e4:71:19:25:d0:
b7:ec:f7:80:03:f1:63:0e:32:66:91:5c:88:5f:23:3e:5e:03:
ff:21:ab:58:5b:c4:40:26:9c:af:35:36:05:04:1b:b8:97:25:
b2:a4:cb:d1:a5:d4:f0:1e:c0:c4:cb:5c:3f:fe:e5:90:33:e2:
8c:c4:62:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 00:17:44 2026 by rpki-client