Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS16276.roa
File: AS16276.roa (raw, json)
Hash identifier: +BErPX3pkPreXGN8rLcCS1G006TqaorLfOyOPR9rpyY=
Subject key identifier: 2E:B1:D2:C7:EB:90:DA:89:B4:07:35:60:3A:F8:97:65:E9:DC:2C:7F
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 396988B60DED5FFF170C843CA4B6E01198AD9060
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS16276.roa
Signing time: Wed 21 Oct 2026 07:06:25 +0000
ROA not before: Wed 21 Oct 2026 07:01:25 +0000
ROA not after: Wed 20 Oct 2027 07:06:25 +0000
asID: 16276
IP address blocks: 2.58.172.0/24 maxlen: 24
89.19.44.0/24 maxlen: 24
181.41.194.0/24 maxlen: 24
191.96.13.0/24 maxlen: 24
191.96.140.0/23 maxlen: 23
191.101.150.0/24 maxlen: 24
191.101.157.0/24 maxlen: 24
191.101.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:69:88:b6:0d:ed:5f:ff:17:0c:84:3c:a4:b6:e0:11:98:ad:90:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Oct 21 07:01:25 2026 GMT
Not After : Oct 20 07:06:25 2027 GMT
Subject: CN=2EB1D2C7EB90DA89B40735603AF89765E9DC2C7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:22:c0:0f:58:1b:12:a2:44:4a:51:52:62:00:
a7:4f:c1:f4:ba:75:2d:37:92:d6:c3:da:1b:a3:83:
4f:5c:08:8f:d5:96:3a:13:50:92:50:8d:5d:32:9c:
a4:6f:56:09:90:86:62:71:8b:55:d2:79:95:0e:ff:
84:50:91:4c:a6:31:8c:02:8e:aa:4a:07:e3:38:ec:
80:2b:38:c7:d6:f1:19:c0:42:dd:4d:73:8b:bf:a2:
3b:41:51:92:9a:9e:fb:e9:c9:09:4c:bc:aa:24:0e:
ed:05:b2:34:4e:0f:d9:8c:ba:8d:e5:b3:2e:fa:cb:
16:b8:b2:29:64:73:84:04:c2:12:12:eb:4a:66:07:
01:0a:cd:ab:f0:1d:5f:22:0e:35:76:91:60:01:fd:
d0:eb:71:8b:a3:c9:66:8d:3b:10:34:5c:66:4f:d2:
09:47:2c:bb:68:34:4d:3a:91:c4:81:b7:87:49:8e:
41:74:64:27:f0:3e:69:5f:b0:a4:88:bc:af:df:44:
0e:18:83:a1:39:90:5f:ef:a9:79:a2:5a:78:d8:cd:
1c:24:a6:82:27:c1:69:f0:a1:93:3c:7b:4c:7a:17:
ec:67:dc:84:b2:2c:ef:4f:7f:8c:ed:6f:f3:45:60:
14:78:b1:f0:26:a5:68:d0:ae:7d:4b:78:8e:8e:87:
e1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B1:D2:C7:EB:90:DA:89:B4:07:35:60:3A:F8:97:65:E9:DC:2C:7F
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS16276.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.172.0/24
89.19.44.0/24
181.41.194.0/24
191.96.13.0/24
191.96.140.0/23
191.101.150.0/24
191.101.157.0/24
191.101.218.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:6e:93:0f:7b:60:4c:37:9a:5e:95:7a:08:a3:ed:b5:7c:cf:
ab:ed:20:bc:73:f6:bb:9e:28:88:e1:9b:d0:b0:6e:70:d1:d2:
4c:af:ea:fe:36:ad:2e:29:a0:1b:db:6d:17:46:ad:f6:49:fb:
d8:1d:b5:98:bb:db:89:8a:c3:62:a2:2b:69:51:34:80:2c:1d:
80:36:6e:a0:57:9b:cd:70:c8:8b:dd:82:c3:74:fb:21:1e:79:
47:84:5c:7b:03:4f:0a:43:3b:e8:58:28:26:c4:1c:a1:20:5c:
26:5f:5e:3a:a5:01:49:de:e5:a9:ec:2f:a7:b2:63:22:4b:f3:
51:1f:f0:bd:a4:d4:de:89:a0:d7:cf:07:f0:a5:15:59:b0:e1:
46:bc:9f:41:6b:84:b1:43:1b:85:01:2b:50:0a:93:80:28:1a:
a7:0a:c7:d0:04:37:3f:47:34:31:ab:35:e1:86:76:ce:a3:5b:
71:7c:76:52:09:e1:21:b2:83:aa:92:f9:84:47:0d:40:28:84:
e5:cc:7b:82:42:45:d3:4b:f1:de:57:b6:78:a5:4c:79:5f:e8:
10:1d:f7:69:ab:f4:c5:cb:55:c5:02:b8:f7:2c:7b:fd:79:f3:
11:9e:b4:2e:2f:7f:f3:6f:b0:75:d9:83:dd:39:42:d3:c4:d5:
f3:21:88:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:44:52 2026 by rpki-client