Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS16276.roa
File: AS16276.roa (raw, json)
Hash identifier: RdhoSHuQP/Flq4rt/hsfuGuCGSYXuZbgkqYVrYQSoCI=
Subject key identifier: 67:3E:76:73:57:28:29:AC:69:D1:2F:E2:0E:7C:ED:20:FC:6B:35:43
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0280EB8B6C323B1D378E8BE8D2CCF2B2B2948262
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS16276.roa
Signing time: Thu 08 Oct 2026 00:01:13 +0000
ROA not before: Wed 07 Oct 2026 23:56:13 +0000
ROA not after: Thu 07 Oct 2027 00:01:13 +0000
asID: 16276
IP address blocks: 82.21.139.0/24 maxlen: 24
82.22.15.0/24 maxlen: 24
82.22.18.0/24 maxlen: 24
82.22.25.0/24 maxlen: 24
82.22.51.0/24 maxlen: 24
82.22.118.0/24 maxlen: 24
82.24.96.0/22 maxlen: 24
82.24.190.0/24 maxlen: 24
82.25.14.0/24 maxlen: 24
82.25.44.0/24 maxlen: 24
82.25.146.0/23 maxlen: 24
82.26.81.0/24 maxlen: 24
82.26.176.0/21 maxlen: 24
82.26.184.0/21 maxlen: 24
82.27.122.0/24 maxlen: 24
82.29.93.0/24 maxlen: 24
82.29.126.0/24 maxlen: 24
82.38.2.0/24 maxlen: 24
82.38.82.0/24 maxlen: 24
82.38.124.0/22 maxlen: 24
82.38.140.0/22 maxlen: 24
82.38.152.0/22 maxlen: 24
82.38.156.0/22 maxlen: 24
82.38.160.0/22 maxlen: 24
82.38.164.0/22 maxlen: 24
82.38.219.0/24 maxlen: 24
82.38.224.0/22 maxlen: 24
82.38.228.0/22 maxlen: 24
82.38.232.0/22 maxlen: 24
82.38.236.0/22 maxlen: 24
82.38.240.0/22 maxlen: 24
82.38.244.0/22 maxlen: 24
82.38.248.0/22 maxlen: 24
82.38.252.0/22 maxlen: 24
82.39.108.0/24 maxlen: 24
82.39.156.0/22 maxlen: 24
82.39.176.0/22 maxlen: 24
82.39.180.0/22 maxlen: 24
82.39.216.0/22 maxlen: 24
82.39.224.0/22 maxlen: 24
82.40.0.0/22 maxlen: 24
82.40.4.0/22 maxlen: 24
82.40.8.0/22 maxlen: 24
82.40.12.0/22 maxlen: 24
82.40.16.0/22 maxlen: 24
82.41.44.0/22 maxlen: 24
82.41.52.0/22 maxlen: 24
82.41.68.0/22 maxlen: 24
82.41.80.0/22 maxlen: 24
82.41.88.0/22 maxlen: 24
82.41.100.0/22 maxlen: 24
82.41.104.0/22 maxlen: 24
82.41.108.0/22 maxlen: 24
82.41.124.0/22 maxlen: 24
82.41.134.0/24 maxlen: 24
82.41.148.0/22 maxlen: 24
82.41.152.0/22 maxlen: 24
82.41.160.0/22 maxlen: 24
82.41.164.0/22 maxlen: 24
82.41.172.0/22 maxlen: 24
82.41.176.0/22 maxlen: 24
82.41.184.0/22 maxlen: 24
82.41.188.0/22 maxlen: 24
82.41.204.0/22 maxlen: 24
82.41.212.0/22 maxlen: 24
82.41.224.0/22 maxlen: 24
82.41.228.0/22 maxlen: 24
82.47.63.0/24 maxlen: 24
82.47.98.0/24 maxlen: 24
82.47.180.0/24 maxlen: 24
84.75.33.0/24 maxlen: 24
178.83.45.0/24 maxlen: 24
178.83.46.0/24 maxlen: 24
178.83.166.0/24 maxlen: 24
2a13:9500:138::/48 maxlen: 48
2a13:9500:143::/48 maxlen: 48
2a13:9500:166::/48 maxlen: 48
2a13:9500:18e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:80:eb:8b:6c:32:3b:1d:37:8e:8b:e8:d2:cc:f2:b2:b2:94:82:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 7 23:56:13 2026 GMT
Not After : Oct 7 00:01:13 2027 GMT
Subject: CN=673E7673572829AC69D12FE20E7CED20FC6B3543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:43:e4:37:27:9c:4a:6e:a5:57:03:76:c3:c1:
28:8b:0b:5e:2e:5b:ab:35:5e:18:28:36:c7:88:3d:
0b:82:14:a5:e4:4c:86:02:b0:48:93:e5:0b:d5:81:
ae:a9:e3:ba:d5:bd:ad:b3:21:a5:1c:61:f8:f6:99:
a9:a9:91:39:bb:58:5f:ca:82:1a:11:4c:13:fd:36:
0c:c7:fc:5f:c9:3b:00:42:0c:b3:23:c4:e8:2c:8a:
c4:6f:93:e9:7c:8e:e3:93:71:8d:c8:fa:dd:a1:61:
c6:fd:46:07:a8:70:49:2e:0e:6d:a9:59:33:cd:96:
c3:6b:f6:0d:02:0d:98:06:3e:4f:33:52:e9:9b:e3:
e8:7e:29:56:80:cc:da:f4:d2:6d:a0:71:87:0c:65:
2e:40:e3:7a:e0:40:48:6c:bb:90:46:55:67:46:1c:
93:d7:b3:00:64:1f:15:9d:ba:76:59:e3:cf:a2:4b:
d0:dd:f6:49:00:39:5d:c0:b4:76:60:ef:b1:a4:27:
e0:e0:ca:fa:2b:07:e9:4b:ee:f6:fa:90:0c:97:8b:
47:20:58:ec:09:e6:4b:83:f7:d4:34:4b:44:2e:bb:
da:00:ef:52:7d:09:68:ee:2d:5f:3f:bd:26:68:5d:
e0:ee:34:40:d3:8a:41:b2:2c:bf:1e:9e:bc:2b:03:
8b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:3E:76:73:57:28:29:AC:69:D1:2F:E2:0E:7C:ED:20:FC:6B:35:43
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS16276.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.139.0/24
82.22.15.0/24
82.22.18.0/24
82.22.25.0/24
82.22.51.0/24
82.22.118.0/24
82.24.96.0/22
82.24.190.0/24
82.25.14.0/24
82.25.44.0/24
82.25.146.0/23
82.26.81.0/24
82.26.176.0/20
82.27.122.0/24
82.29.93.0/24
82.29.126.0/24
82.38.2.0/24
82.38.82.0/24
82.38.124.0/22
82.38.140.0/22
82.38.152.0-82.38.167.255
82.38.219.0/24
82.38.224.0/19
82.39.108.0/24
82.39.156.0/22
82.39.176.0/21
82.39.216.0/22
82.39.224.0/22
82.40.0.0-82.40.19.255
82.41.44.0/22
82.41.52.0/22
82.41.68.0/22
82.41.80.0/22
82.41.88.0/22
82.41.100.0-82.41.111.255
82.41.124.0/22
82.41.134.0/24
82.41.148.0-82.41.155.255
82.41.160.0/21
82.41.172.0-82.41.179.255
82.41.184.0/21
82.41.204.0/22
82.41.212.0/22
82.41.224.0/21
82.47.63.0/24
82.47.98.0/24
82.47.180.0/24
84.75.33.0/24
178.83.45.0-178.83.46.255
178.83.166.0/24
IPv6:
2a13:9500:138::/48
2a13:9500:143::/48
2a13:9500:166::/48
2a13:9500:18e::/48
Signature Algorithm: sha256WithRSAEncryption
84:73:8b:87:ef:11:25:ee:d9:08:ac:b3:f4:26:1b:c2:d2:5c:
55:c4:40:63:e4:24:16:9b:20:1a:9c:65:2a:69:cb:17:f2:fa:
7f:ad:2d:4f:04:88:78:28:b6:28:bb:16:1f:0f:12:5a:23:f7:
3d:3e:a8:82:55:a3:55:6a:0d:21:5a:2f:49:22:d9:e3:67:7c:
a3:b8:bd:31:b9:c2:08:51:60:95:0c:13:ea:b4:58:fe:75:7b:
71:48:a8:a6:e1:bb:59:c5:20:63:ae:7a:33:97:6c:73:f5:68:
cb:8a:ba:38:5d:db:01:13:3a:07:7f:b4:a3:a9:e3:5f:46:86:
c1:42:50:6a:fd:e2:44:6e:96:16:30:4f:79:8f:7c:19:35:55:
3b:87:b3:41:17:09:d7:0c:fe:2c:92:a2:00:c8:32:bb:14:9b:
09:b1:20:e0:d8:6b:bd:f2:84:fb:71:b6:02:0c:7e:80:f0:e2:
f4:9e:c9:7b:e4:0e:9b:f9:62:c6:4f:9d:4b:3a:31:7d:7d:97:
87:76:8b:4c:7c:f9:60:7c:ee:0a:64:3d:a8:9e:ea:56:77:5a:
38:4c:99:ae:17:e6:13:54:ef:0b:92:ee:30:cf:0b:f7:3b:eb:
4e:03:e7:9d:f3:1b:01:09:e2:4b:bd:56:5c:93:f6:6a:f2:57:
3c:48:7b:0e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Oct 17 05:59:19 2026 by rpki-client