Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS16276.roa
File: AS16276.roa (raw, json)
Hash identifier: 3Ew0UlMWYh1BKhyRo7XTtc25enDyuumoseeUbkeD6bA=
Subject key identifier: 72:5E:E4:C5:E1:DF:29:F2:A9:9D:F6:3F:D0:CE:78:08:6D:89:23:CB
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 6C4B393FE84CB5D22CC67C1859652AF956312D1B
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS16276.roa
Signing time: Thu 03 Jul 2025 20:38:13 +0000
ROA not before: Thu 03 Jul 2025 20:33:13 +0000
ROA not after: Thu 02 Jul 2026 20:38:13 +0000
asID: 16276
IP address blocks: 176.53.158.0/24 maxlen: 24
193.32.204.0/24 maxlen: 24
193.32.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:4b:39:3f:e8:4c:b5:d2:2c:c6:7c:18:59:65:2a:f9:56:31:2d:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Jul 3 20:33:13 2025 GMT
Not After : Jul 2 20:38:13 2026 GMT
Subject: CN=725EE4C5E1DF29F2A99DF63FD0CE78086D8923CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:85:93:15:ae:18:11:e3:45:bf:3c:9c:09:47:
aa:11:49:5a:a4:2d:00:bd:53:76:26:38:dd:76:29:
10:24:0e:d4:40:0a:8d:e3:e8:9b:8a:b2:e3:8d:3f:
b2:e4:d7:29:fe:08:8b:3e:d0:d3:5e:8a:f8:ec:38:
1e:2e:a6:41:96:4d:3d:54:c9:b4:82:36:50:b1:09:
c9:43:d9:2f:8d:8d:09:a4:64:8a:4f:e3:5f:25:f6:
64:e3:3e:d7:dc:c3:43:4b:de:54:de:a3:d5:84:7c:
32:04:99:3a:3b:22:f8:54:13:eb:26:dc:ed:1f:d1:
9c:52:aa:3d:32:f2:d4:7d:64:37:b6:d9:a1:e2:a1:
28:46:35:8a:1b:dc:3e:5c:2a:e0:d8:06:3f:c8:19:
80:7d:fa:f0:b6:1c:85:b1:75:ce:55:28:f0:b0:a4:
fc:6a:52:13:6f:d9:f3:51:b8:2d:7f:cd:6e:12:39:
e6:e7:63:6a:01:07:c0:ed:e1:cb:0c:44:91:84:f0:
a5:6d:92:bf:f9:9e:a8:92:a4:a3:db:40:fd:4a:60:
19:62:2e:03:df:2e:97:4f:8d:5e:22:f9:56:e2:ba:
5b:41:8c:a0:ff:c8:2b:57:a4:80:2d:6b:92:18:15:
f9:91:a7:a3:fa:d7:c0:9d:95:8a:7a:e0:90:27:ca:
1f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:5E:E4:C5:E1:DF:29:F2:A9:9D:F6:3F:D0:CE:78:08:6D:89:23:CB
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS16276.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.158.0/24
193.32.204.0/24
193.32.207.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:43:f2:11:44:c5:ec:da:17:0e:93:eb:1f:33:f9:77:8d:e0:
27:dd:77:1f:39:3d:f2:52:2e:31:52:57:36:74:59:7a:34:13:
75:a0:51:f6:b5:f3:7c:f1:48:39:9b:2f:d4:a9:c9:11:32:7b:
30:27:ff:f1:e2:0d:90:90:f3:e7:63:56:bf:6b:6a:68:68:de:
bd:61:50:00:03:4b:0e:25:8b:d9:62:d1:a9:d0:6b:d3:91:bf:
ea:cd:34:6e:05:c2:4d:a2:f1:15:cf:e5:f1:c1:e2:9d:b6:34:
39:6d:55:1d:f6:49:b4:6e:22:d5:ba:49:bd:63:04:f8:41:a0:
6a:02:61:29:c7:f0:29:1a:09:ff:a3:c5:8b:e5:c8:d8:21:cd:
71:69:a8:b9:2d:74:d1:61:c0:e1:d9:09:82:9f:8e:93:94:f8:
2c:7f:7a:51:42:15:5d:31:a8:65:5f:43:51:b2:6a:3f:2c:60:
8f:10:69:60:3a:f1:3a:64:41:f0:2b:5f:aa:57:08:b0:35:02:
6d:ce:49:98:6e:31:13:f3:7c:0f:43:b9:d0:38:29:0b:6c:cd:
11:4c:f5:19:73:e9:ff:d0:87:db:2e:76:fd:24:79:b3:ad:f3:
c5:f0:c3:43:10:ea:f7:7d:23:89:f8:f0:71:9c:ff:1c:6f:7f:
b9:24:28:62
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 22 11:45:10 2025 by rpki-client