Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS16276.roa
File: AS16276.roa (raw, json)
Hash identifier: t281EgJaFYobGCFih15UnrdI9M5YxW3AjouRCqqapcs=
Subject key identifier: 91:EA:46:A9:3C:06:27:5E:43:A3:F3:6B:D9:67:FD:12:03:6D:E9:D2
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 233EEC3C17A68EB27DAA6096D2D35F77F462E1F8
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS16276.roa
Signing time: Tue 15 Jul 2025 08:49:24 +0000
ROA not before: Tue 15 Jul 2025 08:44:24 +0000
ROA not after: Tue 14 Jul 2026 08:49:24 +0000
asID: 16276
IP address blocks: 143.20.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:3e:ec:3c:17:a6:8e:b2:7d:aa:60:96:d2:d3:5f:77:f4:62:e1:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Jul 15 08:44:24 2025 GMT
Not After : Jul 14 08:49:24 2026 GMT
Subject: CN=91EA46A93C06275E43A3F36BD967FD12036DE9D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:2c:19:89:81:2f:9e:26:06:91:60:c0:5d:5c:
98:86:87:2a:70:ee:c3:f9:df:57:69:8e:32:4b:ff:
f7:bb:88:01:94:af:3f:c1:f3:1a:fb:9b:ca:71:20:
ba:a8:c4:14:fa:46:a7:eb:d3:fb:5f:7b:ac:a1:4f:
03:84:b1:81:65:c1:2e:c8:29:30:f9:53:67:22:37:
48:2d:e9:d5:60:52:f4:e3:7e:c2:d5:b3:c4:3d:4c:
e0:8c:de:3e:a5:1f:bb:42:51:d9:6e:2a:33:13:7d:
4f:9d:df:c4:82:83:1d:7a:8e:9a:1d:3d:6b:c3:d3:
a2:a4:d1:9f:4c:0d:49:87:09:a4:b9:3d:1c:bb:6d:
81:d7:d6:e3:c3:4c:26:86:ee:c0:e1:25:32:f3:25:
77:d3:13:1d:69:21:4e:bf:96:e3:23:0c:78:ab:0f:
e4:b4:10:fc:5f:c0:38:ec:16:dd:f9:29:49:bd:c3:
b5:15:10:3c:80:09:92:d6:0a:73:3f:89:b9:2c:a3:
e2:e6:af:82:b1:cc:8a:80:85:5c:45:59:e8:a1:54:
fa:3e:bf:a5:b4:42:e1:71:37:76:2f:4e:72:b2:fd:
73:80:ff:b6:1c:d2:83:7b:e1:ef:cc:16:78:56:c7:
ae:d6:cf:b1:9c:9f:28:c4:cb:cd:22:c1:1c:39:f5:
8e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:EA:46:A9:3C:06:27:5E:43:A3:F3:6B:D9:67:FD:12:03:6D:E9:D2
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS16276.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.195.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:da:c2:2f:1a:38:1c:8d:6f:47:e5:2c:38:b2:a0:8e:34:92:
17:50:a7:f6:b2:f2:64:4d:0e:87:b8:c8:ea:3a:49:e5:eb:9d:
55:21:70:11:95:94:43:b8:71:4c:13:57:b7:8e:bb:cc:b3:eb:
ab:59:ce:cf:91:e5:1d:49:61:ad:1b:01:22:74:fa:79:0a:bb:
e4:53:88:19:70:be:ea:81:f8:b3:02:ac:28:e7:66:87:6f:f2:
ac:dd:92:b4:76:67:02:5b:a7:f9:06:d1:e0:8f:79:70:0e:9f:
25:48:66:c0:6b:7c:f1:58:4e:8b:5e:3c:88:d2:62:95:cf:e5:
23:06:5b:b3:ee:55:14:69:3f:1f:26:84:0a:89:94:83:48:9e:
39:82:a3:06:1d:56:b9:0a:d7:10:a3:96:b1:35:5b:50:4e:c8:
d6:ea:a8:0d:bd:bf:48:fb:8b:5b:6c:64:70:2d:63:f0:32:0e:
39:91:e7:29:1e:29:55:3a:0d:c1:0f:65:99:18:d2:d0:75:22:
8e:9b:77:c7:33:04:9d:93:ee:91:f1:aa:68:2e:83:aa:cd:5b:
e2:62:22:b0:4d:bd:7c:19:4c:86:e3:c5:46:4c:c1:ab:35:f8:
5e:c3:f5:f3:e2:5d:ad:b6:bc:6f:2c:1b:72:0e:e8:49:dc:c6:
09:00:74:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 07:25:08 2025 by rpki-client