Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS16276.roa
File: AS16276.roa (raw, json)
Hash identifier: eTRyrNh/H7zCXRR6FY4m6AglA3tpyUgkHwcqKCmi9BM=
Subject key identifier: 99:D3:7D:80:FD:33:0C:DE:B8:B2:E0:09:DD:F6:3D:AE:61:12:54:F4
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 23849A84814756E16F76B6F3CEF0758C567F10CD
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS16276.roa
Signing time: Sun 16 Aug 2026 18:21:37 +0000
ROA not before: Sun 16 Aug 2026 18:16:37 +0000
ROA not after: Sun 15 Aug 2027 18:21:37 +0000
asID: 16276
IP address blocks: 96.62.105.0/24 maxlen: 24
140.233.177.0/24 maxlen: 24
143.14.59.0/24 maxlen: 24
143.14.231.0/24 maxlen: 24
146.103.10.0/24 maxlen: 24
148.135.192.0/24 maxlen: 24
155.117.5.0/24 maxlen: 24
155.117.6.0/24 maxlen: 24
155.117.11.0/24 maxlen: 24
155.117.13.0/24 maxlen: 24
155.117.127.0/24 maxlen: 24
155.117.197.0/24 maxlen: 24
155.117.233.0/24 maxlen: 24
155.117.234.0/24 maxlen: 24
155.117.248.0/24 maxlen: 24
162.141.71.0/24 maxlen: 24
167.148.125.0/24 maxlen: 24
167.148.193.0/24 maxlen: 24
168.222.43.0/24 maxlen: 24
168.222.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:84:9a:84:81:47:56:e1:6f:76:b6:f3:ce:f0:75:8c:56:7f:10:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 16 18:16:37 2026 GMT
Not After : Aug 15 18:21:37 2027 GMT
Subject: CN=99D37D80FD330CDEB8B2E009DDF63DAE611254F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a6:02:00:6d:d6:e1:97:e6:73:b2:8b:62:1d:
dc:e1:2f:9a:2d:e3:8b:64:9a:6c:05:e1:b2:b6:52:
80:ae:d8:e7:3f:5d:3a:d8:66:4d:a6:70:57:d8:cd:
ee:2a:10:e5:54:d9:0c:26:4e:ab:db:1b:cd:03:a8:
df:71:b6:f4:36:bb:30:88:89:fe:82:77:82:01:1b:
72:2f:de:28:4c:a3:62:91:ef:04:4f:25:86:36:55:
34:61:c3:e5:42:d0:8a:2d:4b:7e:46:f1:3d:4a:84:
8d:5d:c2:ea:78:b6:38:a2:fa:49:f7:6e:7b:91:f7:
ec:4a:bf:8c:6c:ea:d4:a6:1e:aa:db:35:f0:8b:63:
29:d4:9f:1b:c6:6c:0c:74:5a:2d:b2:ee:ff:dc:5e:
7a:35:88:c9:f0:37:ba:63:2c:7c:a8:94:83:7a:ac:
91:68:76:ba:40:64:b1:d2:19:0e:ea:34:8e:cc:16:
88:83:19:95:8d:8a:80:d8:dc:c5:f0:27:de:70:2a:
d0:59:d7:84:81:97:ec:f5:11:cc:39:df:b7:d9:a0:
0f:0c:12:85:d9:24:01:43:5b:be:7a:6c:f2:3e:39:
52:b9:f1:2d:1b:d1:95:e3:88:f2:07:4c:23:c8:69:
4c:8b:86:ba:62:70:c9:47:ce:4f:b2:cb:4e:c8:fb:
7d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D3:7D:80:FD:33:0C:DE:B8:B2:E0:09:DD:F6:3D:AE:61:12:54:F4
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS16276.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.105.0/24
140.233.177.0/24
143.14.59.0/24
143.14.231.0/24
146.103.10.0/24
148.135.192.0/24
155.117.5.0-155.117.6.255
155.117.11.0/24
155.117.13.0/24
155.117.127.0/24
155.117.197.0/24
155.117.233.0-155.117.234.255
155.117.248.0/24
162.141.71.0/24
167.148.125.0/24
167.148.193.0/24
168.222.43.0/24
168.222.49.0/24
Signature Algorithm: sha256WithRSAEncryption
49:d8:90:62:aa:15:4b:83:63:45:a7:6f:dd:82:12:37:5f:96:
fe:65:44:d0:ad:62:57:b4:04:55:c7:86:65:37:28:f0:2b:23:
10:2a:82:25:a7:7c:4c:43:a7:50:e1:93:46:2c:45:00:86:a7:
19:cb:b1:50:7d:0b:e1:db:a1:09:2b:50:40:86:8d:34:f8:53:
63:b8:44:44:fd:16:e6:77:dc:0f:df:64:f7:6e:c3:5d:9c:b0:
b5:25:11:ce:be:b1:79:51:7e:c4:cb:84:99:68:5a:7f:0f:f9:
8c:ba:6a:a1:58:fe:67:19:20:aa:ae:25:3e:8f:44:20:12:23:
13:1f:62:9e:dd:43:57:6f:85:50:62:12:32:ff:66:6b:ae:60:
ac:3b:e6:16:1c:61:4b:0f:28:af:00:f6:82:df:49:fb:69:b4:
12:83:c6:85:2e:76:3d:af:e8:fe:2e:d2:c8:07:c3:61:aa:08:
98:72:d5:f6:eb:b5:e0:81:4f:bc:4f:39:6a:a6:1c:22:5e:9f:
a7:44:d8:28:09:d7:7d:09:35:07:1a:05:51:5f:36:02:de:c6:
a0:af:a5:f8:8d:e6:f8:75:27:00:8a:fd:f8:ae:a6:30:9d:b6:
65:fb:62:0e:b4:1a:42:6b:5f:6b:d4:31:bb:48:7c:26:75:87:
0c:eb:a8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:54:01 2026 by rpki-client