Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS16276.roa
File: AS16276.roa (raw, json)
Hash identifier: 5c47yRX8sKbfs5icPJxN831sp6h6MSWbBvEuXw5p5uE=
Subject key identifier: 32:76:F5:6A:E5:62:FB:A2:86:45:F4:D3:08:8A:5C:6A:6E:46:5C:71
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 1E55AD797A62CC9F41AFC595E7D4976B5030D337
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS16276.roa
Signing time: Sun 19 Jul 2026 05:23:22 +0000
ROA not before: Sun 19 Jul 2026 05:18:22 +0000
ROA not after: Sun 18 Jul 2027 05:23:22 +0000
asID: 16276
IP address blocks: 46.236.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:47:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:55:ad:79:7a:62:cc:9f:41:af:c5:95:e7:d4:97:6b:50:30:d3:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Jul 19 05:18:22 2026 GMT
Not After : Jul 18 05:23:22 2027 GMT
Subject: CN=3276F56AE562FBA28645F4D3088A5C6A6E465C71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:32:3b:8b:13:99:2e:8c:56:d6:44:ca:1e:7b:
75:f7:5b:e2:94:87:76:d5:cc:8d:b1:19:e1:c8:db:
10:3d:b0:1e:cd:26:52:9a:ff:87:7a:be:7d:db:82:
d6:0a:c0:e2:d9:37:ed:7e:2d:9f:8a:12:b3:35:60:
82:b4:a2:0a:ba:17:72:d8:87:6a:27:92:19:25:f5:
72:d3:96:c1:f5:67:aa:a6:bb:f4:57:40:2d:ea:17:
04:9f:e7:7c:43:92:23:1e:13:6a:6f:13:07:77:70:
9a:75:80:bc:7c:50:45:8a:5d:6c:00:80:4b:9c:6a:
b1:cc:7b:5c:aa:0c:e3:27:ce:b1:76:cb:b0:fe:13:
23:34:69:9e:1e:5e:77:f5:46:a5:a3:93:1b:5b:2e:
0e:f0:18:ff:04:a7:59:64:ba:a0:ab:27:4c:40:3d:
c6:3f:bc:cf:0b:86:cf:8a:90:96:f4:d1:ec:18:ac:
27:a6:f6:1c:f1:a5:1b:cc:9e:e9:87:e6:52:d1:a9:
ad:75:c2:bb:22:42:15:b2:d6:bf:f5:7a:8d:20:77:
2b:57:0e:53:50:47:52:6d:7e:3f:e2:fc:4d:61:f7:
d5:4f:69:85:d8:fc:d1:a7:41:ff:2e:06:71:e6:ee:
a7:fe:43:09:16:d4:f9:50:e4:28:fd:0e:ea:9f:89:
48:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:76:F5:6A:E5:62:FB:A2:86:45:F4:D3:08:8A:5C:6A:6E:46:5C:71
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS16276.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.211.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:a0:8c:06:33:8b:38:59:dd:90:46:b5:7b:94:35:ea:53:8f:
fd:62:39:b4:3f:14:ee:47:ed:da:66:8d:08:71:c6:78:ae:72:
12:d7:2f:e1:46:26:65:76:7c:f6:b1:eb:35:e4:03:62:6e:ec:
45:db:e7:48:a8:0f:d2:b6:d5:79:19:68:df:4e:67:28:bd:2c:
b8:8c:cc:18:eb:0d:1c:17:9c:4f:7c:3c:9d:87:13:bc:00:bc:
c2:9e:3a:f7:a7:03:54:be:f3:a0:f2:1d:a8:6f:83:24:09:5e:
0b:7a:c8:b7:bb:cf:ba:da:58:91:7a:7f:d7:86:04:10:5b:bd:
88:c8:53:74:93:98:9e:5b:64:3a:7c:eb:db:ea:29:08:3c:c7:
a2:12:c4:b5:ed:8f:23:2a:b4:c5:0d:a0:37:47:45:9a:ec:c5:
74:f4:07:e2:2a:6f:80:86:0e:fa:e8:ec:87:be:f2:b7:38:08:
48:1e:02:37:66:0c:92:4c:1a:b8:62:6f:2d:f4:e6:0b:90:fc:
0f:8a:7e:aa:95:13:36:20:02:78:23:fc:47:55:58:ae:f4:3b:
25:70:a3:cb:7c:49:75:d6:a5:99:7d:d9:69:22:fc:d1:bb:a7:
d0:16:a2:9b:b0:5c:fc:e9:bb:bb:d1:f3:0a:63:de:af:46:b2:
68:dc:bd:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:17:07 2026 by rpki-client