Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS16276.roa
File: AS16276.roa (raw, json)
Hash identifier: TmA8GPMQT97reRpqhTXsmWlWCkKw9na9g9zZGnq9Xig=
Subject key identifier: 8E:E0:EC:74:80:1B:4D:B7:CD:DE:CD:41:A5:24:A0:5E:23:7A:A4:FC
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 4DB046C1869613016288F9504A6D60755CF6446D
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS16276.roa
Signing time: Sun 09 Aug 2026 10:08:32 +0000
ROA not before: Sun 09 Aug 2026 10:03:32 +0000
ROA not after: Sun 08 Aug 2027 10:08:32 +0000
asID: 16276
IP address blocks: 2.58.172.0/24 maxlen: 24
89.19.44.0/24 maxlen: 24
181.41.194.0/24 maxlen: 24
191.96.140.0/23 maxlen: 23
191.101.150.0/24 maxlen: 24
191.101.210.0/24 maxlen: 24
191.101.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 03:13:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:b0:46:c1:86:96:13:01:62:88:f9:50:4a:6d:60:75:5c:f6:44:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 9 10:03:32 2026 GMT
Not After : Aug 8 10:08:32 2027 GMT
Subject: CN=8EE0EC74801B4DB7CDDECD41A524A05E237AA4FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:57:51:3f:12:65:67:82:d6:5c:ce:8a:e4:5a:
06:15:bd:03:31:d6:8c:f3:0a:82:b0:5a:f7:6d:a4:
b6:f1:8d:cc:a3:22:92:71:55:3d:94:ba:e9:34:92:
59:6c:77:f3:43:c8:19:3e:57:03:ef:b1:13:04:f4:
53:28:2a:54:8b:de:69:e1:8b:44:8f:4c:67:5e:6f:
ab:9c:78:48:3d:bb:8c:74:11:d8:e6:fd:23:a2:4c:
1d:36:1e:59:d4:ef:64:ba:16:0e:56:97:53:23:be:
bd:81:75:62:ef:6e:e9:8c:ca:6d:0a:51:5c:cc:fc:
70:bd:f1:38:ef:21:47:3d:5e:14:8a:b3:75:aa:1a:
01:e1:73:11:7a:ae:2d:ec:ee:8a:dd:99:83:0b:96:
ca:d2:99:35:3d:9a:f6:1f:6e:c5:e9:2f:0b:be:d3:
66:03:b0:1f:30:08:43:ba:5b:24:ba:dd:8a:33:2b:
71:ac:93:37:b2:03:84:f9:1a:9c:78:50:31:05:fd:
33:d4:18:e8:60:d2:95:9e:93:1b:06:6a:aa:ac:46:
07:48:dc:1e:0a:44:12:f9:4c:f5:d4:47:41:2a:05:
d5:a5:c4:2f:7b:5a:b9:51:8e:48:0c:31:a8:b2:34:
f5:3b:86:c7:ce:43:86:66:b1:4b:31:f5:c6:4e:48:
b2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E0:EC:74:80:1B:4D:B7:CD:DE:CD:41:A5:24:A0:5E:23:7A:A4:FC
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS16276.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.172.0/24
89.19.44.0/24
181.41.194.0/24
191.96.140.0/23
191.101.150.0/24
191.101.210.0/24
191.101.218.0/24
Signature Algorithm: sha256WithRSAEncryption
25:32:62:4a:19:28:eb:6b:dc:40:a5:c9:56:41:ae:29:7f:36:
de:89:9f:4f:ab:76:57:15:26:f7:61:66:36:dc:15:7c:27:d6:
51:99:ee:ea:a7:97:c8:d7:97:1d:ab:b4:e7:ef:27:de:5f:d0:
cf:a5:8b:f0:59:eb:bd:03:bc:37:db:f3:9d:65:48:4f:60:9f:
ce:1d:bf:7f:54:ae:35:67:c8:77:ca:b5:f6:d1:0c:22:c6:26:
21:19:06:33:75:af:a8:33:fa:f2:ec:bc:1c:85:ec:74:76:80:
12:4f:c8:ad:76:f4:f4:64:f0:80:24:b5:00:3f:5e:56:18:ea:
21:0e:7b:62:53:94:a4:1c:7f:93:67:21:2b:9a:5d:2d:d1:68:
49:df:d3:02:95:3b:9b:e5:d1:35:bf:d9:37:f5:4f:64:69:bd:
a1:cf:62:28:97:98:24:96:38:b0:2a:8e:14:bd:29:40:c6:14:
be:cc:c7:e0:e4:0e:7d:70:88:25:18:28:a4:8b:7d:f9:06:6c:
c2:5a:48:cf:d5:a2:7b:01:e5:6e:d8:b1:c6:d6:0f:59:8b:47:
94:f0:fc:03:b7:37:c3:ba:e3:fd:4c:e7:4d:eb:7c:d4:14:dc:
6b:90:ac:54:82:71:36:e5:19:f9:99:bd:a8:08:a5:d1:46:e7:
19:5e:87:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 15:36:06 2026 by rpki-client