This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS16276.roa
File:                     AS16276.roa (raw, json)
Hash identifier:          BRurPZi4qTClmt1H8CwP/7VsyxK+j4lzGOvoyFOjQhs=
Subject key identifier:   29:EC:03:9E:09:B9:04:CF:9E:9D:F9:6C:6D:FA:24:6B:AD:A0:3D:BF
Certificate issuer:       /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial:       3F511D103409CDC7521C8FB8745B534EAC447586
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS16276.roa
Signing time:             Wed 04 Feb 2026 12:57:33 +0000
ROA not before:           Wed 04 Feb 2026 12:52:33 +0000
ROA not after:            Wed 03 Feb 2027 12:57:33 +0000
asID:                     16276
IP address blocks:        176.53.158.0/24 maxlen: 24
                          193.32.204.0/24 maxlen: 24
                          193.32.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Feb 2026 12:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:51:1d:10:34:09:cd:c7:52:1c:8f:b8:74:5b:53:4e:ac:44:75:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
        Validity
            Not Before: Feb  4 12:52:33 2026 GMT
            Not After : Feb  3 12:57:33 2027 GMT
        Subject: CN=29EC039E09B904CF9E9DF96C6DFA246BADA03DBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:da:9e:18:74:5e:40:02:c8:0e:0c:41:80:ac:
                    6a:82:5e:4d:28:51:f6:7c:c2:12:37:dd:27:45:29:
                    55:86:28:55:72:d1:a9:fa:65:39:01:07:18:11:9d:
                    25:9f:fe:6f:d1:54:82:60:ca:7a:ad:37:64:9d:46:
                    d7:cd:96:29:17:60:43:92:66:6a:61:68:54:23:56:
                    54:77:15:77:42:67:5c:4c:dd:dd:c8:4a:3b:06:58:
                    a3:62:02:71:b4:9c:97:ab:ad:83:6c:42:d6:a5:ff:
                    0e:88:32:05:65:e8:db:ea:2f:5a:51:55:15:c5:85:
                    1e:cb:7a:5f:61:75:ce:d8:a4:58:4b:68:75:ac:58:
                    29:ff:80:03:55:16:fe:47:87:69:5d:d4:3c:1d:70:
                    01:69:f6:49:22:5d:ee:6b:b7:bc:4a:27:28:b3:79:
                    e2:d6:a3:29:79:4a:1b:7f:29:08:6b:31:bd:99:2a:
                    59:e0:72:71:81:df:c4:c4:8d:64:b0:8d:a7:b3:78:
                    2b:f4:6f:02:16:4e:bf:00:8c:08:cb:60:97:3b:de:
                    ba:1a:57:a5:96:30:2a:0d:d1:80:1f:6a:9b:55:6e:
                    3c:d4:c8:f3:f6:78:42:6a:f6:39:43:7b:2f:4b:69:
                    3e:4c:5f:6d:c3:8e:a0:20:97:9e:02:e0:13:03:d1:
                    82:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:EC:03:9E:09:B9:04:CF:9E:9D:F9:6C:6D:FA:24:6B:AD:A0:3D:BF
            X509v3 Authority Key Identifier:
                keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS16276.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.53.158.0/24
                  193.32.204.0/24
                  193.32.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:98:7d:88:bd:07:bd:33:13:e6:39:ac:f4:91:1c:e6:bd:29:
         07:a4:df:9a:12:b0:7a:e6:46:c8:c6:2f:64:72:29:f5:08:ba:
         43:99:46:34:32:98:fd:39:b6:e6:d6:83:16:49:cc:8b:57:79:
         48:f4:a5:7c:71:0d:d7:d2:b4:1e:cf:af:c1:b3:a9:2e:49:89:
         10:1a:7f:1b:9e:2b:b2:87:b3:c5:c3:68:c6:b1:5e:f5:4d:fd:
         d0:23:7f:25:c5:86:43:fd:c7:05:7d:ac:d2:3d:ee:72:07:f3:
         53:c6:46:59:6d:f1:7e:1d:04:d6:1f:ae:38:a1:ce:8c:c3:83:
         15:c9:36:38:bd:71:46:e0:a8:41:82:64:2f:15:61:0a:fb:7a:
         ca:4e:5f:68:39:d1:2c:e3:f7:bd:c1:dd:b1:6f:3c:12:2f:d9:
         e6:3e:81:6c:be:50:de:98:0f:0d:9c:54:25:2c:8f:ba:0c:9f:
         89:a9:f3:9f:b8:1a:71:9f:bd:3c:9b:72:96:57:51:36:88:42:
         ef:14:05:ba:b7:78:47:cf:48:47:7b:dc:d5:e6:cc:43:2c:e6:
         8a:80:36:52:3f:d4:e7:b5:7a:fd:c3:4e:3b:dd:9c:e1:46:56:
         9a:23:b3:ba:84:6e:b9:c2:7f:61:f4:54:c2:2c:14:f1:2d:97:
         b8:53:60:b3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Feb 5 13:53:02 2026 by rpki-client