This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS16276.roa
File: AS16276.roa (raw, json)
Hash identifier: BRurPZi4qTClmt1H8CwP/7VsyxK+j4lzGOvoyFOjQhs=
Subject key identifier: 29:EC:03:9E:09:B9:04:CF:9E:9D:F9:6C:6D:FA:24:6B:AD:A0:3D:BF
Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial: 3F511D103409CDC7521C8FB8745B534EAC447586
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS16276.roa
Signing time: Wed 04 Feb 2026 12:57:33 +0000
ROA not before: Wed 04 Feb 2026 12:52:33 +0000
ROA not after: Wed 03 Feb 2027 12:57:33 +0000
asID: 16276
IP address blocks: 176.53.158.0/24 maxlen: 24
193.32.204.0/24 maxlen: 24
193.32.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Feb 2026 12:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:51:1d:10:34:09:cd:c7:52:1c:8f:b8:74:5b:53:4e:ac:44:75:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Validity
Not Before: Feb 4 12:52:33 2026 GMT
Not After : Feb 3 12:57:33 2027 GMT
Subject: CN=29EC039E09B904CF9E9DF96C6DFA246BADA03DBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:da:9e:18:74:5e:40:02:c8:0e:0c:41:80:ac:
6a:82:5e:4d:28:51:f6:7c:c2:12:37:dd:27:45:29:
55:86:28:55:72:d1:a9:fa:65:39:01:07:18:11:9d:
25:9f:fe:6f:d1:54:82:60:ca:7a:ad:37:64:9d:46:
d7:cd:96:29:17:60:43:92:66:6a:61:68:54:23:56:
54:77:15:77:42:67:5c:4c:dd:dd:c8:4a:3b:06:58:
a3:62:02:71:b4:9c:97:ab:ad:83:6c:42:d6:a5:ff:
0e:88:32:05:65:e8:db:ea:2f:5a:51:55:15:c5:85:
1e:cb:7a:5f:61:75:ce:d8:a4:58:4b:68:75:ac:58:
29:ff:80:03:55:16:fe:47:87:69:5d:d4:3c:1d:70:
01:69:f6:49:22:5d:ee:6b:b7:bc:4a:27:28:b3:79:
e2:d6:a3:29:79:4a:1b:7f:29:08:6b:31:bd:99:2a:
59:e0:72:71:81:df:c4:c4:8d:64:b0:8d:a7:b3:78:
2b:f4:6f:02:16:4e:bf:00:8c:08:cb:60:97:3b:de:
ba:1a:57:a5:96:30:2a:0d:d1:80:1f:6a:9b:55:6e:
3c:d4:c8:f3:f6:78:42:6a:f6:39:43:7b:2f:4b:69:
3e:4c:5f:6d:c3:8e:a0:20:97:9e:02:e0:13:03:d1:
82:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:EC:03:9E:09:B9:04:CF:9E:9D:F9:6C:6D:FA:24:6B:AD:A0:3D:BF
X509v3 Authority Key Identifier:
keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS16276.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.158.0/24
193.32.204.0/24
193.32.207.0/24
Signature Algorithm: sha256WithRSAEncryption
98:98:7d:88:bd:07:bd:33:13:e6:39:ac:f4:91:1c:e6:bd:29:
07:a4:df:9a:12:b0:7a:e6:46:c8:c6:2f:64:72:29:f5:08:ba:
43:99:46:34:32:98:fd:39:b6:e6:d6:83:16:49:cc:8b:57:79:
48:f4:a5:7c:71:0d:d7:d2:b4:1e:cf:af:c1:b3:a9:2e:49:89:
10:1a:7f:1b:9e:2b:b2:87:b3:c5:c3:68:c6:b1:5e:f5:4d:fd:
d0:23:7f:25:c5:86:43:fd:c7:05:7d:ac:d2:3d:ee:72:07:f3:
53:c6:46:59:6d:f1:7e:1d:04:d6:1f:ae:38:a1:ce:8c:c3:83:
15:c9:36:38:bd:71:46:e0:a8:41:82:64:2f:15:61:0a:fb:7a:
ca:4e:5f:68:39:d1:2c:e3:f7:bd:c1:dd:b1:6f:3c:12:2f:d9:
e6:3e:81:6c:be:50:de:98:0f:0d:9c:54:25:2c:8f:ba:0c:9f:
89:a9:f3:9f:b8:1a:71:9f:bd:3c:9b:72:96:57:51:36:88:42:
ef:14:05:ba:b7:78:47:cf:48:47:7b:dc:d5:e6:cc:43:2c:e6:
8a:80:36:52:3f:d4:e7:b5:7a:fd:c3:4e:3b:dd:9c:e1:46:56:
9a:23:b3:ba:84:6e:b9:c2:7f:61:f4:54:c2:2c:14:f1:2d:97:
b8:53:60:b3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Feb 5 13:53:02 2026 by rpki-client