Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS16276.roa
File: AS16276.roa (raw, json)
Hash identifier: rmVGGrZNTm8LIUQ0i/wxDer/OR4Q0Yb+ccfSXOLKx+E=
Subject key identifier: B7:41:41:61:C2:8E:32:5B:CC:64:52:90:C2:A0:4E:20:74:49:EF:F7
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1402D9318C29E41695F45178323136EF1A0D51F2
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS16276.roa
Signing time: Sat 29 Aug 2026 10:26:39 +0000
ROA not before: Sat 29 Aug 2026 10:21:39 +0000
ROA not after: Sat 28 Aug 2027 10:26:39 +0000
asID: 16276
IP address blocks: 82.21.139.0/24 maxlen: 24
82.22.15.0/24 maxlen: 24
82.22.18.0/24 maxlen: 24
82.22.25.0/24 maxlen: 24
82.22.51.0/24 maxlen: 24
82.22.118.0/24 maxlen: 24
82.24.96.0/22 maxlen: 24
82.24.190.0/24 maxlen: 24
82.25.14.0/24 maxlen: 24
82.25.146.0/23 maxlen: 24
82.26.81.0/24 maxlen: 24
82.26.176.0/21 maxlen: 24
82.26.184.0/21 maxlen: 24
82.27.122.0/24 maxlen: 24
82.29.93.0/24 maxlen: 24
82.29.126.0/24 maxlen: 24
82.38.2.0/24 maxlen: 24
82.38.82.0/24 maxlen: 24
82.38.124.0/22 maxlen: 24
82.38.140.0/22 maxlen: 24
82.38.152.0/22 maxlen: 24
82.38.156.0/22 maxlen: 24
82.38.160.0/22 maxlen: 24
82.38.164.0/22 maxlen: 24
82.38.219.0/24 maxlen: 24
82.38.224.0/22 maxlen: 24
82.38.228.0/22 maxlen: 24
82.38.232.0/22 maxlen: 24
82.38.236.0/22 maxlen: 24
82.38.240.0/22 maxlen: 24
82.38.244.0/22 maxlen: 24
82.38.248.0/22 maxlen: 24
82.38.252.0/22 maxlen: 24
82.39.108.0/24 maxlen: 24
82.39.119.0/24 maxlen: 24
82.39.156.0/22 maxlen: 24
82.39.176.0/22 maxlen: 24
82.39.180.0/22 maxlen: 24
82.39.216.0/22 maxlen: 24
82.39.224.0/22 maxlen: 24
82.40.0.0/22 maxlen: 24
82.40.4.0/22 maxlen: 24
82.40.8.0/22 maxlen: 24
82.40.12.0/22 maxlen: 24
82.40.16.0/22 maxlen: 24
82.41.44.0/22 maxlen: 24
82.41.52.0/22 maxlen: 24
82.41.68.0/22 maxlen: 24
82.41.80.0/22 maxlen: 24
82.41.88.0/22 maxlen: 24
82.41.100.0/22 maxlen: 24
82.41.104.0/22 maxlen: 24
82.41.108.0/22 maxlen: 24
82.41.124.0/22 maxlen: 24
82.41.134.0/24 maxlen: 24
82.41.148.0/22 maxlen: 24
82.41.152.0/22 maxlen: 24
82.41.160.0/22 maxlen: 24
82.41.164.0/22 maxlen: 24
82.41.172.0/22 maxlen: 24
82.41.176.0/22 maxlen: 24
82.41.184.0/22 maxlen: 24
82.41.188.0/22 maxlen: 24
82.41.204.0/22 maxlen: 24
82.41.212.0/22 maxlen: 24
82.41.224.0/22 maxlen: 24
82.41.228.0/22 maxlen: 24
82.47.63.0/24 maxlen: 24
82.47.98.0/24 maxlen: 24
82.47.180.0/24 maxlen: 24
84.75.33.0/24 maxlen: 24
178.83.45.0/24 maxlen: 24
178.83.46.0/24 maxlen: 24
2a13:9500:138::/48 maxlen: 48
2a13:9500:143::/48 maxlen: 48
2a13:9500:166::/48 maxlen: 48
2a13:9500:18e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:02:d9:31:8c:29:e4:16:95:f4:51:78:32:31:36:ef:1a:0d:51:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 29 10:21:39 2026 GMT
Not After : Aug 28 10:26:39 2027 GMT
Subject: CN=B7414161C28E325BCC645290C2A04E207449EFF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:37:0a:c8:cc:15:f3:a7:8b:f0:1d:a9:fa:b1:
76:96:5c:05:fd:46:25:8a:aa:6b:78:4c:05:61:6d:
6e:fe:f6:a8:f0:19:82:0b:1f:90:10:42:11:92:d6:
93:f6:6d:f0:64:39:2e:ef:76:ae:3a:2b:0c:dd:a7:
53:49:d5:d0:42:d1:9d:e4:2f:76:c0:60:df:7a:07:
e9:0f:4c:00:01:17:da:7f:ac:61:6e:9c:33:4f:d0:
da:2c:e9:e2:5a:f4:c0:2d:03:f1:3b:a4:9e:8f:85:
36:b4:8d:52:00:62:ee:88:e0:7c:90:d6:25:86:dd:
2f:cb:f2:d5:1f:09:49:0b:e2:38:65:f7:82:81:e1:
d5:93:bc:4b:d9:e2:95:ee:d0:bd:95:2d:d6:f6:28:
12:6b:df:54:aa:14:c7:75:1d:89:8f:f5:fe:61:a4:
ab:d1:06:60:20:76:07:f9:98:3c:3b:a8:25:ca:3b:
24:d7:44:2a:87:cc:19:3e:57:37:b3:37:db:b5:dd:
94:76:79:f9:09:b2:a6:f7:77:bf:02:0a:d0:83:25:
0e:37:77:8f:60:72:18:93:29:0e:2b:73:94:79:b2:
21:87:3e:2a:4f:fb:da:18:5d:9d:a2:b3:62:f3:75:
da:f3:5e:47:46:74:bf:15:2d:23:30:7b:a1:16:7a:
06:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:41:41:61:C2:8E:32:5B:CC:64:52:90:C2:A0:4E:20:74:49:EF:F7
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS16276.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.139.0/24
82.22.15.0/24
82.22.18.0/24
82.22.25.0/24
82.22.51.0/24
82.22.118.0/24
82.24.96.0/22
82.24.190.0/24
82.25.14.0/24
82.25.146.0/23
82.26.81.0/24
82.26.176.0/20
82.27.122.0/24
82.29.93.0/24
82.29.126.0/24
82.38.2.0/24
82.38.82.0/24
82.38.124.0/22
82.38.140.0/22
82.38.152.0-82.38.167.255
82.38.219.0/24
82.38.224.0/19
82.39.108.0/24
82.39.119.0/24
82.39.156.0/22
82.39.176.0/21
82.39.216.0/22
82.39.224.0/22
82.40.0.0-82.40.19.255
82.41.44.0/22
82.41.52.0/22
82.41.68.0/22
82.41.80.0/22
82.41.88.0/22
82.41.100.0-82.41.111.255
82.41.124.0/22
82.41.134.0/24
82.41.148.0-82.41.155.255
82.41.160.0/21
82.41.172.0-82.41.179.255
82.41.184.0/21
82.41.204.0/22
82.41.212.0/22
82.41.224.0/21
82.47.63.0/24
82.47.98.0/24
82.47.180.0/24
84.75.33.0/24
178.83.45.0-178.83.46.255
IPv6:
2a13:9500:138::/48
2a13:9500:143::/48
2a13:9500:166::/48
2a13:9500:18e::/48
Signature Algorithm: sha256WithRSAEncryption
4c:5c:6a:29:9a:4b:31:92:22:f8:df:87:b4:73:0e:97:1c:a7:
fd:8d:ba:ca:e6:3b:94:1b:ad:a2:f1:1b:27:3b:2c:d6:a0:1f:
04:ba:77:5e:50:7f:9f:55:ad:f9:dc:47:ba:7b:c4:a6:f3:93:
5c:67:32:dd:17:41:5a:51:1b:80:56:30:61:12:b3:ba:cf:66:
0e:f7:a3:8f:7e:82:77:35:30:4e:a7:8b:60:a6:8a:6f:7b:c3:
8d:21:d2:32:75:78:d5:4f:aa:40:2b:e5:27:c7:2e:51:e4:87:
39:11:49:5e:87:13:81:b4:fb:09:66:f7:1b:0c:be:b5:02:67:
46:08:28:74:94:33:75:7a:f0:6a:81:2f:f2:97:59:59:5f:a6:
59:0c:ff:cd:c3:23:11:4d:d2:4e:63:d3:06:f4:80:93:bd:42:
a8:b3:f2:b0:14:64:a3:5e:1d:01:82:0d:e0:e8:9d:d2:f1:52:
cf:3e:14:fc:09:5b:ae:56:ef:f2:62:ba:96:09:13:7f:e3:35:
f1:bb:05:28:50:87:ff:45:43:74:94:7b:ed:96:39:9f:bd:f1:
b4:f5:c8:96:bf:c4:79:38:13:6b:f5:9a:ff:fc:de:1b:f0:9d:
e1:4b:a1:ea:cb:54:b3:72:2e:d4:74:d1:0d:3c:b1:36:77:99:
c2:63:22:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:22:32 2026 by rpki-client