Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS16276.roa
File: AS16276.roa (raw, json)
Hash identifier: 8Mnc3NZgQq82UtnY3KpcJbNGJORYq33qjoL2nXYaVCk=
Subject key identifier: C9:DE:FF:73:07:73:A3:53:29:26:0B:0C:7A:5E:C5:03:7F:83:0D:B0
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 67E53480FF334253F1C8FB8BC24A860F37BAAC1D
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS16276.roa
Signing time: Sat 29 Aug 2026 10:27:29 +0000
ROA not before: Sat 29 Aug 2026 10:22:29 +0000
ROA not after: Sat 28 Aug 2027 10:27:29 +0000
asID: 16276
IP address blocks: 51.241.1.0/24 maxlen: 24
78.105.156.0/24 maxlen: 24
188.220.22.0/24 maxlen: 24
188.220.38.0/24 maxlen: 24
188.220.150.0/24 maxlen: 24
188.220.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:e5:34:80:ff:33:42:53:f1:c8:fb:8b:c2:4a:86:0f:37:ba:ac:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 29 10:22:29 2026 GMT
Not After : Aug 28 10:27:29 2027 GMT
Subject: CN=C9DEFF730773A35329260B0C7A5EC5037F830DB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:33:c4:b6:00:f0:c7:82:27:be:28:aa:7c:0d:
f6:41:35:1e:cc:16:5b:72:5c:21:d4:a8:ff:06:f7:
ef:c5:47:1c:16:a8:36:ef:8d:fa:ee:26:cd:18:29:
e2:af:7d:1e:be:63:84:6c:cb:b6:a8:4a:23:73:d1:
a0:f0:9d:71:e0:28:5e:cc:68:53:4d:a6:5b:be:10:
6e:75:cc:a4:d4:da:a6:f3:16:52:d9:ae:7e:50:89:
4d:5c:db:74:87:35:7e:12:6a:6f:53:6e:32:a7:0d:
b4:59:b4:c0:38:b6:4f:6e:ad:85:6a:8a:a9:b8:78:
8a:3c:35:69:cb:10:c7:95:9f:e7:ec:e1:9c:f1:79:
4a:57:27:ca:74:4d:84:2c:61:bd:97:20:83:b9:22:
4a:02:91:cc:97:2d:58:d3:eb:9f:42:43:d4:a3:d2:
ac:64:c3:8c:47:86:15:82:eb:06:1d:bc:4c:02:1e:
27:54:4d:97:c5:3e:fc:93:38:2a:35:cd:83:3e:18:
28:64:c7:f7:85:c8:84:40:d0:4e:a5:49:17:15:cc:
cf:46:b3:8b:39:4a:cf:7a:e0:a1:52:c4:6c:95:33:
84:da:46:c0:26:bd:92:d1:eb:d6:7f:35:fd:ef:42:
28:7c:2e:ab:a8:b8:2e:59:2d:63:c5:88:2b:da:2a:
62:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:DE:FF:73:07:73:A3:53:29:26:0B:0C:7A:5E:C5:03:7F:83:0D:B0
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS16276.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.241.1.0/24
78.105.156.0/24
188.220.22.0/24
188.220.38.0/24
188.220.150.0/24
188.220.202.0/24
Signature Algorithm: sha256WithRSAEncryption
43:42:0d:b9:cd:40:a3:2e:16:90:6a:72:8d:ce:34:55:71:37:
73:08:55:bd:15:74:a9:fe:8f:41:2b:99:df:9b:04:00:e9:ed:
2e:ee:7f:ee:d4:91:0b:a2:7b:ed:83:fd:10:85:66:df:bd:1f:
59:ae:36:ea:12:1b:94:44:21:53:8d:c4:b3:b9:74:e4:00:f2:
c3:25:08:d7:6c:54:8f:61:3f:d0:28:8d:e9:80:ee:ca:6c:39:
bc:8d:ca:9b:9d:51:88:4e:a9:56:29:98:a7:34:4e:86:f6:a6:
57:e4:3b:e2:fd:a8:56:8b:40:e4:65:0e:87:b5:69:14:d5:9f:
13:a6:c8:15:27:de:14:a2:69:ea:78:08:29:d2:f0:3f:50:c5:
74:0b:4f:46:cc:50:6c:1e:3f:51:50:9b:6f:cc:3f:6e:82:f3:
bc:2a:74:0e:1b:69:fb:cb:ce:8c:05:51:71:b8:30:72:ce:d4:
2e:f7:5b:b3:ff:f5:73:53:ae:af:8e:1a:f7:04:6f:69:27:85:
55:5d:df:69:bb:29:9d:00:e1:0c:20:4d:0e:ed:55:89:27:be:
a5:34:8a:d1:3c:87:c0:3c:9f:4d:cd:01:b8:ca:a0:51:1e:51:
27:6a:e9:47:d7:fc:2f:f5:0b:8f:a9:7f:64:31:96:58:0d:70:
79:65:8c:74
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgIUZ+U0gP8zQlPxyPuLwkqGDze6rB0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA4MjkxMDIyMjlaFw0yNzA4MjgxMDI3MjlaMDMxMTAvBgNV
BAMTKEM5REVGRjczMDc3M0EzNTMyOTI2MEIwQzdBNUVDNTAzN0Y4MzBEQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuM8S2APDHgie+KKp8DfZBNR7M
FltyXCHUqP8G9+/FRxwWqDbvjfruJs0YKeKvfR6+Y4Rsy7aoSiNz0aDwnXHgKF7M
aFNNplu+EG51zKTU2qbzFlLZrn5QiU1c23SHNX4Sam9TbjKnDbRZtMA4tk9urYVq
iqm4eIo8NWnLEMeVn+fs4ZzxeUpXJ8p0TYQsYb2XIIO5IkoCkcyXLVjT659CQ9Sj
0qxkw4xHhhWC6wYdvEwCHidUTZfFPvyTOCo1zYM+GChkx/eFyIRA0E6lSRcVzM9G
s4s5Ss964KFSxGyVM4TaRsAmvZLR69Z/Nf3vQih8LquouC5ZLWPFiCvaKmKXAgMB
AAGjggInMIICIzAdBgNVHQ4EFgQUyd7/cwdzo1MpJgsMel7FA3+DDbAwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMTYyNzYucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwPQYIKwYBBQUHAQcBAf8ELjAsMCoEAgABMCQDBAAz8QED
BABOaZwDBAC83BYDBAC83CYDBAC83JYDBAC83MowDQYJKoZIhvcNAQELBQADggEB
AENCDbnNQKMuFpBqco3ONFVxN3MIVb0VdKn+j0Ermd+bBADp7S7uf+7UkQuie+2D
/RCFZt+9H1muNuoSG5REIVONxLO5dOQA8sMlCNdsVI9hP9AojemA7spsObyNypud
UYhOqVYpmKc0Tob2plfkO+L9qFaLQORlDoe1aRTVnxOmyBUn3hSiaep4CCnS8D9Q
xXQLT0bMUGweP1FQm2/MP26C87wqdA4bafvLzowFUXG4MHLO1C73W7P/9XNTrq+O
GvcEb2knhVVd32m7KZ0A4QwgTQ7tVYknvqU0itE8h8A8n03NAbjKoFEeUSdq6UfX
/C/1C4+pf2QxllgNcHlljHQ=
-----END CERTIFICATE-----
Generated at Fri Sep 11 14:54:08 2026 by rpki-client