Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS16276.roa
File: AS16276.roa (raw, json)
Hash identifier: RyxgqMN+IiCKrZX08F03huFhIzJpqvTbcQmrPKkr9mA=
Subject key identifier: 22:AF:66:89:10:A0:3B:78:86:C0:A9:EF:D7:78:F9:A8:A6:E7:47:52
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 61D48C5AC874C7DC8B88C4C17AAB88C763C63498
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS16276.roa
Signing time: Mon 24 Aug 2026 14:09:13 +0000
ROA not before: Mon 24 Aug 2026 14:04:13 +0000
ROA not after: Mon 23 Aug 2027 14:09:13 +0000
asID: 16276
IP address blocks: 141.11.1.0/24 maxlen: 24
141.11.18.0/24 maxlen: 24
141.11.21.0/24 maxlen: 24
141.11.32.0/24 maxlen: 24
141.11.39.0/24 maxlen: 24
141.11.40.0/24 maxlen: 24
141.11.45.0/24 maxlen: 24
141.11.49.0/24 maxlen: 24
141.11.74.0/23 maxlen: 23
141.11.96.0/24 maxlen: 24
141.11.107.0/24 maxlen: 24
141.11.187.0/24 maxlen: 24
141.11.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:d4:8c:5a:c8:74:c7:dc:8b:88:c4:c1:7a:ab:88:c7:63:c6:34:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Aug 24 14:04:13 2026 GMT
Not After : Aug 23 14:09:13 2027 GMT
Subject: CN=22AF668910A03B7886C0A9EFD778F9A8A6E74752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:72:ac:36:c5:c0:ae:ca:d6:eb:16:1d:ff:81:
53:8b:4c:7f:d2:ff:66:39:5a:be:d1:a2:9a:aa:49:
87:93:30:48:2c:e0:c7:58:8c:d6:d5:66:bd:79:cc:
e4:82:a1:3c:29:3b:8c:91:b7:35:25:ba:ed:2f:87:
d6:5c:56:1e:56:a2:41:5b:fa:02:97:b1:92:20:2a:
4e:d8:d7:e4:a0:3b:50:a4:c2:30:f1:1c:6b:15:d5:
fa:33:ae:c7:fa:4a:67:c1:bd:f3:d0:07:29:d9:30:
a8:80:61:e8:28:d4:3f:c5:f9:3b:d5:61:3d:75:99:
41:17:f5:23:73:8a:d4:14:f7:2d:1a:d3:b6:b6:78:
d2:69:d4:8a:7f:3d:c3:35:bc:64:ce:45:cb:98:13:
6d:82:db:bd:7a:86:56:4a:4a:81:60:8a:a8:56:6a:
0a:2a:e7:36:70:43:fc:25:15:6b:6e:f1:46:5f:bb:
4b:46:8a:d5:d4:c9:d3:18:b1:cd:8c:6a:6b:b7:89:
81:7b:0c:92:b0:5d:1a:8f:7d:01:f0:14:6d:94:4a:
f2:98:e1:5f:7a:8b:c6:f7:06:1e:32:c9:6a:1d:ed:
12:c1:33:56:22:cf:3f:a0:03:6b:af:f3:99:12:b3:
f1:3e:0a:d6:ac:d5:31:22:04:1b:27:0e:98:01:68:
76:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:AF:66:89:10:A0:3B:78:86:C0:A9:EF:D7:78:F9:A8:A6:E7:47:52
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS16276.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.1.0/24
141.11.18.0/24
141.11.21.0/24
141.11.32.0/24
141.11.39.0-141.11.40.255
141.11.45.0/24
141.11.49.0/24
141.11.74.0/23
141.11.96.0/24
141.11.107.0/24
141.11.187.0/24
141.11.250.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:67:c2:b6:02:08:fc:5a:f6:6d:e3:63:36:9c:c3:c4:d0:0b:
c4:7a:43:af:c6:65:78:45:f8:12:05:e0:66:ea:70:68:3d:76:
4a:e0:aa:eb:d7:4d:12:6a:09:55:68:15:0b:7c:7e:df:f6:9b:
b8:27:ea:77:30:5b:b3:16:d4:f6:c3:26:b3:28:d7:b4:08:cc:
7b:02:d2:fb:df:17:e1:f6:fa:01:ad:c9:c4:21:7d:51:2b:44:
14:f8:e9:9b:b4:04:f3:1b:79:7a:73:94:ec:92:3a:c5:64:dd:
16:24:44:83:13:4e:3b:d6:0c:41:32:d0:7b:25:36:f1:5e:44:
5a:ac:41:07:9b:c9:b0:dc:16:1c:24:01:73:2f:bd:35:a0:57:
09:e9:43:73:5b:b5:8a:47:f0:79:9b:d5:7c:fa:aa:a0:12:16:
71:91:34:f3:6e:36:55:33:23:17:ea:06:b7:b1:b5:03:5a:13:
7a:bd:c5:f5:41:1e:31:1b:77:37:2b:49:50:a0:4f:86:c9:15:
28:e1:b3:71:ef:e6:d2:26:9c:0c:72:af:7f:ab:10:48:f2:54:
01:99:e5:c8:c9:ea:83:7d:cb:b8:2a:08:21:4f:55:0a:6b:cc:
bb:f0:22:ce:d9:c0:14:12:1d:30:56:e6:f2:dc:39:a3:eb:4f:
75:24:1e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:53:51 2026 by rpki-client