Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS16276.roa
File: AS16276.roa (raw, json)
Hash identifier: Q4CD3UGH7TV+AtSphVmkSzlgYKUHST4L4cTBXEidUns=
Subject key identifier: C3:D0:8E:20:A4:E3:81:DC:FF:E2:DD:22:E4:60:AD:C6:31:0A:66:67
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 0BBFCC6D87243D0E298465F121FA21B7EE15B818
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS16276.roa
Signing time: Thu 01 Oct 2026 09:33:52 +0000
ROA not before: Thu 01 Oct 2026 09:28:52 +0000
ROA not after: Thu 30 Sep 2027 09:33:52 +0000
asID: 16276
IP address blocks: 141.11.1.0/24 maxlen: 24
141.11.18.0/24 maxlen: 24
141.11.21.0/24 maxlen: 24
141.11.32.0/24 maxlen: 24
141.11.39.0/24 maxlen: 24
141.11.40.0/24 maxlen: 24
141.11.45.0/24 maxlen: 24
141.11.49.0/24 maxlen: 24
141.11.74.0/23 maxlen: 23
141.11.96.0/24 maxlen: 24
141.11.107.0/24 maxlen: 24
141.11.175.0/24 maxlen: 24
141.11.187.0/24 maxlen: 24
141.11.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 22:22:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:bf:cc:6d:87:24:3d:0e:29:84:65:f1:21:fa:21:b7:ee:15:b8:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Oct 1 09:28:52 2026 GMT
Not After : Sep 30 09:33:52 2027 GMT
Subject: CN=C3D08E20A4E381DCFFE2DD22E460ADC6310A6667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:60:ea:90:d5:46:53:5c:03:07:94:f2:96:55:
f2:30:81:a9:fd:54:2e:d2:56:bf:1e:60:ca:f1:09:
86:b4:a5:b9:2d:21:ba:f3:66:b3:ae:a2:3b:cc:9e:
0a:ed:87:52:70:0d:01:4f:56:98:f9:df:dc:ae:ca:
24:83:49:d3:cb:39:64:5d:2a:6e:1b:1d:6c:83:08:
e4:98:a3:15:8a:ea:61:b3:d0:26:3f:c1:e9:7a:8d:
bf:34:af:48:df:f8:e3:6b:cd:99:c2:10:ac:d4:7a:
a1:fb:c0:27:eb:56:b3:74:74:23:9f:e0:91:61:6d:
f3:d3:cd:27:59:cf:a9:3d:b5:c9:cb:23:48:b9:81:
6a:48:91:f4:66:0f:96:2c:88:d6:30:f1:66:64:6e:
de:cc:e7:75:f7:58:4b:9e:71:e1:d6:4c:92:7f:4f:
19:83:06:c3:09:55:64:b9:b3:56:92:72:36:1a:3e:
fc:e7:fd:8b:c2:3e:6c:e7:e2:e4:c5:db:2f:0f:d1:
ee:68:df:f3:36:43:f6:c7:ff:84:40:f4:a4:92:3a:
ed:f0:85:2d:73:62:96:0f:cf:a7:84:f5:10:40:79:
1f:8f:e7:e1:eb:f2:d9:0e:d3:21:c7:f9:c6:2a:67:
75:d4:5c:e0:e5:dc:83:b4:19:79:de:0c:73:56:41:
bb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D0:8E:20:A4:E3:81:DC:FF:E2:DD:22:E4:60:AD:C6:31:0A:66:67
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS16276.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.1.0/24
141.11.18.0/24
141.11.21.0/24
141.11.32.0/24
141.11.39.0-141.11.40.255
141.11.45.0/24
141.11.49.0/24
141.11.74.0/23
141.11.96.0/24
141.11.107.0/24
141.11.175.0/24
141.11.187.0/24
141.11.250.0/24
Signature Algorithm: sha256WithRSAEncryption
af:a4:e4:ce:6b:51:e2:1e:e5:dd:f3:cd:17:90:f9:04:ef:55:
4b:05:bf:e4:79:f3:8d:80:88:a2:5f:9f:eb:1d:37:03:2a:39:
f5:af:65:3e:74:04:ca:06:32:cd:a1:b2:90:ee:d8:5d:d9:43:
36:17:83:6d:64:84:8c:3f:d0:94:bf:d2:79:78:f5:c3:fd:b4:
89:3b:a2:92:1d:a5:31:50:e8:b7:c9:32:52:0e:72:15:53:0e:
d4:4d:7f:3d:1a:26:e8:4c:1e:42:65:4d:5d:d0:2a:13:27:3f:
d7:7f:f8:e2:c5:f8:5c:10:db:d7:74:f9:bc:68:46:fd:b6:cd:
30:4d:4a:b2:10:fd:83:e2:5a:e6:57:82:44:c0:34:4e:e8:dc:
c6:64:51:e1:d9:23:6f:b5:88:96:f5:c4:e5:90:76:32:a5:6e:
34:30:fc:1c:78:7a:50:83:ae:cc:ab:d3:33:61:1e:f1:69:dd:
02:b1:f3:19:4a:92:a3:ba:58:93:1c:47:71:35:bd:75:b2:fa:
a5:2c:22:1b:9c:1b:a3:93:1a:ef:41:39:ad:e4:8b:fd:94:46:
ea:f5:df:23:9a:5e:2c:30:fe:81:88:77:57:d1:e8:f8:07:18:
ea:6a:67:06:20:45:2b:81:69:51:c8:ad:ad:ac:53:64:15:89:
ce:0d:2c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 07:18:33 2026 by rpki-client