Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS16276.roa
File: AS16276.roa (raw, json)
Hash identifier: zFjf8EsAEjBi9IVxu7W6wvylCMgntB6fTktOtlCFmAY=
Subject key identifier: 4A:91:5B:47:B6:9F:67:CE:81:A7:BD:BE:E1:0D:D0:EB:C0:FB:AD:50
Certificate issuer: /CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Certificate serial: 61AC61AD5B9C9AB72B2F2F9229DAD406A31FF613
Authority key identifier: 39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS16276.roa
Signing time: Mon 26 Oct 2026 17:33:14 +0000
ROA not before: Mon 26 Oct 2026 17:28:14 +0000
ROA not after: Mon 25 Oct 2027 17:33:14 +0000
asID: 16276
IP address blocks: 177.29.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 19:49:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:ac:61:ad:5b:9c:9a:b7:2b:2f:2f:92:29:da:d4:06:a3:1f:f6:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Validity
Not Before: Oct 26 17:28:14 2026 GMT
Not After : Oct 25 17:33:14 2027 GMT
Subject: CN=4A915B47B69F67CE81A7BDBEE10DD0EBC0FBAD50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c8:d9:30:67:c7:03:8f:d6:3d:59:b3:09:50:
77:85:8b:28:af:90:7a:28:e2:40:7e:4f:31:a2:d0:
8b:61:d8:12:fb:57:b0:c6:59:9a:05:6d:fe:44:43:
a5:05:79:e1:a0:7b:06:5f:b2:71:69:b7:d2:99:40:
36:c4:b7:fb:c8:d1:a9:91:14:f0:1d:0f:dc:79:8c:
fe:eb:71:02:7c:06:fb:43:44:dc:e3:36:c6:e9:13:
ce:51:fa:a4:55:b8:e0:ac:59:e2:a0:3f:ef:c6:71:
90:ac:0f:b8:60:da:58:7b:82:48:90:b7:90:94:4b:
4e:34:65:3d:c0:df:1b:84:6e:eb:3f:8a:ef:55:52:
92:15:1e:b5:04:35:c3:7e:09:39:0a:4e:20:8a:23:
6d:1d:c1:f8:46:3a:aa:8c:7f:7e:d6:57:31:44:1b:
41:dd:63:01:4e:2a:79:23:17:e5:e4:c9:d0:98:78:
e5:3b:86:68:89:69:b9:5e:a3:b1:77:fc:1b:7d:2e:
5b:a6:d9:d0:82:12:ad:8e:88:85:6a:0a:9e:84:98:
f8:f7:9a:68:7f:0b:3b:33:0f:18:56:46:54:8b:e9:
3e:81:2b:29:67:37:66:f1:a3:41:a1:16:70:6e:ea:
cb:49:92:1b:69:f6:89:f7:d7:6e:87:7a:33:1a:e1:
e2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:91:5B:47:B6:9F:67:CE:81:A7:BD:BE:E1:0D:D0:EB:C0:FB:AD:50
X509v3 Authority Key Identifier:
keyid:39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS16276.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.29.248.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:ca:b9:98:d1:d9:37:43:6f:d1:cf:46:bd:10:4c:b9:76:98:
7d:c3:47:ca:4d:a6:3d:7b:8e:c3:e2:9b:ba:0a:36:82:95:d6:
bb:83:fe:ec:c4:2c:06:97:44:8f:48:f5:fa:2e:2e:31:81:14:
23:1f:e6:1e:c1:12:34:e6:8e:8e:e5:d4:ac:8f:36:d1:1b:4e:
d1:f1:0e:d6:8e:6d:2c:c3:b8:a5:63:c7:ff:d6:ca:24:fe:3d:
fe:04:b3:01:35:e3:49:a2:d5:a6:29:d9:ec:b1:78:22:59:6a:
58:21:20:9a:9a:e9:5b:c0:b9:6c:d8:56:e8:01:e7:78:a0:ce:
42:4d:50:c6:69:ce:6c:4b:53:67:c0:fe:09:7d:3b:dd:21:0b:
73:eb:17:ea:dd:a3:5b:26:f0:34:d0:b5:ac:9c:24:89:de:03:
5a:31:b0:8d:14:7e:a1:98:40:26:86:db:97:e4:4f:76:4a:34:
01:d8:9e:12:b7:71:b5:9e:0b:92:5c:27:f1:f7:b0:0d:51:0b:
01:35:0c:8f:23:8a:00:a0:aa:52:54:0d:95:ce:6c:a5:0f:0f:
49:de:58:3a:60:9c:92:39:df:89:dd:d0:d2:71:ac:7e:fe:ce:
39:9a:5b:8f:72:df:a9:e0:b8:89:40:1a:c8:45:d9:0f:7a:29:
1d:7f:c0:a1
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUYaxhrVucmrcrLy+SKdrUBqMf9hMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzk5YTdiZjJiOTBhYjhjYmZkMjRjYzRmOGJhZGVhNzg3
N2Y4ZTQ5NTAeFw0yNjEwMjYxNzI4MTRaFw0yNzEwMjUxNzMzMTRaMDMxMTAvBgNV
BAMTKDRBOTE1QjQ3QjY5RjY3Q0U4MUE3QkRCRUUxMEREMEVCQzBGQkFENTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCyNkwZ8cDj9Y9WbMJUHeFiyiv
kHoo4kB+TzGi0Ith2BL7V7DGWZoFbf5EQ6UFeeGgewZfsnFpt9KZQDbEt/vI0amR
FPAdD9x5jP7rcQJ8BvtDRNzjNsbpE85R+qRVuOCsWeKgP+/GcZCsD7hg2lh7gkiQ
t5CUS040ZT3A3xuEbus/iu9VUpIVHrUENcN+CTkKTiCKI20dwfhGOqqMf37WVzFE
G0HdYwFOKnkjF+XkydCYeOU7hmiJableo7F3/Bt9Llum2dCCEq2OiIVqCp6EmPj3
mmh/CzszDxhWRlSL6T6BKylnN2bxo0GhFnBu6stJkhtp9on3126HejMa4eIBAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUSpFbR7afZ86Bp72+4Q3Q68D7rVAwHwYDVR0j
BBgwFoAUOZp78rkKuMv9JMxPi63qeHf45JUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYmU0MTcwNGYtNzgxNS00ZjJjLWE1MDMtNThhZTA4ZTU1
NmI2LzQvMzk5QTdCRjJCOTBBQjhDQkZEMjRDQzRGOEJBREVBNzg3N0Y4RTQ5NS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL09acDc4cmtLdU12OUpNeFBpNjNxZUhm
NDVKVS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2JlNDE3MDRmLTc4MTUt
NGYyYy1hNTAzLTU4YWUwOGU1NTZiNi80L0FTMTYyNzYucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACxHfgw
DQYJKoZIhvcNAQELBQADggEBAI7KuZjR2TdDb9HPRr0QTLl2mH3DR8pNpj17jsPi
m7oKNoKV1ruD/uzELAaXRI9I9fouLjGBFCMf5h7BEjTmjo7l1KyPNtEbTtHxDtaO
bSzDuKVjx//WyiT+Pf4EswE140mi1aYp2eyxeCJZalghIJqa6VvAuWzYVugB53ig
zkJNUMZpzmxLU2fA/gl9O90hC3PrF+rdo1sm8DTQtaycJIneA1oxsI0UfqGYQCaG
25fkT3ZKNAHYnhK3cbWeC5JcJ/H3sA1RCwE1DI8jigCgqlJUDZXObKUPD0neWDpg
nJI534nd0NJxrH7+zjmaW49y36nguIlAGshF2Q96KR1/wKE=
-----END CERTIFICATE-----
Generated at Tue Oct 27 08:47:13 2026 by rpki-client