Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS16276.roa
File: AS16276.roa (raw, json)
Hash identifier: Xzflas0mwwZnpsVzptsuhibh64j+bqQQVnPdu0rTvZ8=
Subject key identifier: 09:56:57:68:AD:42:A7:D4:A2:2C:90:15:65:9C:18:C6:E4:A0:CE:2E
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 155BF3911117BE7199C41BD78DE8AEF60F3A98AB
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS16276.roa
Signing time: Wed 24 Jun 2026 17:33:47 +0000
ROA not before: Wed 24 Jun 2026 17:28:47 +0000
ROA not after: Wed 23 Jun 2027 17:33:47 +0000
asID: 16276
IP address blocks: 143.20.66.0/24 maxlen: 24
143.20.141.0/24 maxlen: 24
143.20.195.0/24 maxlen: 24
143.20.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:5b:f3:91:11:17:be:71:99:c4:1b:d7:8d:e8:ae:f6:0f:3a:98:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Jun 24 17:28:47 2026 GMT
Not After : Jun 23 17:33:47 2027 GMT
Subject: CN=09565768AD42A7D4A22C9015659C18C6E4A0CE2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:18:c4:04:b4:66:31:12:de:fc:11:15:31:dc:
df:8f:95:cd:22:8a:9b:bb:37:70:0d:61:bf:b9:b2:
c6:0b:cb:9d:71:8c:b5:55:25:5d:36:cd:24:fd:1a:
9c:51:25:91:1e:c7:e8:16:88:7e:e1:d5:11:9c:5d:
6a:6e:10:e0:a8:47:5a:95:6e:f6:f3:9d:42:a6:30:
a5:5f:17:7c:e0:51:97:db:80:d9:08:cd:52:3c:e4:
30:bf:b6:33:e2:03:27:ec:c4:3d:bd:1f:b9:68:68:
da:65:79:11:40:4c:50:ed:46:56:15:0d:c6:cc:6a:
04:4a:ba:60:cd:0d:ba:f1:2e:6f:86:92:c6:c1:22:
04:05:10:4e:69:60:75:c1:cb:f9:0d:3c:54:1a:88:
fc:5b:08:3b:8e:97:f9:56:6c:f7:f2:8d:a8:78:89:
bd:a4:89:01:c6:41:a9:51:e3:d3:d8:0c:c9:1c:bc:
38:33:38:51:a0:96:e6:bf:d4:d8:c5:af:20:1d:e1:
a5:84:5e:1e:02:9f:16:85:bd:0e:eb:1b:0d:34:c6:
64:03:72:5d:a9:78:fb:9c:36:90:8c:10:a9:c4:44:
90:1f:93:0d:b2:76:95:64:1d:d1:fd:6b:b5:da:f6:
73:08:be:ae:8e:04:ff:f8:0f:8f:41:bf:99:80:1f:
c5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:56:57:68:AD:42:A7:D4:A2:2C:90:15:65:9C:18:C6:E4:A0:CE:2E
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS16276.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.66.0/24
143.20.141.0/24
143.20.195.0/24
143.20.215.0/24
Signature Algorithm: sha256WithRSAEncryption
51:9f:db:37:68:bf:f6:3f:93:5d:0f:dd:b0:10:50:bc:80:25:
65:9c:5c:c6:63:59:98:38:eb:b6:83:da:dd:e9:ba:f9:58:95:
a4:d4:09:d5:c6:73:8f:a1:6c:84:09:e6:3b:cb:34:8e:87:3d:
74:f6:5e:aa:a4:3e:4f:0f:45:d4:75:7e:71:99:db:43:8c:1c:
41:6a:48:61:2a:55:56:35:c3:ee:84:de:b4:67:ca:de:81:00:
b5:97:5d:a1:ef:c4:16:a2:84:0d:71:29:0a:c2:a7:31:51:d9:
40:0f:53:5e:60:c6:e8:e2:4a:31:f0:24:b8:24:1b:ce:5a:aa:
d2:43:31:2d:af:2a:f0:74:79:a6:ae:c9:27:04:97:f1:50:e1:
4f:c6:e5:89:e9:e1:2c:75:4a:79:4b:b4:69:b1:61:db:cf:5d:
f1:ca:1e:6d:a9:bc:c5:28:7c:a1:06:a3:ee:8c:89:e1:4c:dd:
74:f2:b4:e2:e3:87:82:57:5f:4a:6d:8d:99:b2:84:52:8a:a8:
c8:11:c7:ff:42:29:cd:93:fc:a8:00:41:c7:37:93:2b:5b:80:
32:26:22:df:1d:98:49:d5:65:a1:c3:18:ab:e1:c7:c0:1c:a9:
ba:f5:2d:c1:dd:2c:93:5b:d4:41:80:c2:46:76:59:40:65:e4:
4d:91:40:15
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgIUFVvzkREXvnGZxBvXjeiu9g86mKswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk
ZWI5M2Q5ZDAeFw0yNjA2MjQxNzI4NDdaFw0yNzA2MjMxNzMzNDdaMDMxMTAvBgNV
BAMTKDA5NTY1NzY4QUQ0MkE3RDRBMjJDOTAxNTY1OUMxOEM2RTRBMENFMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuGMQEtGYxEt78ERUx3N+Plc0i
ipu7N3ANYb+5ssYLy51xjLVVJV02zST9GpxRJZEex+gWiH7h1RGcXWpuEOCoR1qV
bvbznUKmMKVfF3zgUZfbgNkIzVI85DC/tjPiAyfsxD29H7loaNpleRFATFDtRlYV
DcbMagRKumDNDbrxLm+GksbBIgQFEE5pYHXBy/kNPFQaiPxbCDuOl/lWbPfyjah4
ib2kiQHGQalR49PYDMkcvDgzOFGglua/1NjFryAd4aWEXh4CnxaFvQ7rGw00xmQD
cl2pePucNpCMEKnERJAfkw2ydpVkHdH9a7Xa9nMIvq6OBP/4D49Bv5mAH8V1AgMB
AAGjggIbMIICFzAdBgNVHQ4EFgQUCVZXaK1Cp9SiLJAVZZwYxuSgzi4wHwYDVR0j
BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2
MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2
NVBaMC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt
NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTMTYyNzYucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgABMBgDBACPFEID
BACPFI0DBACPFMMDBACPFNcwDQYJKoZIhvcNAQELBQADggEBAFGf2zdov/Y/k10P
3bAQULyAJWWcXMZjWZg467aD2t3puvlYlaTUCdXGc4+hbIQJ5jvLNI6HPXT2Xqqk
Pk8PRdR1fnGZ20OMHEFqSGEqVVY1w+6E3rRnyt6BALWXXaHvxBaihA1xKQrCpzFR
2UAPU15gxujiSjHwJLgkG85aqtJDMS2vKvB0eaauyScEl/FQ4U/G5Ynp4Sx1SnlL
tGmxYdvPXfHKHm2pvMUofKEGo+6MieFM3XTytOLjh4JXX0ptjZmyhFKKqMgRx/9C
Kc2T/KgAQcc3kytbgDImIt8dmEnVZaHDGKvhx8Acqbr1LcHdLJNb1EGAwkZ2WUBl
5E2RQBU=
-----END CERTIFICATE-----
Generated at Tue Jul 21 10:59:09 2026 by rpki-client