Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS16276.roa
File: AS16276.roa (raw, json)
Hash identifier: PDJAzTjMwimkXR3ZNxM/+sXH4R7T1MdsoFPm2UzG7MQ=
Subject key identifier: 11:2D:97:6B:B7:39:EC:E8:65:99:1C:F3:9D:EA:0A:C1:AD:8E:BB:33
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 0EE8EFF16610B596EB0AE5865045650831BCA7E1
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS16276.roa
Signing time: Mon 07 Sep 2026 13:17:42 +0000
ROA not before: Mon 07 Sep 2026 13:12:42 +0000
ROA not after: Mon 06 Sep 2027 13:17:42 +0000
asID: 16276
IP address blocks: 143.20.60.0/24 maxlen: 24
143.20.66.0/24 maxlen: 24
143.20.195.0/24 maxlen: 24
143.20.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 03:58:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:e8:ef:f1:66:10:b5:96:eb:0a:e5:86:50:45:65:08:31:bc:a7:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 7 13:12:42 2026 GMT
Not After : Sep 6 13:17:42 2027 GMT
Subject: CN=112D976BB739ECE865991CF39DEA0AC1AD8EBB33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:29:47:6d:85:78:1f:aa:9c:eb:06:4d:4f:04:
fc:3d:c5:ab:76:9f:a1:46:8e:59:6b:51:1f:06:9b:
b0:3f:4c:db:07:d6:a8:0e:09:15:38:98:7e:52:25:
e8:f6:d8:76:6d:95:2e:8f:b8:35:5c:e8:92:b8:b8:
22:16:51:30:b1:40:19:5e:a5:02:ce:9a:11:ee:8b:
91:8a:28:09:7b:99:45:27:5d:fc:36:77:88:30:ec:
4f:42:dd:fa:76:b8:d7:84:7e:a2:13:3a:dc:82:45:
18:99:18:90:1f:74:dd:b5:d4:5a:fd:66:e7:58:9c:
4e:b7:02:a1:20:08:46:3d:4f:10:8c:36:e7:98:52:
ca:2a:ef:cf:6e:08:5f:5c:fd:52:51:d5:6a:b8:16:
df:0c:72:0d:70:82:dd:b9:ef:99:49:4c:fc:24:52:
b8:f7:96:04:8b:ee:11:93:24:20:f9:07:01:29:6d:
11:17:1c:d8:61:4d:e2:1b:69:8c:7f:a5:fd:cb:dd:
de:81:52:f9:16:a0:12:14:81:77:08:aa:f3:11:0f:
c6:0b:76:34:a6:52:ee:bb:c8:48:4d:fd:d6:fb:c5:
8a:53:f3:eb:3c:23:36:0e:a5:f0:14:c6:f0:50:c5:
9f:29:d1:8e:3f:7a:0c:7c:ef:1b:88:ce:06:74:0a:
cf:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:2D:97:6B:B7:39:EC:E8:65:99:1C:F3:9D:EA:0A:C1:AD:8E:BB:33
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS16276.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.60.0/24
143.20.66.0/24
143.20.195.0/24
143.20.215.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:5d:1d:02:5a:f5:20:4a:3b:88:0d:87:c8:89:12:ee:a3:08:
3d:a5:b0:1e:d4:67:af:46:ad:aa:8e:0e:fe:96:17:37:66:bb:
25:0b:4c:0a:a0:b8:2d:6d:ed:50:e6:09:70:26:74:59:79:9f:
e0:18:15:1f:90:d2:5e:0d:fb:7f:db:a4:02:6b:ec:af:ea:a3:
cf:65:cd:0e:a5:14:8a:5a:e9:eb:88:8a:a4:bb:47:f3:63:27:
45:4a:69:0d:f6:c1:ec:88:09:12:1c:f6:5d:52:ad:1e:31:36:
5b:ed:b2:b6:da:c9:cc:e4:a4:17:06:65:5f:9e:60:e0:09:87:
49:2e:74:a8:dd:5d:0f:52:2c:d6:2f:45:87:0d:0d:f2:84:cf:
c7:a6:51:57:7a:8e:2b:9c:6c:f3:1e:6a:66:57:df:a1:59:54:
65:4e:d5:10:2f:35:88:7b:1e:c7:1b:36:d1:ba:18:10:1c:05:
c5:18:5f:22:e3:71:f2:5e:6f:67:9a:3a:db:29:0f:be:f7:82:
3e:2e:6d:01:85:cb:5d:5f:23:8c:6a:18:b1:6f:f8:6f:9e:e2:
81:1a:c3:01:df:cc:e9:7d:a8:cb:30:9c:c3:ca:83:c9:95:86:
78:1d:3f:8f:e7:ee:69:c1:ed:58:f9:f6:7f:f7:89:0f:b5:e1:
7c:8d:fa:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:53:59 2026 by rpki-client