Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS16276.roa
File: AS16276.roa (raw, json)
Hash identifier: TUx4Ur8aNtNAdQlYUntk2mp8nT6aI3yMXR90yYyy8wA=
Subject key identifier: 26:95:A0:7E:54:A7:CD:32:24:BD:E1:7E:95:CA:28:5D:A5:C4:AC:30
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 6B2820A0B72D65C2B9E7A63D4754DB6355D6D584
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS16276.roa
Signing time: Wed 02 Sep 2026 07:43:56 +0000
ROA not before: Wed 02 Sep 2026 07:38:56 +0000
ROA not after: Wed 01 Sep 2027 07:43:56 +0000
asID: 16276
IP address blocks: 46.202.232.0/22 maxlen: 24
46.202.240.0/22 maxlen: 24
46.203.108.0/22 maxlen: 24
46.203.116.0/22 maxlen: 24
46.203.128.0/22 maxlen: 24
46.203.140.0/22 maxlen: 24
92.113.13.0/24 maxlen: 24
95.135.166.0/24 maxlen: 24
95.135.167.0/24 maxlen: 24
178.92.111.0/24 maxlen: 24
178.92.120.0/24 maxlen: 24
178.93.247.0/24 maxlen: 24
178.94.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 02:51:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:28:20:a0:b7:2d:65:c2:b9:e7:a6:3d:47:54:db:63:55:d6:d5:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 2 07:38:56 2026 GMT
Not After : Sep 1 07:43:56 2027 GMT
Subject: CN=2695A07E54A7CD3224BDE17E95CA285DA5C4AC30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:47:38:4d:d9:39:b1:f4:97:96:3d:22:ae:5a:
cc:09:fc:51:0c:ab:9b:b3:e7:db:49:99:86:ff:10:
76:57:93:c0:a6:40:5f:a5:d4:48:1d:d7:67:a0:27:
e6:fe:cc:2a:66:19:dd:db:4e:8d:c1:37:05:2e:89:
89:e6:fb:39:18:08:8e:28:bf:c8:f4:ce:59:ae:b6:
04:7a:09:fa:c1:9c:4f:dc:b0:4d:e0:7b:61:33:e9:
e0:5c:12:2d:22:a2:2f:0c:7e:38:a8:9f:b2:01:c5:
61:5e:68:52:81:9c:2a:af:e4:4b:0d:81:3c:8b:e2:
34:b0:76:d4:21:14:db:9f:6c:3f:bb:70:08:1a:98:
3b:d0:f2:d9:06:0c:0d:98:44:38:20:42:e9:b8:ce:
50:e4:b5:72:a5:bd:f7:dc:c5:06:20:b0:f4:4c:4b:
23:b0:e1:9b:b9:66:3c:f6:65:0e:20:94:9b:04:06:
9f:6a:e4:77:a5:7f:67:bf:f4:92:15:92:af:1b:33:
3c:a6:77:7d:db:91:f0:49:e8:06:5b:54:45:0b:6c:
64:07:10:96:80:02:ae:49:67:a1:60:7b:df:c6:d7:
7d:09:80:01:e5:a6:3a:bf:8f:5c:6d:99:4f:7e:8d:
9a:d4:76:01:f0:43:08:e7:b4:22:fa:4e:68:38:d9:
76:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:95:A0:7E:54:A7:CD:32:24:BD:E1:7E:95:CA:28:5D:A5:C4:AC:30
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS16276.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.232.0/22
46.202.240.0/22
46.203.108.0/22
46.203.116.0/22
46.203.128.0/22
46.203.140.0/22
92.113.13.0/24
95.135.166.0/23
178.92.111.0/24
178.92.120.0/24
178.93.247.0/24
178.94.22.0/24
Signature Algorithm: sha256WithRSAEncryption
74:c7:5b:66:5a:52:1d:5b:12:eb:97:65:6c:cc:64:75:01:b3:
a7:42:75:9f:74:e8:e4:6d:fc:27:bd:fa:f1:bc:c8:02:3b:db:
53:f0:bb:28:fa:70:4b:51:50:2c:f4:9b:c3:b3:c7:be:56:14:
16:10:f7:2f:7c:62:c8:be:47:d5:5c:ba:01:71:77:94:33:e7:
15:ad:c3:5e:c1:9e:02:e9:b5:c5:22:95:eb:28:8b:d5:81:0a:
14:e0:2e:a9:2b:33:34:aa:1a:01:fe:ee:94:07:5d:16:fb:f3:
bb:10:e0:fb:86:34:d5:ff:e4:6d:ef:36:3a:0d:a3:0c:e8:29:
a7:ff:13:a9:e4:28:0d:28:94:f5:7a:9d:0e:a5:da:62:f0:22:
d6:ca:87:44:e2:c9:2c:6d:3b:7e:87:70:59:12:65:c7:0c:d0:
5b:e8:82:4e:e6:53:a4:1c:d3:e4:12:3e:2d:d4:11:17:1c:4f:
be:ed:4a:f0:fe:51:e7:c9:d0:1c:9d:60:4d:90:28:bc:f0:fa:
95:e3:f5:ce:a6:64:64:41:3b:01:39:fd:9b:a7:d5:d5:31:27:
c6:a5:9f:51:ce:65:a2:cb:55:bc:3f:4d:b4:a5:ce:b5:bd:8b:
b6:f2:db:e7:03:bc:eb:88:21:31:f3:c7:62:10:d3:11:18:2b:
b3:20:c3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:14:37 2026 by rpki-client