Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS16276.roa
File: AS16276.roa (raw, json)
Hash identifier: LqGozX7sArPHexlpgFPlcc25EQZ265HH6lCN0wP76kg=
Subject key identifier: FB:5F:50:EF:FE:6F:D7:05:F8:D8:C9:B9:8A:84:57:EC:5F:26:00:CD
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 6BBBB22A2FF3E57CB8BCE8C4EA73866DE488B6A8
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS16276.roa
Signing time: Wed 16 Sep 2026 07:25:21 +0000
ROA not before: Wed 16 Sep 2026 07:20:21 +0000
ROA not after: Wed 15 Sep 2027 07:25:21 +0000
asID: 16276
IP address blocks: 212.74.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 21:12:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:bb:b2:2a:2f:f3:e5:7c:b8:bc:e8:c4:ea:73:86:6d:e4:88:b6:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Sep 16 07:20:21 2026 GMT
Not After : Sep 15 07:25:21 2027 GMT
Subject: CN=FB5F50EFFE6FD705F8D8C9B98A8457EC5F2600CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:84:11:d9:62:99:66:f0:d4:9e:c0:2b:d5:f7:
db:cc:15:d0:6f:cb:e0:ab:d5:06:78:17:77:ad:7a:
fb:0d:47:6f:07:8c:63:fd:b2:4f:4a:01:c0:a6:e2:
f5:e1:f3:a0:86:4c:38:a3:8f:0c:96:a3:4d:04:cd:
0a:24:b4:e7:4d:14:fe:43:76:0e:81:0e:bc:f5:64:
83:9b:b1:53:74:44:30:82:31:2e:18:6a:0e:82:be:
52:71:99:38:32:0c:c6:f4:18:6d:fb:88:46:2f:ae:
5d:84:74:69:f2:d0:7c:df:cf:30:c5:bd:6c:5b:78:
d2:2b:dd:1d:1a:fb:66:90:31:0c:8f:15:a0:56:ce:
97:e6:2a:63:6f:03:22:09:3f:8f:d3:81:1b:39:33:
8e:7c:76:da:28:c7:99:d5:80:4e:29:b9:b2:74:86:
9a:dc:33:03:e7:79:5a:82:32:a9:78:df:04:83:b7:
3e:2b:f4:bf:3e:80:77:12:2f:95:32:fc:44:25:5b:
b1:52:e4:24:dc:26:fe:bf:ea:4b:a6:8f:90:f8:a2:
11:96:09:dd:cd:44:b9:43:dc:c2:72:bc:cb:af:ab:
78:e5:16:09:f9:69:e5:81:29:eb:4e:d8:27:f4:0c:
5a:84:5a:3c:fa:02:98:76:16:03:f6:5f:9e:70:e0:
61:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:5F:50:EF:FE:6F:D7:05:F8:D8:C9:B9:8A:84:57:EC:5F:26:00:CD
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS16276.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.74.39.0/24
Signature Algorithm: sha256WithRSAEncryption
af:42:25:cf:2b:f8:66:c5:e3:7a:5d:ab:13:29:e9:9a:11:9d:
40:aa:ee:f4:b2:56:75:fa:0a:ce:3c:2b:10:9d:ba:2a:14:a8:
75:26:6f:01:fa:2e:94:f9:a1:3d:90:54:b3:86:a6:d5:c8:c1:
b3:82:6d:42:bf:8a:e5:e5:12:9b:ed:f2:8f:72:00:99:cf:f3:
2a:a4:5c:78:0e:d8:d1:bb:1b:0a:eb:8e:11:04:46:ef:b1:ed:
8c:f6:2f:f1:6b:44:0d:6b:2c:0e:ea:27:d6:92:bc:eb:ae:1a:
8a:f3:1c:d1:8d:a7:ca:64:5f:8e:09:78:02:4f:6b:c3:33:74:
c4:97:01:f9:2b:70:0b:47:01:63:ed:b1:03:44:d4:ae:3a:d9:
f9:41:90:68:f6:6b:9b:ff:1b:e1:e6:b1:1c:60:0d:fc:f6:9a:
06:74:52:7a:c2:af:22:79:39:b2:18:06:cb:3d:4d:9d:21:f1:
cf:67:31:62:90:7f:83:c5:3b:05:0b:a9:03:6d:5e:61:4c:7e:
5c:06:87:b3:00:f0:14:24:46:91:c4:c3:f3:e0:c2:ef:3d:a3:
fb:1d:34:73:d0:ed:1f:88:8d:21:88:9a:9d:87:43:19:d1:3d:
4a:1d:47:c1:fb:38:d0:25:3d:1e:86:db:de:ca:13:f4:2c:a8:
b2:35:77:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 08:27:25 2026 by rpki-client