Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS16276.roa
File: AS16276.roa (raw, json)
Hash identifier: SYJBEyw5v+f2dgoz+YEv7BlN2WoV56h0hjwrPXJp+PU=
Subject key identifier: 77:02:78:80:81:2D:F5:F1:3D:1D:0B:BB:A9:8A:37:6F:FE:94:E6:BA
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 362A1342432031AA7C8E2398B3933700B1B7F1D6
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS16276.roa
Signing time: Tue 04 Nov 2025 05:31:56 +0000
ROA not before: Tue 04 Nov 2025 05:26:56 +0000
ROA not after: Tue 03 Nov 2026 05:31:56 +0000
asID: 16276
IP address blocks: 46.236.211.0/24 maxlen: 24
46.236.214.0/24 maxlen: 24
82.139.208.0/24 maxlen: 24
82.139.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:2a:13:42:43:20:31:aa:7c:8e:23:98:b3:93:37:00:b1:b7:f1:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Nov 4 05:26:56 2025 GMT
Not After : Nov 3 05:31:56 2026 GMT
Subject: CN=77027880812DF5F13D1D0BBBA98A376FFE94E6BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d7:79:2a:d9:4b:25:74:75:17:42:ac:cb:be:
a3:cf:a4:b9:ff:17:09:f6:a3:4d:11:e6:47:3b:eb:
1a:b8:45:5e:48:e9:1f:bf:2b:7e:bd:c1:c0:3b:c6:
9d:6a:34:13:c1:d0:bc:7b:7c:d4:43:21:f6:d2:5c:
d7:79:cb:e8:bc:c8:13:31:7b:45:57:d3:ea:c4:b7:
58:c5:f6:03:09:4c:2a:9e:66:9a:e8:e2:d8:c0:75:
4c:58:16:53:d6:86:de:14:5a:96:e8:4b:87:83:ac:
37:f0:7d:e2:6e:c6:b2:5b:eb:84:65:9b:04:d5:64:
9b:42:22:08:51:53:8a:dc:0a:0d:70:ee:d2:5f:ab:
82:73:4a:2d:09:ab:f9:10:69:47:66:10:3c:44:1e:
30:8a:ab:83:ff:7e:f1:82:4e:16:00:f2:ff:99:2c:
53:e3:09:e8:6f:14:8f:0e:f7:43:aa:bf:29:40:3c:
a5:4a:f9:02:b5:29:e7:e6:82:a8:8e:d4:5a:46:7e:
92:17:35:5a:88:46:4e:99:d5:79:8a:b8:7f:83:b2:
92:25:4d:a1:66:e5:08:ae:71:fb:02:6f:12:f2:11:
e2:1f:7f:21:42:cf:b2:1e:e3:03:43:b1:86:ea:8f:
00:e2:f0:9c:90:da:d3:90:96:41:a7:b3:38:f3:04:
5c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:02:78:80:81:2D:F5:F1:3D:1D:0B:BB:A9:8A:37:6F:FE:94:E6:BA
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS16276.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.211.0/24
46.236.214.0/24
82.139.208.0/24
82.139.215.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:e0:1b:30:3d:4d:33:f3:92:78:3d:e9:32:fe:2f:16:42:37:
25:53:7d:3d:8c:f3:d4:65:f2:22:5d:b2:8a:cc:07:8a:2b:d1:
5b:36:08:a6:54:21:26:df:b8:df:ae:ca:51:c0:56:d3:e8:6c:
a1:10:40:0c:0d:b5:05:80:73:f0:37:f5:c4:eb:91:92:a9:f0:
7c:7f:99:c4:7e:fd:d1:34:c8:0c:29:09:63:c1:3f:dc:aa:2c:
09:08:bb:a7:65:ea:49:a6:ff:4d:c5:da:37:fe:78:8e:12:76:
74:63:d0:3f:db:0b:39:fd:dc:93:e4:4b:57:9e:04:6c:19:bd:
80:37:b1:74:59:52:10:7a:88:4c:f4:2b:f2:02:31:9f:22:bc:
e3:f6:3a:1d:65:e3:31:1e:d4:a6:48:98:90:98:66:75:bd:13:
62:a0:43:9d:36:a9:6c:b4:b4:2c:ef:d1:09:d1:73:9a:ab:12:
15:74:83:4e:15:f3:12:47:fb:be:93:c8:92:ec:4f:90:eb:99:
6c:8c:72:ef:58:ce:47:52:8f:79:de:3e:6e:7e:07:b5:66:d9:
9d:85:55:0d:6c:1c:60:37:48:ae:41:9c:36:ea:82:24:9a:e0:
ca:c7:b9:a6:85:24:12:63:a3:fb:bc:dd:94:8c:86:c8:a8:6b:
e8:83:79:89
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgIUNioTQkMgMap8jiOYs5M3ALG38dYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2ZlY2NiMTdiZTUxZWU1OWVjNzRkNjRlZWQ5MTdlMjIx
ZWUyOGExYjAeFw0yNTExMDQwNTI2NTZaFw0yNjExMDMwNTMxNTZaMDMxMTAvBgNV
BAMTKDc3MDI3ODgwODEyREY1RjEzRDFEMEJCQkE5OEEzNzZGRkU5NEU2QkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC13kq2UsldHUXQqzLvqPPpLn/
Fwn2o00R5kc76xq4RV5I6R+/K369wcA7xp1qNBPB0Lx7fNRDIfbSXNd5y+i8yBMx
e0VX0+rEt1jF9gMJTCqeZpro4tjAdUxYFlPWht4UWpboS4eDrDfwfeJuxrJb64Rl
mwTVZJtCIghRU4rcCg1w7tJfq4JzSi0Jq/kQaUdmEDxEHjCKq4P/fvGCThYA8v+Z
LFPjCehvFI8O90OqvylAPKVK+QK1KefmgqiO1FpGfpIXNVqIRk6Z1XmKuH+DspIl
TaFm5QiucfsCbxLyEeIffyFCz7Ie4wNDsYbqjwDi8JyQ2tOQlkGnszjzBFwjAgMB
AAGjggIbMIICFzAdBgNVHQ4EFgQUdwJ4gIEt9fE9HQu7qYo3b/6U5rowHwYDVR0j
BBgwFoAUP+zLF75R7lnsdNZO7ZF+Ih7iihswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUtOWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1
NGJjLzAvM0ZFQ0NCMTdCRTUxRUU1OUVDNzRENjRFRUQ5MTdFMjIxRUUyOEExQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1AtekxGNzVSN2xuc2ROWk83WkYtSWg3
aWlocy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIyZGI3NTU1LTlhYTQt
NDk4My05MzE2LTczODA5ZGQzNTRiYy8wL0FTMTYyNzYucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgABMBgDBAAu7NMD
BAAu7NYDBABSi9ADBABSi9cwDQYJKoZIhvcNAQELBQADggEBAB7gGzA9TTPzkng9
6TL+LxZCNyVTfT2M89Rl8iJdsorMB4or0Vs2CKZUISbfuN+uylHAVtPobKEQQAwN
tQWAc/A39cTrkZKp8Hx/mcR+/dE0yAwpCWPBP9yqLAkIu6dl6kmm/03F2jf+eI4S
dnRj0D/bCzn93JPkS1eeBGwZvYA3sXRZUhB6iEz0K/ICMZ8ivOP2Oh1l4zEe1KZI
mJCYZnW9E2KgQ502qWy0tCzv0QnRc5qrEhV0g04V8xJH+76TyJLsT5DrmWyMcu9Y
zkdSj3nePm5+B7Vm2Z2FVQ1sHGA3SK5BnDbqgiSa4MrHuaaFJBJjo/u83ZSMhsio
a+iDeYk=
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:54:10 2025 by rpki-client