Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS16276.roa
File: AS16276.roa (raw, json)
Hash identifier: F800B345Kv202V13mxjN0s7USA/3WQz5x34D68tzJFU=
Subject key identifier: 03:BF:5C:7E:33:32:90:E5:2B:98:23:54:5D:2E:6C:A0:F4:93:6F:C0
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 3E79BC0C577E1986C2663A367933EAC12130928C
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS16276.roa
Signing time: Tue 03 Feb 2026 00:00:11 +0000
ROA not before: Mon 02 Feb 2026 23:55:11 +0000
ROA not after: Tue 02 Feb 2027 00:00:11 +0000
asID: 16276
IP address blocks: 89.19.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:79:bc:0c:57:7e:19:86:c2:66:3a:36:79:33:ea:c1:21:30:92:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Feb 2 23:55:11 2026 GMT
Not After : Feb 2 00:00:11 2027 GMT
Subject: CN=03BF5C7E333290E52B9823545D2E6CA0F4936FC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:58:75:ba:95:02:50:96:8c:79:5b:fd:b2:9b:
35:c2:66:f9:66:14:44:45:78:3c:27:05:1d:2b:02:
85:5b:a3:39:63:37:e8:70:70:ed:82:82:50:4c:6e:
ad:09:8b:48:c3:8d:23:6f:90:53:73:b8:94:12:85:
7a:d8:34:a4:36:0b:c6:e1:46:85:19:03:45:99:e9:
bf:c1:4d:95:74:c1:16:a1:0c:13:c0:45:17:11:77:
8a:d6:8a:e0:16:f8:59:51:40:c2:50:04:41:e0:c6:
48:1f:3b:1f:4b:96:e7:7f:f0:ea:83:b7:53:c8:53:
6f:c1:3b:ce:4e:81:ca:80:7b:82:c8:6f:fb:3b:36:
24:d0:d7:a7:cf:15:54:29:4d:f0:77:fd:7f:90:bf:
e8:7c:93:ea:db:b1:95:28:67:e8:72:c7:bf:42:0c:
be:51:42:d8:10:bb:c4:da:73:32:77:91:91:b5:4e:
53:25:de:44:46:8c:e6:34:64:f9:0a:6d:bf:80:96:
fb:9f:b0:a3:d2:4d:ff:02:a5:df:7e:59:42:e5:1d:
2d:7b:be:68:10:1a:21:51:93:c9:5b:8c:73:4f:b7:
5c:1e:3d:24:d6:33:b6:39:34:1e:46:29:1c:d8:76:
cd:12:3a:fb:24:5c:46:46:89:1e:08:ad:8a:09:2b:
d5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:BF:5C:7E:33:32:90:E5:2B:98:23:54:5D:2E:6C:A0:F4:93:6F:C0
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS16276.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.19.44.0/24
Signature Algorithm: sha256WithRSAEncryption
98:e7:f6:64:fc:1a:15:ed:c7:d9:8a:9d:50:f6:60:e5:45:8f:
bb:c2:d0:c6:27:3d:7f:97:1c:b5:a0:a4:c5:7a:3f:f1:7a:5f:
6f:9b:29:e2:5a:50:94:f7:ba:7e:8f:7e:22:24:47:85:70:20:
dc:a1:56:ea:cc:98:02:f2:71:1b:97:1d:33:29:f1:63:28:2b:
f7:6f:7a:04:db:2d:f0:ec:6f:ce:76:a0:ad:79:9c:6a:e5:27:
17:f7:de:8d:f1:a0:c9:bf:59:f8:0c:dd:b8:9b:25:5e:61:95:
c9:66:7f:7a:06:03:b0:2f:78:3d:b7:a2:12:ef:63:48:d3:32:
ca:e7:d3:74:5d:53:44:fc:34:a1:2f:80:c5:26:47:94:58:f3:
bf:e6:5b:f5:03:bb:37:00:13:d0:58:af:b4:54:b7:49:32:3f:
c5:cb:05:bf:b1:68:f7:9b:7a:ba:e6:07:74:f5:c0:ad:c9:a3:
80:6a:0d:81:8b:07:fa:c8:01:83:aa:48:ac:54:58:f7:57:0a:
55:33:c5:fc:50:cf:70:90:59:19:26:37:a4:ae:48:f8:bb:e8:
8f:45:f6:52:f8:28:10:73:5a:da:6d:14:20:59:88:31:d7:84:
9b:34:b3:67:e7:f1:51:61:ce:82:e5:53:c1:9f:1b:cc:82:24:
f5:2e:82:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:54:59 2026 by rpki-client