Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS16276.roa
File: AS16276.roa (raw, json)
Hash identifier: 59McnIuvtCmLB96WlW7mrlqGVgcvDQAMHZ6psJUPh44=
Subject key identifier: 82:EE:F5:A5:07:67:66:9E:34:8C:E2:D9:64:47:03:EE:71:8C:5A:D5
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 6F08DAE73DEA7B670B461C0302E76DCA9B20DBFA
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS16276.roa
Signing time: Fri 25 Jul 2025 05:00:30 +0000
ROA not before: Fri 25 Jul 2025 04:55:30 +0000
ROA not after: Fri 24 Jul 2026 05:00:30 +0000
asID: 16276
IP address blocks: 2.57.18.0/24 maxlen: 24
89.19.44.0/24 maxlen: 24
103.141.69.0/24 maxlen: 24
191.96.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:08:da:e7:3d:ea:7b:67:0b:46:1c:03:02:e7:6d:ca:9b:20:db:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jul 25 04:55:30 2025 GMT
Not After : Jul 24 05:00:30 2026 GMT
Subject: CN=82EEF5A50767669E348CE2D9644703EE718C5AD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c5:44:4a:d1:f6:2d:9e:94:7a:40:23:f1:2e:
fd:c9:3d:96:d6:17:6a:70:44:5f:f9:49:90:eb:73:
a7:81:46:8f:7b:51:80:1f:18:a3:65:bd:9f:61:c3:
15:a0:50:4d:44:44:de:c5:e5:b9:0c:7f:14:c7:6f:
2d:eb:32:a0:59:1d:f0:32:b1:13:4c:9e:6e:36:f5:
29:e6:7e:3d:7d:f9:72:83:e0:9d:69:48:5d:b9:33:
05:3a:72:17:3a:8f:a3:6c:65:cc:08:9f:58:a6:16:
f9:bd:a3:b9:3d:b9:ad:ba:83:87:90:4d:e0:e0:2f:
c7:a2:be:04:10:ab:f2:f2:07:e8:75:c2:24:1b:f7:
ec:4f:4c:f1:03:fa:dd:6e:80:5d:78:4b:17:50:34:
2f:25:1b:2a:bc:35:7c:54:17:21:5b:be:48:f0:2b:
93:71:60:b1:07:eb:96:73:9d:87:11:df:08:8e:63:
1d:a2:d2:ba:79:09:32:b8:a9:5d:ab:eb:8e:d4:36:
fc:6a:3c:ac:e1:12:f7:fc:fc:8d:e2:6e:e4:a4:1e:
ad:1c:e7:62:45:df:bc:50:fc:c7:48:de:7e:ee:04:
5c:76:a5:be:a3:7e:d3:c5:d4:2b:ab:c1:b0:99:dc:
be:3b:58:d7:73:7b:36:a0:0a:db:90:0c:78:c9:02:
bb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:EE:F5:A5:07:67:66:9E:34:8C:E2:D9:64:47:03:EE:71:8C:5A:D5
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS16276.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.18.0/24
89.19.44.0/24
103.141.69.0/24
191.96.153.0/24
Signature Algorithm: sha256WithRSAEncryption
20:ca:e9:35:66:e8:88:6e:69:f6:0d:58:d3:e5:f1:a9:42:a4:
6e:be:5f:e2:38:17:85:87:45:8e:75:0d:37:ed:0b:bd:e7:0f:
c5:61:7f:2f:6a:ab:87:5e:c3:a7:cd:dc:7c:b6:80:8e:fd:cb:
ea:b2:06:6d:cb:ce:1f:fe:fb:0d:e8:3f:a6:bd:b0:12:43:c1:
ad:64:e7:8c:cd:f2:05:c2:e2:9b:6e:73:7f:d9:b3:2c:6e:bb:
d8:45:ef:73:1c:6e:66:df:47:25:cd:28:8e:5c:0a:0b:17:65:
73:a4:cf:ca:81:0c:86:9e:c6:8c:dd:89:b1:d8:84:3d:2a:5b:
24:78:f1:8f:7b:b4:a2:18:bf:f9:f4:10:c3:33:02:25:ec:17:
ec:47:7f:c9:08:fa:b3:ee:78:0f:24:ae:54:d5:2f:a7:02:aa:
0a:38:9a:97:d5:d6:5f:6d:c5:18:77:32:59:5a:36:a8:87:5b:
99:a8:02:fb:75:c6:2c:c0:68:0d:cd:30:4e:2c:11:9f:3e:58:
84:de:24:06:82:39:5e:6f:51:90:b6:89:54:3c:a4:f6:e4:74:
f1:65:21:06:6c:8a:91:1b:51:df:ca:f8:63:49:4b:b4:84:cb:
18:8c:97:e8:e5:cc:42:d6:05:55:ce:11:31:3f:01:f8:ca:fb:
32:b3:bf:70
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgIUbwja5z3qe2cLRhwDAudtypsg2/owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNTA3MjUwNDU1MzBaFw0yNjA3MjQwNTAwMzBaMDMxMTAvBgNV
BAMTKDgyRUVGNUE1MDc2NzY2OUUzNDhDRTJEOTY0NDcwM0VFNzE4QzVBRDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnxURK0fYtnpR6QCPxLv3JPZbW
F2pwRF/5SZDrc6eBRo97UYAfGKNlvZ9hwxWgUE1ERN7F5bkMfxTHby3rMqBZHfAy
sRNMnm429Snmfj19+XKD4J1pSF25MwU6chc6j6NsZcwIn1imFvm9o7k9ua26g4eQ
TeDgL8eivgQQq/LyB+h1wiQb9+xPTPED+t1ugF14SxdQNC8lGyq8NXxUFyFbvkjw
K5NxYLEH65ZznYcR3wiOYx2i0rp5CTK4qV2r647UNvxqPKzhEvf8/I3ibuSkHq0c
52JF37xQ/MdI3n7uBFx2pb6jftPF1CurwbCZ3L47WNdzezagCtuQDHjJArsDAgMB
AAGjggIbMIICFzAdBgNVHQ4EFgQUgu71pQdnZp40jOLZZEcD7nGMWtUwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMTYyNzYucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgABMBgDBAACORID
BABZEywDBABnjUUDBAC/YJkwDQYJKoZIhvcNAQELBQADggEBACDK6TVm6IhuafYN
WNPl8alCpG6+X+I4F4WHRY51DTftC73nD8Vhfy9qq4dew6fN3Hy2gI79y+qyBm3L
zh/++w3oP6a9sBJDwa1k54zN8gXC4ptuc3/Zsyxuu9hF73McbmbfRyXNKI5cCgsX
ZXOkz8qBDIaexozdibHYhD0qWyR48Y97tKIYv/n0EMMzAiXsF+xHf8kI+rPueA8k
rlTVL6cCqgo4mpfV1l9txRh3MllaNqiHW5moAvt1xizAaA3NME4sEZ8+WITeJAaC
OV5vUZC2iVQ8pPbkdPFlIQZsipEbUd/K+GNJS7SEyxiMl+jlzELWBVXOETE/AfjK
+zKzv3A=
-----END CERTIFICATE-----
Generated at Mon Aug 4 07:57:34 2025 by rpki-client