Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS16276.roa
File: AS16276.roa (raw, json)
Hash identifier: QOS1egfcw2xhVFFFGPA4H6jW/Zc9hcKwQGQUNNtOvR8=
Subject key identifier: EA:C7:68:BB:75:69:7F:71:FE:3F:BF:C6:74:08:6E:E6:1C:B2:6A:35
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 20FF840D5F13C4CC4B57F6E4BE2BD3D5E5C22ABF
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS16276.roa
Signing time: Tue 03 Nov 2026 00:02:15 +0000
ROA not before: Mon 02 Nov 2026 23:57:15 +0000
ROA not after: Tue 02 Nov 2027 00:02:15 +0000
asID: 16276
IP address blocks: 2.58.172.0/24 maxlen: 24
181.41.194.0/24 maxlen: 24
191.96.13.0/24 maxlen: 24
191.96.140.0/23 maxlen: 23
191.101.150.0/24 maxlen: 24
191.101.157.0/24 maxlen: 24
191.101.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:ff:84:0d:5f:13:c4:cc:4b:57:f6:e4:be:2b:d3:d5:e5:c2:2a:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Nov 2 23:57:15 2026 GMT
Not After : Nov 2 00:02:15 2027 GMT
Subject: CN=EAC768BB75697F71FE3FBFC674086EE61CB26A35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f5:d2:90:af:17:bb:32:d3:02:ad:20:3c:13:
b2:62:37:c8:0c:2c:1c:43:e1:2b:37:7c:d1:b4:c4:
f6:14:92:f8:1c:ea:07:34:5f:e5:75:a4:a0:42:ad:
47:4d:1e:2c:26:5c:e1:49:57:40:e7:d6:ac:d0:16:
a8:4f:80:1c:65:14:88:8b:02:d9:a5:40:86:ab:e6:
ef:5a:65:3d:04:01:d2:04:1d:ab:f4:ff:50:56:93:
87:6d:20:de:7f:64:28:16:e6:f3:ed:64:2b:bd:b9:
bf:42:19:91:1e:9a:12:b3:2a:a9:07:7e:57:4d:85:
7c:07:3c:da:30:83:86:24:ab:ad:1d:21:90:f1:e0:
9c:6a:c7:9e:65:86:6f:97:29:dd:6b:46:44:e0:b5:
36:d9:1d:f8:4e:3b:31:13:91:01:71:d8:ee:5e:a9:
1d:3c:ed:07:9e:aa:f5:5b:1f:f5:c8:b9:d9:bb:62:
7c:39:3b:9f:10:1a:c0:56:e1:c2:42:3f:6c:bc:f4:
25:d3:cc:3d:ca:93:07:79:50:df:cc:5f:f9:73:ed:
3f:1c:c3:c7:4a:fc:80:da:2c:d4:70:20:29:36:29:
3b:98:ea:14:ad:87:fc:c4:32:c6:c6:46:51:12:84:
b1:2d:6b:05:c5:c1:2a:8d:f8:06:7f:2a:d7:6b:8e:
df:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C7:68:BB:75:69:7F:71:FE:3F:BF:C6:74:08:6E:E6:1C:B2:6A:35
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS16276.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.172.0/24
181.41.194.0/24
191.96.13.0/24
191.96.140.0/23
191.101.150.0/24
191.101.157.0/24
191.101.218.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:b4:5c:41:3b:46:c9:72:d9:f3:a5:20:d5:bf:6d:ec:9d:df:
79:37:df:0c:98:84:ef:d7:21:25:60:53:e7:31:25:db:82:5c:
bd:a4:9a:9c:92:e4:38:7b:6a:42:ab:9e:bd:b5:43:01:30:25:
69:fc:e7:a1:fa:8f:de:74:60:14:ac:2b:4e:ec:7a:f9:c1:de:
39:a1:6e:3c:b5:99:dc:fc:31:cc:26:73:82:dd:7d:0f:09:cb:
cb:48:b1:da:94:4b:66:ed:2f:73:26:a1:14:55:99:6c:31:eb:
f9:96:55:3a:68:f2:12:6b:60:5a:e2:0c:ea:e0:85:8a:5c:38:
fa:cd:e7:24:e7:15:98:4c:cb:3a:d5:95:6e:fa:44:15:d2:c2:
a5:7c:58:cf:00:8a:90:37:c1:99:45:9d:fa:89:f5:0d:a5:e9:
38:41:8c:f6:88:e7:25:26:53:32:58:92:b6:10:2d:58:ae:9f:
2a:65:a2:df:c2:df:a9:ae:4b:a1:dc:21:29:ab:a9:5a:14:62:
af:a7:d4:76:ed:22:9e:6a:8e:b8:4f:d6:be:87:7a:93:4c:cf:
95:43:72:28:6d:c9:4f:fb:59:83:33:d2:84:f3:59:da:a6:c7:
40:b2:d5:8c:cb:9f:fd:19:02:23:aa:91:f5:c0:5e:20:d9:51:
52:9e:fd:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:14:38 2026 by rpki-client