Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS16276.roa
File: AS16276.roa (raw, json)
Hash identifier: hWWjSB2a65t/MxFbxPJza3Z+6ne2b+1qLjrsx/6aT/I=
Subject key identifier: 67:A0:2E:0B:B5:4C:8F:16:DB:E2:E3:62:71:9E:8A:47:CB:88:0B:61
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 448E1725DA2F6FFB7A1CF1E9AD9E3C466745B18D
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS16276.roa
Signing time: Thu 26 Mar 2026 09:03:32 +0000
ROA not before: Thu 26 Mar 2026 08:58:32 +0000
ROA not after: Thu 25 Mar 2027 09:03:32 +0000
asID: 16276
IP address blocks: 2.58.172.0/24 maxlen: 24
89.19.44.0/24 maxlen: 24
181.41.194.0/24 maxlen: 24
191.96.140.0/23 maxlen: 23
191.101.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 15:58:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:8e:17:25:da:2f:6f:fb:7a:1c:f1:e9:ad:9e:3c:46:67:45:b1:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Mar 26 08:58:32 2026 GMT
Not After : Mar 25 09:03:32 2027 GMT
Subject: CN=67A02E0BB54C8F16DBE2E362719E8A47CB880B61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bc:15:60:28:29:80:1e:59:07:3e:00:7b:7a:
ca:62:22:a1:5f:82:41:a3:c6:89:39:b5:4d:c8:80:
a2:78:88:f3:3b:2a:aa:a0:2e:55:f2:ce:b5:ca:2c:
f4:b9:a7:cd:75:79:cf:a0:4a:5a:92:d1:02:85:d8:
cd:34:bb:9d:3d:a0:15:6d:46:9b:45:c7:66:62:34:
dc:c6:95:7f:7d:d8:54:4b:6d:d4:c5:8d:63:d6:30:
55:d6:0d:30:1c:90:9f:2a:b2:da:9c:89:61:0c:4e:
94:7d:bf:bd:61:ec:3e:e6:21:df:cf:2a:de:2f:80:
6a:dc:84:b3:e3:21:43:30:b1:5f:22:07:e3:c6:1b:
f3:4b:ae:ae:30:60:d6:34:8f:76:94:59:70:c0:d7:
2d:59:fc:87:a6:5a:c3:d7:37:1f:24:fc:22:d7:24:
b5:05:8a:46:16:63:d2:49:e6:37:52:d5:db:5b:01:
52:a2:4c:11:87:fe:15:a6:ae:9b:7c:1a:61:66:03:
30:e5:68:8f:20:1e:e2:21:14:0e:05:00:5c:62:ce:
6c:7a:f3:18:45:27:42:80:45:67:e6:75:7e:73:72:
28:42:32:1e:28:fa:8f:59:48:ca:d5:6b:a9:4e:5c:
b5:e5:61:c6:33:be:5e:bb:d1:77:01:2f:4e:d6:57:
e8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A0:2E:0B:B5:4C:8F:16:DB:E2:E3:62:71:9E:8A:47:CB:88:0B:61
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS16276.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.172.0/24
89.19.44.0/24
181.41.194.0/24
191.96.140.0/23
191.101.150.0/24
Signature Algorithm: sha256WithRSAEncryption
25:7e:1c:b9:ef:98:e3:9c:b5:fb:f8:00:09:05:8b:07:17:7e:
51:45:5c:61:3f:b2:1f:87:bb:be:3e:6b:53:e6:8c:c4:c6:0b:
61:52:21:d2:ae:f6:08:7e:58:b9:80:00:fe:13:6f:0f:0a:fc:
ac:2c:8e:c2:1e:4f:b1:bd:56:c9:5c:e8:cd:f3:01:13:9f:5b:
f9:9a:6e:a8:70:c7:2e:73:4b:fc:a3:85:26:13:a7:ab:7f:44:
b9:e6:9e:ef:25:71:4a:2f:91:f3:b0:3a:80:6c:6b:b6:e0:8e:
f2:f3:da:a5:a1:5e:ac:fc:67:a3:95:01:f8:1d:93:36:a3:c6:
89:4d:7f:f3:7a:a5:8f:21:d2:95:52:ef:1f:5f:a0:36:4b:58:
b2:12:99:91:e6:ce:79:2f:1b:b5:4e:28:bd:ba:b5:c8:57:9f:
7f:48:2b:b4:1a:06:98:42:10:26:9e:be:36:f9:ad:64:66:e2:
40:6c:e0:c7:03:ea:ca:1b:76:b0:f0:7b:ad:b7:2b:34:0c:8f:
07:b3:72:a1:05:e8:47:00:d6:5c:88:09:a1:8b:a3:3a:30:bf:
9d:c8:63:65:5c:5e:88:2d:e3:6f:ba:4a:79:47:2e:94:b0:1c:
96:6e:9a:d4:6a:ee:f3:c2:41:e5:5d:54:b6:9a:ed:cc:06:cb:
c5:c5:9f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:57:08 2026 by rpki-client