Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS16276.roa
File: AS16276.roa (raw, json)
Hash identifier: ikuQTja7ylMUPwZJYUbRabCDvJ63X1BLsZo7MgoZ4HY=
Subject key identifier: A3:B2:39:5E:CA:05:5B:0F:2D:58:E5:22:B6:2C:66:66:49:24:03:E1
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 7ED53216AE2E8DB27007D842A0C44A7363F9499E
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS16276.roa
Signing time: Mon 14 Sep 2026 08:42:27 +0000
ROA not before: Mon 14 Sep 2026 08:37:27 +0000
ROA not after: Mon 13 Sep 2027 08:42:27 +0000
asID: 16276
IP address blocks: 82.21.139.0/24 maxlen: 24
82.22.15.0/24 maxlen: 24
82.22.18.0/24 maxlen: 24
82.22.25.0/24 maxlen: 24
82.22.51.0/24 maxlen: 24
82.22.118.0/24 maxlen: 24
82.24.96.0/22 maxlen: 24
82.24.190.0/24 maxlen: 24
82.25.14.0/24 maxlen: 24
82.25.44.0/24 maxlen: 24
82.25.146.0/23 maxlen: 24
82.26.81.0/24 maxlen: 24
82.26.176.0/21 maxlen: 24
82.26.184.0/21 maxlen: 24
82.27.122.0/24 maxlen: 24
82.29.93.0/24 maxlen: 24
82.29.126.0/24 maxlen: 24
82.38.2.0/24 maxlen: 24
82.38.82.0/24 maxlen: 24
82.38.124.0/22 maxlen: 24
82.38.140.0/22 maxlen: 24
82.38.152.0/22 maxlen: 24
82.38.156.0/22 maxlen: 24
82.38.160.0/22 maxlen: 24
82.38.164.0/22 maxlen: 24
82.38.219.0/24 maxlen: 24
82.38.224.0/22 maxlen: 24
82.38.228.0/22 maxlen: 24
82.38.232.0/22 maxlen: 24
82.38.236.0/22 maxlen: 24
82.38.240.0/22 maxlen: 24
82.38.244.0/22 maxlen: 24
82.38.248.0/22 maxlen: 24
82.38.252.0/22 maxlen: 24
82.39.108.0/24 maxlen: 24
82.39.119.0/24 maxlen: 24
82.39.156.0/22 maxlen: 24
82.39.176.0/22 maxlen: 24
82.39.180.0/22 maxlen: 24
82.39.216.0/22 maxlen: 24
82.39.224.0/22 maxlen: 24
82.40.0.0/22 maxlen: 24
82.40.4.0/22 maxlen: 24
82.40.8.0/22 maxlen: 24
82.40.12.0/22 maxlen: 24
82.40.16.0/22 maxlen: 24
82.41.44.0/22 maxlen: 24
82.41.52.0/22 maxlen: 24
82.41.68.0/22 maxlen: 24
82.41.80.0/22 maxlen: 24
82.41.88.0/22 maxlen: 24
82.41.100.0/22 maxlen: 24
82.41.104.0/22 maxlen: 24
82.41.108.0/22 maxlen: 24
82.41.124.0/22 maxlen: 24
82.41.134.0/24 maxlen: 24
82.41.148.0/22 maxlen: 24
82.41.152.0/22 maxlen: 24
82.41.160.0/22 maxlen: 24
82.41.164.0/22 maxlen: 24
82.41.172.0/22 maxlen: 24
82.41.176.0/22 maxlen: 24
82.41.184.0/22 maxlen: 24
82.41.188.0/22 maxlen: 24
82.41.204.0/22 maxlen: 24
82.41.212.0/22 maxlen: 24
82.41.224.0/22 maxlen: 24
82.41.228.0/22 maxlen: 24
82.47.63.0/24 maxlen: 24
82.47.98.0/24 maxlen: 24
82.47.180.0/24 maxlen: 24
84.75.33.0/24 maxlen: 24
178.83.45.0/24 maxlen: 24
178.83.46.0/24 maxlen: 24
178.83.166.0/24 maxlen: 24
2a13:9500:138::/48 maxlen: 48
2a13:9500:143::/48 maxlen: 48
2a13:9500:166::/48 maxlen: 48
2a13:9500:18e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:d5:32:16:ae:2e:8d:b2:70:07:d8:42:a0:c4:4a:73:63:f9:49:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 14 08:37:27 2026 GMT
Not After : Sep 13 08:42:27 2027 GMT
Subject: CN=A3B2395ECA055B0F2D58E522B62C6666492403E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1f:a4:b7:56:74:14:c1:6d:20:fc:e0:fc:4e:
1d:42:0e:21:f4:b9:9e:68:0a:3f:e8:b4:9b:47:b4:
36:5b:54:b7:fb:6e:24:42:d5:d5:b5:51:03:39:b5:
2b:59:93:a6:b6:f0:c8:c1:35:f5:53:97:94:24:d0:
dd:91:08:80:70:09:63:73:aa:9d:02:2a:23:79:a8:
56:65:7a:d8:ca:8c:6b:b9:8f:79:b7:ae:bc:a3:bd:
08:56:44:bf:51:6d:ab:e7:34:92:72:16:0a:a8:f9:
76:e6:f6:41:3a:a4:ad:1d:5e:90:92:89:f7:55:18:
ab:8d:40:c8:47:11:aa:b8:0c:25:09:6f:d8:35:93:
75:98:95:4b:b9:1c:d0:3f:6d:05:80:6d:06:9f:6a:
a1:1e:30:6f:7e:8f:64:22:22:b7:a3:68:f4:8b:93:
30:de:11:65:d7:1b:9e:e5:29:ee:a3:ff:54:f4:cf:
e6:06:60:13:7d:03:b4:21:45:b4:b9:32:13:62:c1:
c4:01:42:1e:2c:98:e0:6e:92:c6:10:0c:1f:c9:63:
b6:62:6f:3f:64:67:b7:7d:c3:76:1a:3f:c1:05:14:
94:a5:2a:48:0a:c6:c4:8b:b6:b3:bd:09:5d:d0:65:
f6:28:1f:26:ae:eb:e8:5c:d1:a4:f0:dc:d3:46:24:
ca:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:B2:39:5E:CA:05:5B:0F:2D:58:E5:22:B6:2C:66:66:49:24:03:E1
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS16276.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.139.0/24
82.22.15.0/24
82.22.18.0/24
82.22.25.0/24
82.22.51.0/24
82.22.118.0/24
82.24.96.0/22
82.24.190.0/24
82.25.14.0/24
82.25.44.0/24
82.25.146.0/23
82.26.81.0/24
82.26.176.0/20
82.27.122.0/24
82.29.93.0/24
82.29.126.0/24
82.38.2.0/24
82.38.82.0/24
82.38.124.0/22
82.38.140.0/22
82.38.152.0-82.38.167.255
82.38.219.0/24
82.38.224.0/19
82.39.108.0/24
82.39.119.0/24
82.39.156.0/22
82.39.176.0/21
82.39.216.0/22
82.39.224.0/22
82.40.0.0-82.40.19.255
82.41.44.0/22
82.41.52.0/22
82.41.68.0/22
82.41.80.0/22
82.41.88.0/22
82.41.100.0-82.41.111.255
82.41.124.0/22
82.41.134.0/24
82.41.148.0-82.41.155.255
82.41.160.0/21
82.41.172.0-82.41.179.255
82.41.184.0/21
82.41.204.0/22
82.41.212.0/22
82.41.224.0/21
82.47.63.0/24
82.47.98.0/24
82.47.180.0/24
84.75.33.0/24
178.83.45.0-178.83.46.255
178.83.166.0/24
IPv6:
2a13:9500:138::/48
2a13:9500:143::/48
2a13:9500:166::/48
2a13:9500:18e::/48
Signature Algorithm: sha256WithRSAEncryption
16:af:1f:c9:82:7c:b8:30:a3:7a:9b:21:0d:dc:cf:d2:94:11:
ba:85:43:4f:74:6c:ca:4f:de:cd:7a:a5:d7:71:6e:6c:5b:42:
e6:27:0f:9c:83:ca:90:13:df:ab:a3:d2:95:a7:fa:ef:c5:4f:
06:1a:8c:eb:28:e0:c3:7c:03:c6:c1:ab:47:5b:8d:db:8d:3f:
5c:d4:fa:d0:6c:ed:05:ca:52:38:68:ae:73:1d:11:e1:c5:4e:
f8:a2:31:07:13:15:88:b4:a9:46:4b:98:79:02:71:00:ec:5c:
01:56:48:fc:89:6c:be:d1:83:c8:c8:e8:b6:74:e9:d3:83:99:
0b:b5:2b:41:59:16:3f:5a:91:3a:5d:f5:4c:31:e9:a6:c1:b0:
88:f1:6b:0b:34:c3:5d:a0:18:cd:c3:fb:e8:a2:67:b9:32:e7:
a3:33:c5:c8:8c:02:e9:41:7e:6d:10:2c:b8:22:7d:09:f8:c2:
3a:32:d7:b9:90:30:63:31:48:80:80:57:48:a3:f3:03:37:c6:
4c:a9:e1:c1:3f:e4:ab:d8:dc:36:4d:d0:53:6b:1a:53:50:ac:
59:b7:9d:ca:f5:db:08:f7:65:00:5c:1e:61:ff:db:1d:ee:d8:
0d:21:df:7b:2a:87:e5:1d:e3:a7:69:56:b4:94:73:fe:83:27:
09:40:ee:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:46:11 2026 by rpki-client