Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS16276.roa
File: AS16276.roa (raw, json)
Hash identifier: n+D7Hqr4E/uDhV0tvg+4VnDvsppCprGFLrMx4eH/n20=
Subject key identifier: 2F:A0:00:C0:D7:8A:4C:AC:27:19:81:03:F7:06:70:D1:94:2C:4E:6A
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 729E0E318E4E5B346E7132C81D1B43DF55C39B0C
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS16276.roa
Signing time: Fri 24 Jul 2026 11:14:13 +0000
ROA not before: Fri 24 Jul 2026 11:09:13 +0000
ROA not after: Fri 23 Jul 2027 11:14:13 +0000
asID: 16276
IP address blocks: 82.21.139.0/24 maxlen: 24
82.22.15.0/24 maxlen: 24
82.22.18.0/24 maxlen: 24
82.22.25.0/24 maxlen: 24
82.22.51.0/24 maxlen: 24
82.22.118.0/24 maxlen: 24
82.24.96.0/22 maxlen: 24
82.24.190.0/24 maxlen: 24
82.25.14.0/24 maxlen: 24
82.25.146.0/23 maxlen: 24
82.26.81.0/24 maxlen: 24
82.26.176.0/21 maxlen: 24
82.26.184.0/21 maxlen: 24
82.27.122.0/24 maxlen: 24
82.29.93.0/24 maxlen: 24
82.29.126.0/24 maxlen: 24
82.38.2.0/24 maxlen: 24
82.38.35.0/24 maxlen: 24
82.38.82.0/24 maxlen: 24
82.38.124.0/22 maxlen: 24
82.38.140.0/22 maxlen: 24
82.38.152.0/22 maxlen: 24
82.38.156.0/22 maxlen: 24
82.38.160.0/22 maxlen: 24
82.38.164.0/22 maxlen: 24
82.38.224.0/22 maxlen: 24
82.38.228.0/22 maxlen: 24
82.38.232.0/22 maxlen: 24
82.38.236.0/22 maxlen: 24
82.38.240.0/22 maxlen: 24
82.38.244.0/22 maxlen: 24
82.38.248.0/22 maxlen: 24
82.38.252.0/22 maxlen: 24
82.39.108.0/24 maxlen: 24
82.39.119.0/24 maxlen: 24
82.39.156.0/22 maxlen: 24
82.39.176.0/22 maxlen: 24
82.39.180.0/22 maxlen: 24
82.39.216.0/22 maxlen: 24
82.39.224.0/22 maxlen: 24
82.40.0.0/22 maxlen: 24
82.40.4.0/22 maxlen: 24
82.40.8.0/22 maxlen: 24
82.40.12.0/22 maxlen: 24
82.40.16.0/22 maxlen: 24
82.41.44.0/22 maxlen: 24
82.41.52.0/22 maxlen: 24
82.41.68.0/22 maxlen: 24
82.41.80.0/22 maxlen: 24
82.41.88.0/22 maxlen: 24
82.41.100.0/22 maxlen: 24
82.41.104.0/22 maxlen: 24
82.41.108.0/22 maxlen: 24
82.41.124.0/22 maxlen: 24
82.41.134.0/24 maxlen: 24
82.41.148.0/22 maxlen: 24
82.41.152.0/22 maxlen: 24
82.41.160.0/22 maxlen: 24
82.41.164.0/22 maxlen: 24
82.41.172.0/22 maxlen: 24
82.41.176.0/22 maxlen: 24
82.41.184.0/22 maxlen: 24
82.41.188.0/22 maxlen: 24
82.41.204.0/22 maxlen: 24
82.41.212.0/22 maxlen: 24
82.41.224.0/22 maxlen: 24
82.41.228.0/22 maxlen: 24
82.47.36.0/23 maxlen: 23
82.47.63.0/24 maxlen: 24
82.47.98.0/24 maxlen: 24
84.75.33.0/24 maxlen: 24
178.83.45.0/24 maxlen: 24
178.83.46.0/24 maxlen: 24
2a13:9500:138::/48 maxlen: 48
2a13:9500:143::/48 maxlen: 48
2a13:9500:166::/48 maxlen: 48
2a13:9500:18e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:9e:0e:31:8e:4e:5b:34:6e:71:32:c8:1d:1b:43:df:55:c3:9b:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 24 11:09:13 2026 GMT
Not After : Jul 23 11:14:13 2027 GMT
Subject: CN=2FA000C0D78A4CAC27198103F70670D1942C4E6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1b:3f:a4:29:a9:c3:4f:71:cd:12:f6:fd:c3:
23:65:4a:39:4f:3a:0d:75:8a:2c:44:93:3f:31:21:
d0:e6:9c:58:0c:de:97:85:44:8a:13:2b:4a:fe:26:
cc:36:b3:95:bd:84:47:ed:31:bd:de:31:ab:18:6c:
33:0b:89:9d:cc:6a:2d:2c:09:ed:83:69:84:79:97:
98:e2:8e:41:e3:d8:24:2d:23:e6:b5:32:fd:04:f1:
c9:64:6a:b8:dc:8c:68:9d:a2:30:61:6e:1b:a1:3f:
16:6a:58:e2:62:fc:83:e6:59:67:98:45:4b:e4:27:
09:17:d5:38:9d:50:de:d0:f7:93:b1:61:e8:7a:88:
13:d9:63:d7:69:df:95:7a:2e:13:b7:a9:40:82:05:
ee:ab:6c:e5:d2:1b:b2:8e:1b:7d:d1:cb:dd:05:1c:
4d:cb:9a:52:57:25:7f:b8:99:1e:f7:8a:c6:fd:ee:
2b:67:aa:55:af:33:63:13:e8:17:7f:86:3b:d3:06:
9c:11:20:60:c7:49:47:33:22:11:61:3d:b3:ba:77:
a7:db:ff:de:95:b5:6c:59:42:43:23:c1:76:08:e8:
17:df:e1:03:ee:22:54:40:b6:1f:80:42:6c:87:3e:
53:78:42:3a:70:d2:83:01:88:e2:bc:73:dd:20:91:
45:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A0:00:C0:D7:8A:4C:AC:27:19:81:03:F7:06:70:D1:94:2C:4E:6A
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS16276.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.139.0/24
82.22.15.0/24
82.22.18.0/24
82.22.25.0/24
82.22.51.0/24
82.22.118.0/24
82.24.96.0/22
82.24.190.0/24
82.25.14.0/24
82.25.146.0/23
82.26.81.0/24
82.26.176.0/20
82.27.122.0/24
82.29.93.0/24
82.29.126.0/24
82.38.2.0/24
82.38.35.0/24
82.38.82.0/24
82.38.124.0/22
82.38.140.0/22
82.38.152.0-82.38.167.255
82.38.224.0/19
82.39.108.0/24
82.39.119.0/24
82.39.156.0/22
82.39.176.0/21
82.39.216.0/22
82.39.224.0/22
82.40.0.0-82.40.19.255
82.41.44.0/22
82.41.52.0/22
82.41.68.0/22
82.41.80.0/22
82.41.88.0/22
82.41.100.0-82.41.111.255
82.41.124.0/22
82.41.134.0/24
82.41.148.0-82.41.155.255
82.41.160.0/21
82.41.172.0-82.41.179.255
82.41.184.0/21
82.41.204.0/22
82.41.212.0/22
82.41.224.0/21
82.47.36.0/23
82.47.63.0/24
82.47.98.0/24
84.75.33.0/24
178.83.45.0-178.83.46.255
IPv6:
2a13:9500:138::/48
2a13:9500:143::/48
2a13:9500:166::/48
2a13:9500:18e::/48
Signature Algorithm: sha256WithRSAEncryption
1f:99:97:df:e0:b3:17:78:6d:59:a3:a6:b2:31:0d:db:1e:be:
aa:ea:d4:3d:6b:14:46:e3:2f:b7:f3:a8:88:7d:bc:f4:f6:d2:
e9:0d:13:6d:64:46:3b:63:12:c5:f1:bc:f1:60:73:14:6e:08:
7b:e3:4f:0d:aa:46:a2:6b:e4:f9:9f:6d:d5:48:a1:6b:52:a1:
5b:7b:26:99:8f:fd:27:14:28:e5:28:b2:b3:4c:30:6c:1f:72:
40:99:08:1c:fb:02:59:24:e3:bb:6f:f4:87:14:cb:4b:e7:fe:
77:40:0d:42:74:8b:04:b0:cc:9c:da:4c:0b:49:57:fa:81:25:
73:d6:30:90:84:91:36:6d:6e:da:58:15:b5:24:5a:7a:b1:4c:
aa:d7:87:5b:c3:3c:84:ac:6e:35:10:03:81:9d:fc:b1:83:98:
7f:da:47:2a:0a:bb:2f:3c:3d:8c:0a:e2:95:df:07:96:c7:73:
2c:e3:60:2d:ee:13:7c:2b:2c:c1:3b:ee:0a:de:e3:d6:2d:e1:
b0:e4:99:55:fd:06:cb:d4:3d:98:16:97:32:d8:75:e9:fe:46:
e1:69:ef:f7:06:e6:a7:7e:b6:54:62:9b:03:d4:6b:60:59:66:
60:97:c8:06:fd:96:0f:10:3d:11:35:cf:63:5d:b0:ec:60:e5:
bc:33:b9:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:19:27 2026 by rpki-client