Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS16276.roa
File: AS16276.roa (raw, json)
Hash identifier: ArERHbGrnEKyH4kUgZopuTq/TFEwIZHTL/YEMrh+NdI=
Subject key identifier: 29:B2:CD:3C:DF:79:93:43:35:89:22:75:8C:78:45:BD:54:B8:91:13
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 1B4D9B2D1E38363DBC1724B0372C8F88C576BF8D
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS16276.roa
Signing time: Sat 14 Feb 2026 10:54:50 +0000
ROA not before: Sat 14 Feb 2026 10:49:50 +0000
ROA not after: Sat 13 Feb 2027 10:54:50 +0000
asID: 16276
IP address blocks: 141.11.18.0/24 maxlen: 24
141.11.31.0/24 maxlen: 24
141.11.39.0/24 maxlen: 24
141.11.40.0/24 maxlen: 24
141.11.49.0/24 maxlen: 24
141.11.74.0/23 maxlen: 23
141.11.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 04:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:4d:9b:2d:1e:38:36:3d:bc:17:24:b0:37:2c:8f:88:c5:76:bf:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Feb 14 10:49:50 2026 GMT
Not After : Feb 13 10:54:50 2027 GMT
Subject: CN=29B2CD3CDF799343358922758C7845BD54B89113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:da:32:01:8e:6d:41:6f:7e:2a:f4:29:c2:5c:
0e:f8:1f:01:f1:6d:2d:36:6e:4a:52:14:19:4f:bf:
40:70:be:7e:3d:f9:5f:6f:fe:3c:a7:b0:96:a9:57:
b9:a0:fe:65:87:f5:ef:f8:9f:a8:b9:7f:0d:24:f0:
31:e6:8e:be:31:48:2b:00:bc:f2:48:4c:df:1e:dc:
88:aa:2f:b8:f4:6a:e8:8e:44:0b:5e:e8:4d:4f:37:
f5:6c:1c:d6:f9:3d:ad:0e:7b:e1:aa:cc:e9:9a:9d:
23:e4:72:1c:e7:4c:c0:07:e2:22:36:6e:02:1a:a8:
b5:57:e9:6f:4e:2e:0d:df:8e:04:7e:d5:0a:df:5e:
c7:8d:83:b3:d0:32:69:3d:90:13:35:90:aa:ec:33:
4f:92:46:d1:83:a7:a8:30:04:8e:52:5f:c8:e6:5d:
11:6e:24:73:75:ea:54:b1:29:1e:e2:d8:0e:02:bf:
c1:1c:50:a5:5c:6f:45:67:36:26:99:1b:2a:7b:4f:
a3:2f:23:e0:ba:dd:2e:26:46:52:f1:51:d9:3f:d5:
e1:66:0a:49:6a:85:0e:fb:d5:0d:fe:bf:8e:14:b0:
a4:48:e1:42:e7:be:df:51:e3:a4:68:0d:74:94:73:
7d:ab:68:96:a0:33:3d:3f:10:2b:d6:d6:87:e4:8b:
1c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B2:CD:3C:DF:79:93:43:35:89:22:75:8C:78:45:BD:54:B8:91:13
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS16276.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.18.0/24
141.11.31.0/24
141.11.39.0-141.11.40.255
141.11.49.0/24
141.11.74.0/23
141.11.79.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:26:c6:0e:b8:6b:29:ed:01:41:4d:30:65:02:ea:ee:cb:5a:
b4:f6:f5:96:70:29:0e:bc:a3:09:cc:53:95:8b:02:c6:ca:1e:
84:4c:bf:6b:73:4c:c5:39:c0:e7:ce:3f:fe:f7:b1:dd:f3:01:
08:12:19:59:6b:e3:5b:bc:04:21:2c:78:bc:8d:f9:b6:f3:04:
5b:f8:eb:02:2c:d7:62:d1:5d:82:c6:9a:de:15:1f:b3:15:d6:
e2:d8:6b:ce:a2:11:d7:f5:ef:a3:a1:2c:71:a8:ea:f6:1b:b5:
d2:fc:71:08:9d:ed:70:d6:f5:89:72:d7:7b:7f:c1:2d:3d:ff:
e2:f8:42:4f:db:7a:83:e4:22:19:e2:b4:75:81:97:1c:fa:05:
f3:fd:9d:e4:32:7c:d6:dc:b6:a6:ca:8d:1d:49:3a:cf:64:1e:
bf:8e:a3:4b:17:78:82:df:7a:16:fe:41:17:85:5e:c1:0c:5a:
5e:3f:fc:83:62:d6:41:71:a2:d0:0f:6f:e3:59:6c:ca:e7:dd:
fd:00:39:7b:d6:a9:dc:61:d6:09:ac:5b:56:1e:41:e8:02:73:
f5:7d:8f:9a:2b:10:2c:ce:35:6d:84:2b:93:1e:a3:4b:66:54:
05:17:77:b4:2a:64:f4:81:6c:5a:82:02:4c:7f:37:cc:3c:18:
86:3c:6b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:45:14 2026 by rpki-client