Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS16276.roa
File: AS16276.roa (raw, json)
Hash identifier: I45oxsAFBOoU52AqiRg7lSrunSpGcFftps4mYW+1Ws0=
Subject key identifier: CA:3D:84:7A:8A:1A:EF:0A:B0:5F:A2:17:7F:A5:9D:64:35:26:87:E7
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 0D8DCA94F01E501C9544A2397F3D1504962A28E3
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS16276.roa
Signing time: Tue 10 Jun 2025 07:14:16 +0000
ROA not before: Tue 10 Jun 2025 07:09:16 +0000
ROA not after: Tue 09 Jun 2026 07:14:16 +0000
asID: 16276
IP address blocks: 141.11.40.0/24 maxlen: 24
141.11.74.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 04:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:8d:ca:94:f0:1e:50:1c:95:44:a2:39:7f:3d:15:04:96:2a:28:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jun 10 07:09:16 2025 GMT
Not After : Jun 9 07:14:16 2026 GMT
Subject: CN=CA3D847A8A1AEF0AB05FA2177FA59D64352687E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:12:b4:b6:47:8e:7a:78:d6:a5:d2:e8:e0:c8:
af:36:10:1c:40:dc:94:e1:c2:7d:7f:94:3f:48:81:
7e:33:1b:70:24:57:58:f0:b4:45:b3:2b:09:68:fb:
76:9a:47:46:b0:93:23:dd:d5:a9:aa:89:1e:10:a4:
9f:6d:34:3b:d5:72:ea:2a:3f:a2:2c:36:98:02:16:
1b:bd:4c:35:2a:3a:67:3c:ff:e3:47:c2:71:5d:7f:
75:a9:93:e0:ee:3c:0c:d1:7c:8f:b3:4d:57:f7:36:
a3:f7:9c:fc:14:fc:fe:59:e2:1f:7c:7f:ee:d3:b9:
12:d9:c6:3a:07:94:12:73:3e:c5:26:8b:23:40:72:
8a:56:bf:19:df:54:cc:77:e4:75:36:d5:96:d1:1d:
1c:d3:6d:04:bb:8f:2f:d0:1f:da:ac:b9:e7:34:f6:
b3:db:1b:28:e8:9c:9b:fb:0c:69:a4:1a:17:fd:c4:
a7:c3:d3:5f:1b:ce:71:cc:ab:85:ed:98:cb:e1:30:
3f:3a:3d:ab:d4:79:27:ad:47:9a:de:9e:6d:57:29:
d2:1c:14:9a:20:41:a5:34:c6:0d:7e:00:43:9e:ce:
3a:a3:b7:06:99:09:ea:fa:65:05:18:8e:a9:8a:c6:
5b:73:11:db:2b:11:a2:56:25:f1:0d:f2:53:fc:f6:
c0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:3D:84:7A:8A:1A:EF:0A:B0:5F:A2:17:7F:A5:9D:64:35:26:87:E7
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS16276.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.40.0/24
141.11.74.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:5e:a7:55:bc:a3:ce:3f:52:f6:96:3f:27:99:ff:99:c4:7c:
e3:ef:86:52:8e:58:d3:a6:91:d4:b5:eb:20:a3:b2:0e:a2:b7:
f0:16:1c:fe:f1:be:ec:d9:33:24:46:67:b1:1f:72:ad:d0:32:
3b:fb:fc:0c:56:ae:6b:1e:74:22:72:40:64:5b:5e:94:e6:b2:
ec:0d:53:86:cb:d0:24:eb:97:bd:8f:7a:46:12:69:c3:f8:71:
92:e9:49:70:20:6a:a5:44:cd:44:df:fc:ae:57:95:49:f1:d8:
e0:90:40:8a:ca:51:da:5c:b3:b8:cc:72:87:e9:64:5a:6b:d1:
85:02:41:8c:b7:05:a7:26:15:56:98:83:1e:7c:da:62:0b:38:
c1:93:89:7c:47:5f:b8:c1:3d:5a:74:e9:db:1f:1f:89:76:7d:
5c:35:91:6a:a6:5f:8a:13:f0:1b:a1:ec:9d:36:2b:6c:16:b6:
33:ff:a2:92:54:3c:86:97:7e:33:5f:1f:85:e5:15:1b:fe:c5:
1c:30:6b:7d:d5:d5:de:2b:9e:2e:8d:c9:98:e7:27:19:66:e8:
23:09:14:b8:cd:ca:02:5f:5f:ae:30:87:ce:bf:50:4a:7b:ce:
00:ec:b4:5c:ec:97:6c:d8:b3:09:37:bc:2a:c3:ca:f5:4a:36:
bf:c2:5c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:35:56 2025 by rpki-client