Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS16276.roa
File: AS16276.roa (raw, json)
Hash identifier: XlSOC1nakBo2WgCReDx2KDiVqHjlUqmVZBxi7bhvWqU=
Subject key identifier: 5F:C0:EC:34:EB:80:B5:E5:06:34:1A:AF:DC:B1:8B:60:E1:4E:FA:D4
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 271C45B92A709450971B330E66925362720077FD
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS16276.roa
Signing time: Sun 15 Nov 2026 11:21:09 +0000
ROA not before: Sun 15 Nov 2026 11:16:09 +0000
ROA not after: Sun 14 Nov 2027 11:21:09 +0000
asID: 16276
IP address blocks: 143.20.33.0/24 maxlen: 24
143.20.60.0/24 maxlen: 24
143.20.66.0/24 maxlen: 24
143.20.195.0/24 maxlen: 24
143.20.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:1c:45:b9:2a:70:94:50:97:1b:33:0e:66:92:53:62:72:00:77:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Nov 15 11:16:09 2026 GMT
Not After : Nov 14 11:21:09 2027 GMT
Subject: CN=5FC0EC34EB80B5E506341AAFDCB18B60E14EFAD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e3:99:d8:4c:cb:cf:2b:51:7b:4d:eb:10:66:
a5:f6:7f:c2:f6:c1:84:4e:6c:18:5a:5c:5d:e0:94:
aa:9e:23:54:ef:6e:3c:e1:ca:ed:31:a7:bc:e7:77:
96:c4:ba:17:68:eb:7a:bc:2d:69:2e:8d:70:17:64:
a4:cc:d8:a6:18:54:01:58:f1:8b:84:f7:77:a0:48:
20:8f:04:85:4f:22:25:fb:f0:16:42:f9:f0:f4:ca:
68:3e:a7:ca:1c:5b:ea:2f:ff:49:5f:65:15:19:87:
4a:07:73:f8:64:8f:87:99:86:74:12:a1:ef:33:9b:
60:c9:b9:ee:f2:a1:03:f9:e4:88:e6:ee:d8:5d:87:
c8:07:a9:40:3e:46:a4:a3:c2:e6:5c:06:24:87:af:
6a:f3:56:ac:ca:27:54:a1:f5:3c:c3:76:53:0c:9b:
2c:e6:a1:a2:7b:1c:35:0f:ef:8f:c3:8c:d9:1c:08:
b2:2b:44:4a:c2:a0:2c:86:23:02:93:dd:ae:ec:1d:
72:b0:c9:0c:fa:b5:82:d1:bb:5f:88:a6:71:f1:c2:
7c:b1:10:02:b0:14:76:70:cd:a4:02:9c:1b:b9:64:
91:cd:d2:90:e1:1c:7e:2b:7d:63:15:4f:15:c2:bf:
61:d4:48:de:34:01:68:40:5d:60:83:71:21:61:b3:
d0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C0:EC:34:EB:80:B5:E5:06:34:1A:AF:DC:B1:8B:60:E1:4E:FA:D4
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS16276.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.33.0/24
143.20.60.0/24
143.20.66.0/24
143.20.195.0/24
143.20.215.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:39:0b:cd:b1:41:2e:09:0c:ef:80:53:e4:56:1d:41:a3:62:
fe:25:5b:d8:1d:21:74:77:32:bf:02:05:d4:b6:af:15:a5:e8:
26:70:26:c3:2e:39:1c:d5:54:31:8f:51:7b:eb:86:59:55:e6:
20:3b:91:18:fd:db:d7:90:32:85:d2:b3:eb:fc:62:42:0e:9a:
c5:c0:fd:6a:b3:b0:b4:20:57:55:17:02:dd:a5:fa:4b:9c:ea:
e4:84:b3:3e:1c:9c:0e:af:e6:c3:1e:88:b0:d5:22:b4:15:63:
b3:3a:4a:6d:6b:6c:a8:0e:69:85:ee:7b:c7:17:ab:37:bc:97:
97:65:44:1a:62:6a:bf:0f:00:e9:d5:f7:54:2e:d8:e4:87:b9:
3a:23:d0:1b:e3:4d:ed:32:97:b5:d4:be:ff:c9:0b:92:df:d3:
4e:a9:af:df:d3:e3:ce:42:98:66:30:83:f4:7a:71:b3:06:92:
bf:31:1a:b9:35:a8:11:3f:0d:46:ef:ad:e4:75:63:35:02:95:
bf:bd:79:21:24:7e:01:87:01:a6:5a:d4:a4:09:72:29:0b:5d:
c3:83:35:38:4e:4d:07:9a:af:04:aa:dd:3b:98:7e:3e:18:9f:
76:66:bd:93:6f:b9:ef:8e:04:ea:10:fb:f5:b1:06:b0:4b:aa:
6e:58:6c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:00:35 2026 by rpki-client