Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS16276.roa
File: AS16276.roa (raw, json)
Hash identifier: JKm79zmzL02+eeN7MvI4Qe0ZYcDtkkiZ9xoXJ++T+9U=
Subject key identifier: 4E:49:75:66:F7:E2:9F:AF:F5:B5:D0:7A:87:AF:6A:51:98:8B:5F:E3
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 7E25ED0AD562F6133DDBDB17ED3BCB336E7A7660
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS16276.roa
Signing time: Sun 20 Sep 2026 15:27:54 +0000
ROA not before: Sun 20 Sep 2026 15:22:54 +0000
ROA not after: Sun 19 Sep 2027 15:27:54 +0000
asID: 16276
IP address blocks: 46.202.232.0/22 maxlen: 24
46.202.240.0/22 maxlen: 24
46.203.108.0/22 maxlen: 24
46.203.116.0/22 maxlen: 24
46.203.128.0/22 maxlen: 24
46.203.140.0/22 maxlen: 24
92.113.13.0/24 maxlen: 24
95.135.166.0/24 maxlen: 24
95.135.167.0/24 maxlen: 24
178.92.111.0/24 maxlen: 24
178.92.120.0/24 maxlen: 24
178.93.247.0/24 maxlen: 24
178.94.22.0/24 maxlen: 24
178.94.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:25:ed:0a:d5:62:f6:13:3d:db:db:17:ed:3b:cb:33:6e:7a:76:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 20 15:22:54 2026 GMT
Not After : Sep 19 15:27:54 2027 GMT
Subject: CN=4E497566F7E29FAFF5B5D07A87AF6A51988B5FE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c3:ab:73:90:22:b8:26:e4:09:a7:44:fa:45:
72:8f:c7:10:4d:b6:a4:74:75:30:1e:5b:bf:5c:eb:
22:05:90:79:53:ff:d8:05:10:26:33:36:ce:5e:d4:
c1:f6:bd:a6:29:c7:d2:56:a0:34:36:bb:25:58:eb:
a7:7a:b5:30:ff:62:eb:a5:91:07:cc:d3:5c:09:df:
ed:3a:8d:9f:c3:53:6e:25:a8:be:8c:1d:8e:95:d3:
c2:b7:c0:1f:1c:ee:9c:b1:9f:3e:8e:15:b8:42:71:
df:d8:3a:97:50:a1:4c:05:4f:a7:38:a1:86:89:1c:
c0:d9:80:6b:9d:ef:00:b4:1e:eb:8b:00:3e:39:cc:
cb:96:39:b2:f9:50:61:6e:92:ab:de:40:bf:c8:c7:
33:99:b8:e2:63:4d:14:d4:0b:16:3e:06:9c:9b:2c:
ab:ba:d1:83:86:e1:94:24:2d:98:22:45:90:3c:fa:
9f:71:4c:55:43:5b:55:64:85:2a:17:6a:51:24:9f:
7c:dd:68:b9:f4:1f:be:08:58:b4:9e:9a:e8:66:ef:
a5:dd:52:03:4d:0d:30:c0:72:aa:e9:e9:0d:78:db:
dc:e9:77:66:39:83:46:c8:67:f3:2b:f4:a9:84:c0:
e2:3f:7e:8b:28:56:58:86:e2:92:3b:34:a0:4a:0a:
d3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:49:75:66:F7:E2:9F:AF:F5:B5:D0:7A:87:AF:6A:51:98:8B:5F:E3
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS16276.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.232.0/22
46.202.240.0/22
46.203.108.0/22
46.203.116.0/22
46.203.128.0/22
46.203.140.0/22
92.113.13.0/24
95.135.166.0/23
178.92.111.0/24
178.92.120.0/24
178.93.247.0/24
178.94.22.0/24
178.94.251.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:bd:e1:13:3a:e3:11:b9:d8:e8:cd:c9:25:0b:fd:84:68:b3:
b6:b4:36:5c:e4:10:34:e2:e7:11:4a:00:60:9d:95:ba:4a:be:
fd:f2:2c:99:8e:6c:ec:89:ec:5f:ec:9f:cd:4a:76:7f:95:8c:
98:dd:2e:48:1b:a0:37:24:8f:15:f1:be:d4:f7:87:0a:ab:52:
1f:b1:e6:21:59:39:12:c0:19:e6:35:9c:53:fa:31:cb:30:cd:
72:10:8f:be:4d:3a:96:6b:0e:08:00:c2:fd:f6:2a:86:00:03:
33:e8:75:09:03:e8:b7:58:44:cc:80:7f:8f:ef:45:58:27:4f:
13:00:ac:25:08:0f:a8:08:22:38:9f:28:8e:54:14:15:0c:1c:
2d:8e:5e:a1:85:d7:77:12:f2:c4:70:e7:13:db:a3:b5:5f:76:
fc:c1:24:72:8c:97:7e:e7:79:67:73:de:9d:b0:e3:0d:c2:6f:
93:bf:ac:ef:85:33:47:db:76:dd:3d:0c:16:b7:50:1e:63:e4:
87:49:f7:73:51:82:d4:6b:31:60:c9:bf:34:bb:da:a1:7e:1e:
5f:ca:eb:83:e2:7a:a2:33:67:5b:a1:09:d3:a3:fb:6d:89:8a:
c5:2c:69:7a:f9:38:2f:0b:2c:be:42:41:05:98:2a:ff:15:a9:
64:2a:f4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 04:59:05 2026 by rpki-client