Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS16276.roa
File: AS16276.roa (raw, json)
Hash identifier: GXC5UjMrMHPgOHzJ8ysA8MjbTU1MHWnuP02KOMK2OYw=
Subject key identifier: 47:E8:49:FE:2A:93:A7:9F:FC:A5:A7:F1:3F:F5:C3:AC:06:69:8E:46
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 423749DB006C5410E5F59AF347866AC95A2749ED
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS16276.roa
Signing time: Mon 02 Nov 2026 10:07:10 +0000
ROA not before: Mon 02 Nov 2026 10:02:10 +0000
ROA not after: Mon 01 Nov 2027 10:07:10 +0000
asID: 16276
IP address blocks: 46.202.240.0/22 maxlen: 24
46.203.116.0/22 maxlen: 24
92.113.13.0/24 maxlen: 24
95.135.166.0/24 maxlen: 24
95.135.167.0/24 maxlen: 24
178.92.120.0/24 maxlen: 24
178.93.247.0/24 maxlen: 24
178.94.22.0/24 maxlen: 24
178.94.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 04:36:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:37:49:db:00:6c:54:10:e5:f5:9a:f3:47:86:6a:c9:5a:27:49:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Nov 2 10:02:10 2026 GMT
Not After : Nov 1 10:07:10 2027 GMT
Subject: CN=47E849FE2A93A79FFCA5A7F13FF5C3AC06698E46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ba:f4:fa:32:b6:a4:63:e3:fb:93:9d:85:73:
5c:2d:e5:b6:d9:a3:5a:65:03:40:32:f9:70:f2:b7:
aa:a5:4e:ea:8d:ad:6d:aa:38:8b:ee:07:2a:47:a2:
c2:51:50:22:d5:8a:0a:29:8b:4e:f3:34:71:d0:58:
3e:aa:72:ba:8f:15:6d:89:98:58:94:69:a5:02:91:
68:f9:d2:ae:58:ec:01:2e:d2:f4:53:08:15:13:f2:
66:8f:9b:65:03:24:14:b1:d0:04:b9:b1:57:1f:7c:
9f:bf:af:cf:ac:6f:09:ae:a9:d3:6b:e7:bd:b1:da:
21:8b:cf:42:ad:2b:a9:58:70:b9:37:21:94:f4:4f:
8d:d8:da:30:f8:79:d5:69:a7:21:d6:8b:88:3c:c4:
56:36:5a:26:95:3e:1d:11:40:cb:83:b8:8b:5e:e2:
b9:7d:6f:f9:b5:ea:6d:b7:69:4e:7b:ed:af:d6:51:
2c:0d:ad:9d:e8:9d:3a:21:57:da:aa:6d:70:78:4c:
ed:15:71:18:94:88:0f:2b:05:4b:4a:62:89:4d:3e:
13:d6:8a:80:8b:23:ec:d2:46:39:52:2e:71:1f:ca:
0d:1d:17:da:e5:87:59:a3:28:f5:6e:b2:9e:7f:14:
48:f3:c9:20:52:08:b7:15:fb:94:fb:f1:05:da:e2:
4a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E8:49:FE:2A:93:A7:9F:FC:A5:A7:F1:3F:F5:C3:AC:06:69:8E:46
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS16276.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.240.0/22
46.203.116.0/22
92.113.13.0/24
95.135.166.0/23
178.92.120.0/24
178.93.247.0/24
178.94.22.0/24
178.94.251.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:a8:97:35:53:19:db:88:12:3d:fd:bc:50:78:89:e9:3c:fa:
2b:3a:b0:c4:e0:13:b1:ce:e0:db:45:ca:87:a1:10:16:f2:3b:
0e:5a:88:60:0b:78:ec:11:90:89:9f:24:6f:35:a4:e9:ef:88:
ca:1d:0c:54:8e:8e:4c:5b:6f:e8:ba:5e:29:07:46:08:46:d8:
b0:b6:12:0a:9a:14:82:e2:91:d1:c5:fd:c5:aa:5f:11:34:8f:
8d:3f:ab:50:8c:d7:25:3d:83:4d:1e:35:3d:3a:35:fc:6a:bf:
be:a4:c2:cc:d0:d2:3d:96:f9:bc:2e:20:a2:51:73:7b:e2:06:
51:7e:7b:d8:6c:af:c0:cc:da:2b:9c:4a:5d:9c:ea:30:ff:91:
2b:ac:2b:83:70:8f:f9:44:b4:6c:c9:a9:5c:a4:de:d3:e5:9d:
22:44:c1:91:ea:90:0c:65:25:9d:99:2b:c2:1b:fc:57:0b:43:
12:a8:e3:79:dd:19:6e:93:9d:23:b5:3a:62:db:fa:d2:db:cb:
1f:35:5e:e8:9a:c2:e2:59:44:84:f3:96:b6:39:54:6c:83:88:
51:8d:82:bb:d6:54:16:3b:bb:e3:3f:bd:44:64:2e:8c:09:3b:
ff:2d:d6:6a:49:32:3b:32:66:df:ec:02:3a:31:30:b1:bb:7e:
ac:53:8c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 15:13:54 2026 by rpki-client