Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS16276.roa
File: AS16276.roa (raw, json)
Hash identifier: llCVeATmC4/4RzH4ucyAvDM9o0AQgvEQQOR9Mdj8z8s=
Subject key identifier: 4E:71:2E:EE:38:5D:61:31:FD:FB:AC:A9:83:D4:F2:E1:D7:93:5D:F8
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 086072B36985758C9E2A7D67472F35F8B9472D88
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS16276.roa
Signing time: Mon 13 Jul 2026 17:20:58 +0000
ROA not before: Mon 13 Jul 2026 17:15:58 +0000
ROA not after: Mon 12 Jul 2027 17:20:58 +0000
asID: 16276
IP address blocks: 96.62.105.0/24 maxlen: 24
140.233.177.0/24 maxlen: 24
143.14.59.0/24 maxlen: 24
143.14.231.0/24 maxlen: 24
146.103.10.0/24 maxlen: 24
148.135.192.0/24 maxlen: 24
155.117.5.0/24 maxlen: 24
155.117.6.0/24 maxlen: 24
155.117.13.0/24 maxlen: 24
155.117.127.0/24 maxlen: 24
155.117.197.0/24 maxlen: 24
155.117.233.0/24 maxlen: 24
155.117.234.0/24 maxlen: 24
155.117.248.0/24 maxlen: 24
162.141.71.0/24 maxlen: 24
167.148.125.0/24 maxlen: 24
167.148.193.0/24 maxlen: 24
168.222.43.0/24 maxlen: 24
168.222.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:60:72:b3:69:85:75:8c:9e:2a:7d:67:47:2f:35:f8:b9:47:2d:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 13 17:15:58 2026 GMT
Not After : Jul 12 17:20:58 2027 GMT
Subject: CN=4E712EEE385D6131FDFBACA983D4F2E1D7935DF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1b:af:85:9d:c4:04:ec:5b:1d:43:73:ec:89:
17:94:3f:9b:32:a1:70:e3:60:9a:67:b2:88:1d:31:
70:d6:74:d5:93:4f:d5:cb:18:c1:9d:1c:7d:92:2a:
a1:0b:5e:3b:97:f7:46:d4:12:0c:86:b1:81:0f:c8:
cb:cb:d1:33:cc:2d:23:f2:27:5a:c9:e7:68:ef:9e:
78:54:e7:39:96:f9:f1:1c:8b:b9:f0:c0:39:7a:47:
0c:2d:be:4c:00:28:11:92:ff:ff:7c:26:0d:8d:32:
be:45:53:cf:e1:8e:45:1e:67:bf:49:29:33:40:85:
9f:b3:fc:d1:82:33:cb:7d:fb:40:cf:94:79:4d:cd:
3e:22:fb:83:86:17:d2:12:7d:33:d9:0d:ce:d6:03:
02:00:4f:8e:7a:1d:9a:ab:95:69:56:f5:6f:10:b7:
2b:6d:3d:15:a6:13:f3:dd:72:1d:20:34:df:46:78:
4a:cd:5b:14:a9:1e:4c:2e:28:63:69:5c:1f:83:14:
0b:fe:00:ef:4a:aa:c6:ba:90:53:d5:44:d1:c3:7d:
93:28:d8:92:3a:17:d5:3e:0f:1d:ed:ba:f1:5f:6a:
3b:52:fe:b3:10:f5:d0:75:19:60:f6:29:d6:7c:e4:
1a:ed:cd:4b:d8:04:5e:3b:5c:b1:47:2a:3d:bd:f4:
d7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:71:2E:EE:38:5D:61:31:FD:FB:AC:A9:83:D4:F2:E1:D7:93:5D:F8
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS16276.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.105.0/24
140.233.177.0/24
143.14.59.0/24
143.14.231.0/24
146.103.10.0/24
148.135.192.0/24
155.117.5.0-155.117.6.255
155.117.13.0/24
155.117.127.0/24
155.117.197.0/24
155.117.233.0-155.117.234.255
155.117.248.0/24
162.141.71.0/24
167.148.125.0/24
167.148.193.0/24
168.222.43.0/24
168.222.49.0/24
Signature Algorithm: sha256WithRSAEncryption
40:c4:5f:12:f6:11:b8:31:b6:68:dd:31:bf:c4:1d:93:fb:a0:
a8:76:dd:2a:41:c1:db:54:91:14:40:c1:78:39:90:6c:db:13:
5e:2b:67:36:2d:85:42:30:75:14:93:32:a4:75:ec:ee:db:0a:
e2:cd:99:de:f4:d2:49:16:c4:95:e4:2d:cf:b3:66:65:95:43:
54:99:ca:a1:5a:9b:97:17:f7:b5:fd:ba:96:b7:e1:60:25:c7:
ba:67:9b:d3:72:0c:3e:cc:07:64:d1:b8:41:89:1e:d3:b3:cb:
43:9d:5a:fe:53:a4:d3:b2:f9:ec:5b:28:22:76:74:b3:e0:aa:
7b:f6:d5:58:a5:42:65:a6:29:12:d4:c2:da:85:b7:18:d4:f5:
4b:4d:c4:21:92:d2:56:02:b9:c6:7d:09:82:6b:f0:0d:bf:98:
38:ae:65:4c:20:8e:09:ae:69:e7:86:2e:52:ca:b4:fc:7e:18:
39:82:04:9d:a5:db:37:fa:f8:e8:c0:3c:04:71:e0:5a:f2:9a:
05:e5:dc:31:0c:26:fa:34:e5:c2:7f:54:90:52:eb:f6:1d:57:
64:9d:2e:10:aa:41:4d:40:70:bf:5b:7c:a5:b1:f4:ed:af:aa:
b8:fe:aa:a7:18:58:b2:75:00:3f:cc:c4:74:2a:db:93:cb:86:
90:20:02:a2
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgIUCGBys2mFdYyeKn1nRy81+LlHLYgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA3MTMxNzE1NThaFw0yNzA3MTIxNzIwNThaMDMxMTAvBgNV
BAMTKDRFNzEyRUVFMzg1RDYxMzFGREZCQUNBOTgzRDRGMkUxRDc5MzVERjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuG6+FncQE7FsdQ3PsiReUP5sy
oXDjYJpnsogdMXDWdNWTT9XLGMGdHH2SKqELXjuX90bUEgyGsYEPyMvL0TPMLSPy
J1rJ52jvnnhU5zmW+fEci7nwwDl6RwwtvkwAKBGS//98Jg2NMr5FU8/hjkUeZ79J
KTNAhZ+z/NGCM8t9+0DPlHlNzT4i+4OGF9ISfTPZDc7WAwIAT456HZqrlWlW9W8Q
tyttPRWmE/Pdch0gNN9GeErNWxSpHkwuKGNpXB+DFAv+AO9Kqsa6kFPVRNHDfZMo
2JI6F9U+Dx3tuvFfajtS/rMQ9dB1GWD2KdZ85BrtzUvYBF47XLFHKj299NelAgMB
AAGjggJ7MIICdzAdBgNVHQ4EFgQUTnEu7jhdYTH9+6ypg9Ty4deTXfgwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMTYyNzYucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwgZAGCCsGAQUFBwEHAQH/BIGAMH4wfAQCAAEwdgMEAGA+
aQMEAIzpsQMEAI8OOwMEAI8O5wMEAJJnCgMEAJSHwDAMAwQAm3UFAwQAm3UGAwQA
m3UNAwQAm3V/AwQAm3XFMAwDBACbdekDBACbdeoDBACbdfgDBACijUcDBACnlH0D
BACnlMEDBACo3isDBACo3jEwDQYJKoZIhvcNAQELBQADggEBAEDEXxL2Ebgxtmjd
Mb/EHZP7oKh23SpBwdtUkRRAwXg5kGzbE14rZzYthUIwdRSTMqR17O7bCuLNmd70
0kkWxJXkLc+zZmWVQ1SZyqFam5cX97X9upa34WAlx7pnm9NyDD7MB2TRuEGJHtOz
y0OdWv5TpNOy+exbKCJ2dLPgqnv21VilQmWmKRLUwtqFtxjU9UtNxCGS0lYCucZ9
CYJr8A2/mDiuZUwgjgmuaeeGLlLKtPx+GDmCBJ2l2zf6+OjAPARx4FrymgXl3DEM
Jvo05cJ/VJBS6/YdV2SdLhCqQU1AcL9bfKWx9O2vqrj+qqcYWLJ1AD/MxHQq25PL
hpAgAqI=
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:55:12 2026 by rpki-client