Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS16276.roa
File: AS16276.roa (raw, json)
Hash identifier: zu3ml6ZfajGx7AoDCANIjF68KhNQeRdXxY8h2J6Dlis=
Subject key identifier: 69:A8:5C:38:04:1D:13:80:76:24:B1:2D:C3:70:46:5C:25:4E:7B:76
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 68E0641C4C30185CF6008ABBB2AF577EC7A8ADDF
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS16276.roa
Signing time: Sat 11 Oct 2025 10:16:42 +0000
ROA not before: Sat 11 Oct 2025 10:11:42 +0000
ROA not after: Sat 10 Oct 2026 10:16:42 +0000
asID: 16276
IP address blocks: 46.236.211.0/24 maxlen: 24
46.236.212.0/24 maxlen: 24
46.236.214.0/24 maxlen: 24
82.139.208.0/24 maxlen: 24
82.139.215.0/24 maxlen: 24
82.139.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:e0:64:1c:4c:30:18:5c:f6:00:8a:bb:b2:af:57:7e:c7:a8:ad:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Oct 11 10:11:42 2025 GMT
Not After : Oct 10 10:16:42 2026 GMT
Subject: CN=69A85C38041D13807624B12DC370465C254E7B76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:df:eb:c3:cd:6c:0a:f4:45:79:a8:52:2d:1f:
ab:5a:13:89:b4:34:8a:77:64:d6:f9:a8:60:4b:45:
28:a9:9c:5a:37:1d:65:7a:a7:2c:6f:c3:cd:b5:34:
2a:78:56:35:28:f3:5a:21:65:75:44:e0:53:0b:3b:
5a:4a:ae:b8:f8:4c:af:07:3b:10:dc:c7:ea:65:a5:
1a:f6:6b:42:b3:5c:e0:0e:f0:79:a5:6f:0b:25:a7:
7c:38:1c:ae:e4:11:9f:46:fd:20:e3:09:12:94:7b:
c4:38:77:a4:f4:de:b1:bf:c8:82:ef:d4:d9:b6:88:
1a:a0:a2:f9:6a:35:55:0e:0f:3a:18:d0:2c:53:74:
be:63:56:17:55:c6:fb:e9:46:25:2f:a2:92:1c:cd:
e9:31:91:aa:ad:a1:6c:4c:c0:d2:2e:2f:39:a8:1f:
ca:35:32:30:d6:8b:cf:95:0a:94:ee:ad:d3:01:b2:
38:69:1d:bb:21:44:11:a3:af:00:6d:d0:bc:4d:26:
2f:ea:34:32:b4:17:15:c5:3d:af:22:7f:d8:71:0d:
ee:cb:f6:f3:3c:8e:d7:21:f9:dc:b5:8e:90:69:32:
71:a0:a3:68:20:4c:6e:a1:ce:43:0e:18:79:31:87:
88:7f:6e:81:cc:a9:a2:88:35:c4:7d:cb:ea:eb:44:
fc:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A8:5C:38:04:1D:13:80:76:24:B1:2D:C3:70:46:5C:25:4E:7B:76
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS16276.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.211.0-46.236.212.255
46.236.214.0/24
82.139.208.0/24
82.139.215.0/24
82.139.245.0/24
Signature Algorithm: sha256WithRSAEncryption
10:d9:ec:49:cb:d6:08:2f:29:1c:22:65:38:3f:a8:3e:65:c2:
45:c7:6d:df:af:56:7f:94:12:e0:42:1c:45:dc:26:16:d4:0d:
e9:36:a4:56:13:a6:a0:aa:83:01:a4:b7:90:56:34:5b:1c:7a:
88:ea:3d:ea:33:39:d3:e5:6f:a6:4c:4c:68:92:2c:3c:de:a0:
17:f9:ca:ea:ab:9a:22:9e:cf:63:8c:9f:3b:5e:3f:20:59:40:
84:af:98:95:0b:c4:92:2d:82:fe:53:df:25:fe:75:7b:bc:c8:
96:3e:40:49:95:6b:14:13:25:6f:0d:3b:21:73:39:b1:34:1a:
5a:e5:5c:32:04:19:01:d2:38:31:7a:bd:4f:b0:bf:b1:68:eb:
45:ed:8a:0a:35:af:3d:cf:b8:3f:f3:32:b2:05:f8:5a:ad:de:
00:0b:5f:da:d1:0c:ab:1e:9e:14:1b:bb:8a:bc:f2:fb:9f:36:
45:90:f0:fe:90:64:bd:01:e4:35:3a:22:7b:59:53:ae:1d:ef:
5b:35:46:58:31:e1:80:17:bb:47:6a:80:81:ce:15:91:f1:e6:
e5:82:85:e7:84:39:f7:f8:d6:4c:8b:b3:6c:99:d3:65:be:9e:
b0:de:f0:e2:65:40:d4:8d:44:f7:98:e6:62:8b:8d:48:35:98:
80:67:68:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:22:41 2025 by rpki-client