Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS16276.roa
File: AS16276.roa (raw, json)
Hash identifier: EKpXTe4ys8FkDLvAjnRFYuDnQiF1p8xjjP1Ye2+AROI=
Subject key identifier: 6A:B8:A9:66:4C:0B:E2:83:46:88:EB:EE:4C:8F:4E:A1:6D:17:63:ED
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 326986EB41A905191D7B346804AF322049BC427B
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS16276.roa
Signing time: Tue 10 Mar 2026 12:06:08 +0000
ROA not before: Tue 10 Mar 2026 12:01:08 +0000
ROA not after: Tue 09 Mar 2027 12:06:08 +0000
asID: 16276
IP address blocks: 46.236.211.0/24 maxlen: 24
46.236.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 13:20:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:69:86:eb:41:a9:05:19:1d:7b:34:68:04:af:32:20:49:bc:42:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Mar 10 12:01:08 2026 GMT
Not After : Mar 9 12:06:08 2027 GMT
Subject: CN=6AB8A9664C0BE2834688EBEE4C8F4EA16D1763ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b5:77:af:39:3e:a5:b8:14:86:07:53:c6:11:
64:2a:02:38:2c:c7:b8:07:26:4a:a8:fe:af:7f:f8:
f8:e4:b8:3b:64:e2:d8:ec:90:1b:8b:e9:dd:ce:05:
48:46:df:eb:eb:c9:73:f6:02:f9:09:03:75:71:41:
d5:d4:13:6e:fc:b7:65:54:78:21:ce:a1:07:82:5f:
74:51:be:d0:92:a6:cc:20:c9:07:8c:78:b9:f0:e4:
f8:07:d3:4d:f5:8b:84:cf:d1:76:65:93:11:2a:e5:
e7:1d:d7:af:05:68:80:ed:4f:ef:7a:a8:fc:b3:0b:
9a:77:7c:7f:25:52:e3:eb:ea:50:d5:98:d9:3a:9e:
d5:db:db:0c:c2:5a:c4:7c:e8:25:21:92:9b:29:a1:
05:9f:56:03:7f:f9:f4:f8:36:70:50:ef:f3:c9:7d:
0e:15:ef:f4:22:d1:f1:6c:b2:dc:8c:e2:76:fc:70:
73:1f:86:12:fe:19:1d:37:db:40:b4:b4:34:d3:b2:
13:d5:92:af:bd:e3:9f:58:70:c9:80:86:0e:34:92:
d8:47:d9:c1:ee:5c:53:c7:a9:72:fb:ea:3b:6d:06:
6b:b6:fe:cb:46:f5:ff:12:65:0d:10:de:b1:06:7c:
68:cf:88:ad:78:94:82:ee:84:58:6e:ed:85:03:c2:
cd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B8:A9:66:4C:0B:E2:83:46:88:EB:EE:4C:8F:4E:A1:6D:17:63:ED
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS16276.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.211.0/24
46.236.217.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:7d:2e:3b:70:0c:60:c1:d3:32:a5:90:32:7c:b3:f0:e4:70:
1b:c4:95:b2:a3:bb:f6:36:3d:2e:10:d9:48:f6:d9:8a:d5:3f:
45:64:e8:d5:55:b6:8b:a6:29:db:80:73:3c:61:0c:1b:be:16:
77:90:29:e2:4e:97:16:0f:5b:1d:60:4c:29:bb:19:a6:52:f9:
bf:63:97:ee:e4:64:05:3a:a9:e1:75:84:f4:9b:98:a2:99:60:
c2:03:55:f3:55:0d:9d:e6:8d:46:3f:6e:1a:54:6c:33:7d:35:
78:3c:27:4a:6d:88:23:48:1c:be:df:9b:40:02:7d:2c:ef:6f:
1d:0d:ac:e4:7c:8b:25:2f:9a:e4:6b:f5:22:5b:59:6d:cb:78:
76:1d:94:4a:c0:e3:24:43:05:83:13:b1:6a:4a:b9:9a:0a:11:
07:b0:8c:66:31:16:3f:2a:de:ba:8d:21:b7:13:4e:e2:5a:df:
13:68:dd:18:02:7b:ad:9b:8c:53:99:83:80:10:d3:a6:33:78:
df:52:96:d2:59:d9:ee:59:16:53:17:db:72:65:90:e3:16:af:
18:8d:5b:f3:9a:0a:ef:41:84:28:7d:f6:62:d2:37:3b:67:59:
92:c5:54:e1:be:e9:fc:8e:e4:4f:7e:24:d5:13:a4:d0:ee:49:
67:3b:43:83
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUMmmG60GpBRkdezRoBK8yIEm8QnswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2ZlY2NiMTdiZTUxZWU1OWVjNzRkNjRlZWQ5MTdlMjIx
ZWUyOGExYjAeFw0yNjAzMTAxMjAxMDhaFw0yNzAzMDkxMjA2MDhaMDMxMTAvBgNV
BAMTKDZBQjhBOTY2NEMwQkUyODM0Njg4RUJFRTRDOEY0RUExNkQxNzYzRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwtXevOT6luBSGB1PGEWQqAjgs
x7gHJkqo/q9/+PjkuDtk4tjskBuL6d3OBUhG3+vryXP2AvkJA3VxQdXUE278t2VU
eCHOoQeCX3RRvtCSpswgyQeMeLnw5PgH0031i4TP0XZlkxEq5ecd168FaIDtT+96
qPyzC5p3fH8lUuPr6lDVmNk6ntXb2wzCWsR86CUhkpspoQWfVgN/+fT4NnBQ7/PJ
fQ4V7/Qi0fFsstyM4nb8cHMfhhL+GR0320C0tDTTshPVkq+9459YcMmAhg40kthH
2cHuXFPHqXL76jttBmu2/stG9f8SZQ0Q3rEGfGjPiK14lILuhFhu7YUDws2ZAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUaripZkwL4oNGiOvuTI9OoW0XY+0wHwYDVR0j
BBgwFoAUP+zLF75R7lnsdNZO7ZF+Ih7iihswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUtOWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1
NGJjLzAvM0ZFQ0NCMTdCRTUxRUU1OUVDNzRENjRFRUQ5MTdFMjIxRUUyOEExQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1AtekxGNzVSN2xuc2ROWk83WkYtSWg3
aWlocy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIyZGI3NTU1LTlhYTQt
NDk4My05MzE2LTczODA5ZGQzNTRiYy8wL0FTMTYyNzYucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAAu7NMD
BAAu7NkwDQYJKoZIhvcNAQELBQADggEBAD99LjtwDGDB0zKlkDJ8s/DkcBvElbKj
u/Y2PS4Q2Uj22YrVP0Vk6NVVtoumKduAczxhDBu+FneQKeJOlxYPWx1gTCm7GaZS
+b9jl+7kZAU6qeF1hPSbmKKZYMIDVfNVDZ3mjUY/bhpUbDN9NXg8J0ptiCNIHL7f
m0ACfSzvbx0NrOR8iyUvmuRr9SJbWW3LeHYdlErA4yRDBYMTsWpKuZoKEQewjGYx
Fj8q3rqNIbcTTuJa3xNo3RgCe62bjFOZg4AQ06YzeN9SltJZ2e5ZFlMX23JlkOMW
rxiNW/OaCu9BhCh99mLSNztnWZLFVOG+6fyO5E9+JNUTpNDuSWc7Q4M=
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:48:03 2026 by rpki-client