Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS16276.roa
File: AS16276.roa (raw, json)
Hash identifier: 5fc3YDS1t1DQ0ea8j3pBj0prG13whnhehGdazhk1YL0=
Subject key identifier: 7F:A1:2A:51:B3:2D:4A:F0:98:DE:E6:37:A3:17:E2:91:16:59:83:70
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 5DC557CCCC5809473015D124F396F93EFE3384A5
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS16276.roa
Signing time: Tue 10 Nov 2026 10:02:57 +0000
ROA not before: Tue 10 Nov 2026 09:57:57 +0000
ROA not after: Tue 09 Nov 2027 10:02:57 +0000
asID: 16276
IP address blocks: 82.21.139.0/24 maxlen: 24
82.22.51.0/24 maxlen: 24
82.22.118.0/24 maxlen: 24
82.24.96.0/22 maxlen: 24
82.24.190.0/24 maxlen: 24
82.25.14.0/24 maxlen: 24
82.25.44.0/24 maxlen: 24
82.26.176.0/21 maxlen: 24
82.26.184.0/21 maxlen: 24
82.27.122.0/24 maxlen: 24
82.29.93.0/24 maxlen: 24
82.29.126.0/24 maxlen: 24
82.38.2.0/24 maxlen: 24
82.38.82.0/24 maxlen: 24
82.38.124.0/22 maxlen: 24
82.38.140.0/22 maxlen: 24
82.38.152.0/22 maxlen: 24
82.38.156.0/22 maxlen: 24
82.38.160.0/22 maxlen: 24
82.38.164.0/22 maxlen: 24
82.38.224.0/22 maxlen: 24
82.38.228.0/22 maxlen: 24
82.38.232.0/22 maxlen: 24
82.38.236.0/22 maxlen: 24
82.38.240.0/22 maxlen: 24
82.38.244.0/22 maxlen: 24
82.38.248.0/22 maxlen: 24
82.38.252.0/22 maxlen: 24
82.39.108.0/24 maxlen: 24
82.39.156.0/22 maxlen: 24
82.39.176.0/22 maxlen: 24
82.39.180.0/22 maxlen: 24
82.39.216.0/22 maxlen: 24
82.39.224.0/22 maxlen: 24
82.40.0.0/22 maxlen: 24
82.40.4.0/22 maxlen: 24
82.40.8.0/22 maxlen: 24
82.40.12.0/22 maxlen: 24
82.40.16.0/22 maxlen: 24
82.41.40.0/24 maxlen: 24
82.41.44.0/22 maxlen: 24
82.41.52.0/22 maxlen: 24
82.41.68.0/22 maxlen: 24
82.41.80.0/22 maxlen: 24
82.41.88.0/22 maxlen: 24
82.41.100.0/22 maxlen: 24
82.41.104.0/22 maxlen: 24
82.41.108.0/22 maxlen: 24
82.41.124.0/22 maxlen: 24
82.41.134.0/24 maxlen: 24
82.41.148.0/22 maxlen: 24
82.41.152.0/22 maxlen: 24
82.41.160.0/22 maxlen: 24
82.41.164.0/22 maxlen: 24
82.41.172.0/22 maxlen: 24
82.41.176.0/22 maxlen: 24
82.41.184.0/22 maxlen: 24
82.41.188.0/22 maxlen: 24
82.41.204.0/22 maxlen: 24
82.41.212.0/22 maxlen: 24
82.41.224.0/22 maxlen: 24
82.41.228.0/22 maxlen: 24
82.47.63.0/24 maxlen: 24
82.47.98.0/24 maxlen: 24
82.47.180.0/24 maxlen: 24
84.75.33.0/24 maxlen: 24
178.83.45.0/24 maxlen: 24
178.83.46.0/24 maxlen: 24
178.83.197.0/24 maxlen: 24
2a13:9500:138::/48 maxlen: 48
2a13:9500:143::/48 maxlen: 48
2a13:9500:166::/48 maxlen: 48
2a13:9500:18e::/48 maxlen: 48
2a13:9500:203::/48 maxlen: 48
2a13:9500:205::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:c5:57:cc:cc:58:09:47:30:15:d1:24:f3:96:f9:3e:fe:33:84:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Nov 10 09:57:57 2026 GMT
Not After : Nov 9 10:02:57 2027 GMT
Subject: CN=7FA12A51B32D4AF098DEE637A317E29116598370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a2:7b:11:34:ce:4e:8a:39:ca:b0:c6:e3:1c:
aa:0c:07:70:86:69:c1:26:8e:39:23:6c:d7:34:5b:
7d:31:4d:77:06:d0:88:4a:51:96:40:f6:2a:15:c4:
f6:f1:d5:8c:ea:e0:5d:9d:50:0e:60:bb:79:06:3f:
6c:16:04:cd:a4:98:5e:94:ef:2b:93:c9:ef:65:6c:
ea:5d:d2:fa:5a:ca:10:0c:80:9a:c6:72:70:fd:0e:
b6:99:ec:cc:05:1d:55:b1:55:12:68:c4:9f:fc:a8:
61:b6:11:da:a3:4c:57:05:ee:8b:f8:da:5e:96:25:
00:a7:94:e5:9a:85:7e:f5:f7:b6:2a:94:ed:8b:a5:
2b:e0:20:57:4e:ff:a7:e8:4b:af:29:73:82:a6:e0:
b5:70:ad:1a:0b:c6:d2:40:95:38:55:90:17:b4:14:
1e:03:f2:40:32:ab:20:a6:e7:0a:75:ad:c2:23:54:
8e:0f:ca:9d:40:00:66:00:40:a1:d6:1f:e3:ab:41:
8c:e2:d2:24:d5:a3:6e:83:1e:ee:85:ab:dd:e6:6d:
86:82:e0:f2:4e:20:73:c6:8c:57:37:e3:b9:78:eb:
0d:00:89:61:a1:34:c7:f5:3b:65:d9:01:70:9f:7c:
da:00:0e:c2:6f:2c:f1:cf:b1:a3:b8:04:e9:2f:d1:
e2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A1:2A:51:B3:2D:4A:F0:98:DE:E6:37:A3:17:E2:91:16:59:83:70
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS16276.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.139.0/24
82.22.51.0/24
82.22.118.0/24
82.24.96.0/22
82.24.190.0/24
82.25.14.0/24
82.25.44.0/24
82.26.176.0/20
82.27.122.0/24
82.29.93.0/24
82.29.126.0/24
82.38.2.0/24
82.38.82.0/24
82.38.124.0/22
82.38.140.0/22
82.38.152.0-82.38.167.255
82.38.224.0/19
82.39.108.0/24
82.39.156.0/22
82.39.176.0/21
82.39.216.0/22
82.39.224.0/22
82.40.0.0-82.40.19.255
82.41.40.0/24
82.41.44.0/22
82.41.52.0/22
82.41.68.0/22
82.41.80.0/22
82.41.88.0/22
82.41.100.0-82.41.111.255
82.41.124.0/22
82.41.134.0/24
82.41.148.0-82.41.155.255
82.41.160.0/21
82.41.172.0-82.41.179.255
82.41.184.0/21
82.41.204.0/22
82.41.212.0/22
82.41.224.0/21
82.47.63.0/24
82.47.98.0/24
82.47.180.0/24
84.75.33.0/24
178.83.45.0-178.83.46.255
178.83.197.0/24
IPv6:
2a13:9500:138::/48
2a13:9500:143::/48
2a13:9500:166::/48
2a13:9500:18e::/48
2a13:9500:203::/48
2a13:9500:205::/48
Signature Algorithm: sha256WithRSAEncryption
68:25:5d:6e:59:a7:47:61:24:57:5f:48:7b:85:56:02:1c:02:
3a:c3:b8:9c:c0:14:ae:59:ad:20:e3:46:f7:ed:6e:44:ed:48:
44:6c:cd:fc:1d:76:91:0c:bb:3f:ac:be:05:91:29:7f:1b:f9:
38:93:83:9e:bf:b6:84:df:b8:f0:f4:6d:e8:95:c8:86:d9:c5:
96:54:ce:1f:e9:fe:6a:4e:df:60:ad:38:5d:08:d2:5c:76:d0:
ea:ac:57:79:41:d2:a1:27:49:1a:7e:f0:a5:f9:29:b6:fc:33:
7b:23:82:e3:7c:0f:be:45:b9:de:05:cf:9e:0d:4c:5f:d5:56:
d7:59:35:85:11:17:cb:10:4a:ca:25:6a:f3:6f:2a:eb:95:b6:
6d:b9:94:27:64:a6:2b:cb:c9:8a:52:3c:9c:c4:1f:60:9c:91:
4b:17:d5:be:24:53:1d:b3:bc:f9:63:5d:ad:71:1f:a1:78:b7:
df:b0:f2:ff:9b:a4:9a:8e:87:62:56:77:22:ae:68:bf:48:fd:
4d:88:28:31:2e:19:cf:79:3e:df:a9:91:cd:f3:c5:4e:6e:c4:
a9:7c:0b:72:d1:c6:32:dd:d6:86:20:77:0b:37:74:6f:29:08:
84:03:0c:a1:80:f1:59:25:05:05:9a:6a:19:32:7b:9a:cb:e2:
40:b3:48:d7
-----BEGIN CERTIFICATE-----
MIIGfjCCBWagAwIBAgIUXcVXzMxYCUcwFdEk85b5Pv4zhKUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjExMTAwOTU3NTdaFw0yNzExMDkxMDAyNTdaMDMxMTAvBgNV
BAMTKDdGQTEyQTUxQjMyRDRBRjA5OERFRTYzN0EzMTdFMjkxMTY1OTgzNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3onsRNM5OijnKsMbjHKoMB3CG
acEmjjkjbNc0W30xTXcG0IhKUZZA9ioVxPbx1Yzq4F2dUA5gu3kGP2wWBM2kmF6U
7yuTye9lbOpd0vpayhAMgJrGcnD9DraZ7MwFHVWxVRJoxJ/8qGG2EdqjTFcF7ov4
2l6WJQCnlOWahX7197YqlO2LpSvgIFdO/6foS68pc4Km4LVwrRoLxtJAlThVkBe0
FB4D8kAyqyCm5wp1rcIjVI4Pyp1AAGYAQKHWH+OrQYzi0iTVo26DHu6Fq93mbYaC
4PJOIHPGjFc347l46w0AiWGhNMf1O2XZAXCffNoADsJvLPHPsaO4BOkv0eLBAgMB
AAGjggOIMIIDhDAdBgNVHQ4EFgQUf6EqUbMtSvCY3uY3oxfikRZZg3AwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTYyNzYucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwggGcBggrBgEFBQcBBwEB/wSCAYswggGHMIIBRQQCAAEw
ggE9AwQAUhWLAwQAUhYzAwQAUhZ2AwQCUhhgAwQAUhi+AwQAUhkOAwQAUhksAwQE
UhqwAwQAUht6AwQAUh1dAwQAUh1+AwQAUiYCAwQAUiZSAwQCUiZ8AwQCUiaMMAwD
BANSJpgDBANSJqADBAVSJuADBABSJ2wDBAJSJ5wDBANSJ7ADBAJSJ9gDBAJSJ+Aw
CwMDA1IoAwQCUigQAwQAUikoAwQCUiksAwQCUik0AwQCUilEAwQCUilQAwQCUilY
MAwDBAJSKWQDBARSKWADBAJSKXwDBABSKYYwDAMEAlIplAMEAlIpmAMEA1IpoDAM
AwQCUimsAwQCUimwAwQDUim4AwQCUinMAwQCUinUAwQDUingAwQAUi8/AwQAUi9i
AwQAUi+0AwQAVEshMAwDBACyUy0DBACyUy4DBACyU8UwPAQCAAIwNgMHACoTlQAB
OAMHACoTlQABQwMHACoTlQABZgMHACoTlQABjgMHACoTlQACAwMHACoTlQACBTAN
BgkqhkiG9w0BAQsFAAOCAQEAaCVdblmnR2EkV19Ie4VWAhwCOsO4nMAUrlmtIONG
9+1uRO1IRGzN/B12kQy7P6y+BZEpfxv5OJODnr+2hN+48PRt6JXIhtnFllTOH+n+
ak7fYK04XQjSXHbQ6qxXeUHSoSdJGn7wpfkptvwzeyOC43wPvkW53gXPng1MX9VW
11k1hREXyxBKyiVq828q65W2bbmUJ2SmK8vJilI8nMQfYJyRSxfVviRTHbO8+WNd
rXEfoXi337Dy/5ukmo6HYlZ3Iq5ov0j9TYgoMS4Zz3k+36mRzfPFTm7EqXwLctHG
Mt3WhiB3Czd0bykIhAMMoYDxWSUFBZpqGTJ7msviQLNI1w==
-----END CERTIFICATE-----
Generated at Thu Nov 12 04:45:03 2026 by rpki-client