Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS16276.roa
File: AS16276.roa (raw, json)
Hash identifier: RXU04xsg1uCsx0tDBa/qRJWg51mmgasqMxJtyxcmoVE=
Subject key identifier: 23:5E:AA:E2:41:C3:99:DE:27:41:99:05:7F:EE:1B:B2:68:81:AD:7C
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1A67BE209A07D1C0C9F40FCB1C2AB652E167874A
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS16276.roa
Signing time: Tue 21 Jul 2026 11:21:59 +0000
ROA not before: Tue 21 Jul 2026 11:16:59 +0000
ROA not after: Tue 20 Jul 2027 11:21:59 +0000
asID: 16276
IP address blocks: 82.21.139.0/24 maxlen: 24
82.22.15.0/24 maxlen: 24
82.22.18.0/24 maxlen: 24
82.22.25.0/24 maxlen: 24
82.22.51.0/24 maxlen: 24
82.22.118.0/24 maxlen: 24
82.24.96.0/22 maxlen: 24
82.24.190.0/24 maxlen: 24
82.25.14.0/24 maxlen: 24
82.25.146.0/23 maxlen: 24
82.26.81.0/24 maxlen: 24
82.26.176.0/21 maxlen: 24
82.26.184.0/21 maxlen: 24
82.27.122.0/24 maxlen: 24
82.29.126.0/24 maxlen: 24
82.38.2.0/24 maxlen: 24
82.38.35.0/24 maxlen: 24
82.38.82.0/24 maxlen: 24
82.38.124.0/22 maxlen: 24
82.38.140.0/22 maxlen: 24
82.38.152.0/22 maxlen: 24
82.38.156.0/22 maxlen: 24
82.38.160.0/22 maxlen: 24
82.38.164.0/22 maxlen: 24
82.38.224.0/22 maxlen: 24
82.38.228.0/22 maxlen: 24
82.38.232.0/22 maxlen: 24
82.38.236.0/22 maxlen: 24
82.38.240.0/22 maxlen: 24
82.38.244.0/22 maxlen: 24
82.38.248.0/22 maxlen: 24
82.38.252.0/22 maxlen: 24
82.39.108.0/24 maxlen: 24
82.39.119.0/24 maxlen: 24
82.39.156.0/22 maxlen: 24
82.39.176.0/22 maxlen: 24
82.39.180.0/22 maxlen: 24
82.39.216.0/22 maxlen: 24
82.39.224.0/22 maxlen: 24
82.40.0.0/22 maxlen: 24
82.40.4.0/22 maxlen: 24
82.40.8.0/22 maxlen: 24
82.40.12.0/22 maxlen: 24
82.40.16.0/22 maxlen: 24
82.41.44.0/22 maxlen: 24
82.41.52.0/22 maxlen: 24
82.41.68.0/22 maxlen: 24
82.41.80.0/22 maxlen: 24
82.41.88.0/22 maxlen: 24
82.41.100.0/22 maxlen: 24
82.41.104.0/22 maxlen: 24
82.41.108.0/22 maxlen: 24
82.41.124.0/22 maxlen: 24
82.41.134.0/24 maxlen: 24
82.41.148.0/22 maxlen: 24
82.41.152.0/22 maxlen: 24
82.41.160.0/22 maxlen: 24
82.41.164.0/22 maxlen: 24
82.41.172.0/22 maxlen: 24
82.41.176.0/22 maxlen: 24
82.41.184.0/22 maxlen: 24
82.41.188.0/22 maxlen: 24
82.41.204.0/22 maxlen: 24
82.41.212.0/22 maxlen: 24
82.41.224.0/22 maxlen: 24
82.41.228.0/22 maxlen: 24
82.47.36.0/23 maxlen: 23
82.47.63.0/24 maxlen: 24
82.47.98.0/24 maxlen: 24
84.75.33.0/24 maxlen: 24
178.83.45.0/24 maxlen: 24
178.83.46.0/24 maxlen: 24
2a13:9500:138::/48 maxlen: 48
2a13:9500:143::/48 maxlen: 48
2a13:9500:166::/48 maxlen: 48
2a13:9500:18e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:67:be:20:9a:07:d1:c0:c9:f4:0f:cb:1c:2a:b6:52:e1:67:87:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 21 11:16:59 2026 GMT
Not After : Jul 20 11:21:59 2027 GMT
Subject: CN=235EAAE241C399DE274199057FEE1BB26881AD7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:14:27:ac:34:eb:50:25:ef:fe:e8:96:1f:58:
c8:24:83:c6:b9:82:0e:09:8b:ea:87:ac:3b:3b:99:
ff:e6:33:8b:32:de:3e:0e:a0:04:87:47:75:a2:4b:
8f:da:d3:ab:c7:2f:c0:12:cd:21:9a:14:40:6b:51:
d9:7f:e4:ac:25:4e:64:8a:9d:30:0c:7c:6e:cf:bb:
dc:bb:fb:db:3f:3c:e6:2e:fb:c3:76:ce:fb:c6:4a:
2e:c1:b2:80:c9:01:98:89:90:87:36:b7:31:51:ab:
ff:5a:b7:0b:52:85:7f:16:1d:be:19:ed:02:25:e9:
1e:43:90:16:98:87:34:b4:fa:07:a9:99:f9:67:1e:
41:b3:a0:d6:bf:58:88:c6:86:05:0b:0d:d5:d8:28:
4e:30:ad:fc:61:dd:1c:90:3d:68:50:33:43:3b:eb:
bd:05:55:f5:22:d0:73:47:31:72:4a:4c:b5:eb:e9:
6a:a4:a7:f2:ed:15:37:8b:12:cc:dc:7a:57:75:8d:
be:a0:8e:3c:a4:79:b0:ce:8f:bb:d4:c6:32:90:b4:
f5:a2:72:8c:f2:44:17:ac:af:7f:26:d5:b7:b7:9f:
2e:6b:7c:c2:37:8a:64:d9:21:86:e2:5d:34:52:5e:
75:51:7b:38:ed:a1:76:9f:f0:ad:b4:4b:fa:4c:98:
e7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:5E:AA:E2:41:C3:99:DE:27:41:99:05:7F:EE:1B:B2:68:81:AD:7C
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS16276.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.139.0/24
82.22.15.0/24
82.22.18.0/24
82.22.25.0/24
82.22.51.0/24
82.22.118.0/24
82.24.96.0/22
82.24.190.0/24
82.25.14.0/24
82.25.146.0/23
82.26.81.0/24
82.26.176.0/20
82.27.122.0/24
82.29.126.0/24
82.38.2.0/24
82.38.35.0/24
82.38.82.0/24
82.38.124.0/22
82.38.140.0/22
82.38.152.0-82.38.167.255
82.38.224.0/19
82.39.108.0/24
82.39.119.0/24
82.39.156.0/22
82.39.176.0/21
82.39.216.0/22
82.39.224.0/22
82.40.0.0-82.40.19.255
82.41.44.0/22
82.41.52.0/22
82.41.68.0/22
82.41.80.0/22
82.41.88.0/22
82.41.100.0-82.41.111.255
82.41.124.0/22
82.41.134.0/24
82.41.148.0-82.41.155.255
82.41.160.0/21
82.41.172.0-82.41.179.255
82.41.184.0/21
82.41.204.0/22
82.41.212.0/22
82.41.224.0/21
82.47.36.0/23
82.47.63.0/24
82.47.98.0/24
84.75.33.0/24
178.83.45.0-178.83.46.255
IPv6:
2a13:9500:138::/48
2a13:9500:143::/48
2a13:9500:166::/48
2a13:9500:18e::/48
Signature Algorithm: sha256WithRSAEncryption
1e:8e:f7:12:c7:85:b3:8e:74:ad:ab:27:4b:d5:d9:e1:a9:10:
51:3c:36:eb:30:9d:64:22:bb:1d:35:db:37:69:06:3f:d3:83:
9c:b4:62:45:48:8d:b3:db:65:e9:95:f4:f6:1c:8d:6b:8f:24:
4d:f1:e7:71:94:d7:91:ad:17:0a:af:9f:f4:15:27:e0:40:f9:
2a:99:51:f4:f4:0e:14:0c:e3:7c:8f:75:68:3c:16:34:6d:c1:
9f:a2:7b:7a:16:51:f0:ba:50:2c:37:a0:84:5a:f9:fe:4a:3f:
eb:22:27:04:3a:7e:f8:f4:19:ee:a5:54:bf:eb:02:c3:d0:72:
be:a4:54:db:91:51:64:d6:70:54:32:aa:8a:f0:e4:30:5a:31:
ed:0c:5b:b2:0b:29:4f:39:e0:a1:7c:6a:3a:dd:05:e2:61:cc:
e8:51:72:4e:7d:f3:45:67:a3:39:f2:95:4f:d0:78:80:6a:3f:
d0:42:aa:b1:98:5a:ce:0b:e1:8c:11:a7:dd:14:3e:ed:26:13:
58:d1:22:24:3d:a6:36:94:8a:14:47:c5:2e:38:6a:c8:05:f4:
ce:2c:52:6f:d5:2d:e0:28:c1:ab:c1:ad:6e:5d:01:06:71:67:
c3:5c:f9:5c:2c:38:9c:2a:1e:4d:c7:d2:dc:82:a2:a7:c3:97:
40:1b:8e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:21:56 2026 by rpki-client