
Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS16276.roa
File: AS16276.roa (raw, json)
Hash identifier: qHLF3aN0Vy28LK+9G2ctA7PP0W0lrki8lCWB38f2ZXA=
Subject key identifier: C2:01:07:C5:F4:57:64:75:11:EA:6A:11:84:79:93:FF:A8:C8:C0:8F
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 4C71D0F1587FB8280EDF513C5B2744C270DEA59E
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS16276.roa
Signing time: Thu 18 Sep 2025 09:17:26 +0000
ROA not before: Thu 18 Sep 2025 09:12:26 +0000
ROA not after: Thu 17 Sep 2026 09:17:26 +0000
asID: 16276
IP address blocks: 176.53.158.0/24 maxlen: 24
193.32.204.0/24 maxlen: 24
193.32.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:71:d0:f1:58:7f:b8:28:0e:df:51:3c:5b:27:44:c2:70:de:a5:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Sep 18 09:12:26 2025 GMT
Not After : Sep 17 09:17:26 2026 GMT
Subject: CN=C20107C5F457647511EA6A11847993FFA8C8C08F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:ba:3d:67:97:7b:cf:c0:ac:ec:d8:c3:a2:39:
c3:1b:bb:aa:9a:83:a7:ff:3d:ce:a6:a8:98:91:4a:
82:8d:3b:16:2e:c2:40:58:d7:7b:53:e6:38:65:51:
53:69:01:29:ec:96:7a:1a:6e:a4:30:4e:8d:f4:23:
32:44:ef:c3:2c:4d:ea:7e:50:f0:b8:12:51:a3:e4:
32:a0:d5:0e:70:32:c9:1e:34:f0:bd:52:5b:99:3e:
b1:70:0f:90:43:c8:d1:fe:f1:b7:de:8c:4b:46:25:
74:b3:be:2a:1d:22:49:71:ca:f7:1a:50:1e:25:8f:
84:05:61:e4:c9:b9:d1:b5:27:ce:b3:6d:e4:6f:a5:
e2:60:d7:76:a3:4a:1f:09:af:a1:39:66:03:f4:01:
51:6a:84:53:45:02:e7:25:73:2b:1d:97:3b:a5:f0:
79:19:d6:30:88:8b:ce:85:7a:35:8d:f5:ca:e4:4e:
fa:82:98:9f:86:fc:53:d2:1b:9b:c6:47:52:d0:36:
1e:8d:d3:20:05:28:fa:34:16:fe:1e:6e:42:7e:11:
0d:b5:5e:65:8b:0a:fd:36:04:2e:68:8b:cb:6a:0f:
ba:67:7c:79:59:a9:49:81:ae:d6:c8:08:68:cb:d8:
8f:cd:62:76:56:9b:75:5f:76:53:48:04:06:7a:c0:
53:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:01:07:C5:F4:57:64:75:11:EA:6A:11:84:79:93:FF:A8:C8:C0:8F
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS16276.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.158.0/24
193.32.204.0/24
193.32.207.0/24
Signature Algorithm: sha256WithRSAEncryption
73:f8:e4:be:97:cc:54:91:b9:99:40:90:48:52:e8:84:3f:d7:
7a:18:6f:8a:65:68:c4:a7:3a:cb:b3:85:a7:27:d8:72:4c:1a:
3e:d2:d1:29:dc:2e:0b:da:5f:2f:bd:57:c5:98:e8:ef:7a:c4:
b1:c9:f6:d5:f3:2b:5f:4f:6c:eb:97:4e:fd:d1:04:9f:54:e4:
26:79:10:54:22:ce:e4:f9:c9:e7:db:22:12:09:50:53:b7:79:
2d:05:03:c9:c5:49:33:f3:52:e3:0d:b2:0f:c2:34:4f:48:8f:
ac:78:bb:85:3e:ae:eb:f6:76:c9:24:f8:0f:9e:38:69:99:f0:
b7:6b:b3:1d:fa:6d:29:78:85:ec:8e:42:84:c5:e4:92:7f:bc:
a1:51:0a:64:69:e5:a9:eb:de:ca:65:1d:29:11:34:8b:60:da:
72:9c:63:2d:37:5c:41:47:f7:64:c5:c3:1a:55:c9:d3:99:5f:
37:3f:e2:4b:b6:f7:7c:57:22:3d:3b:5a:e6:88:f9:d0:d5:eb:
2e:ea:d5:a5:f5:31:bb:71:91:18:65:93:cc:7b:a7:50:ea:6d:
a5:03:65:05:05:af:35:4b:6f:1f:e6:e9:cd:2f:ee:78:b8:60:
71:51:e0:00:3d:da:fa:55:83:15:4b:4a:ed:bd:37:45:d8:6e:
48:0c:95:4a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:45:50 2025 by rpki-client