Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS16276.roa
File: AS16276.roa (raw, json)
Hash identifier: UNQAksqOg3GRcNzhv5OEfx22GlFg+N+uTDYpSJbODYI=
Subject key identifier: D2:80:22:66:AA:42:44:6A:EE:1E:BC:20:04:53:E6:CD:90:2A:08:E4
Certificate issuer: /CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF
Certificate serial: 127960DC3FCE149E457D4A8B04CC8F0024151E1E
Authority key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS16276.roa
Signing time: Sun 08 Nov 2026 08:53:13 +0000
ROA not before: Sun 08 Nov 2026 08:48:13 +0000
ROA not after: Sun 07 Nov 2027 08:53:13 +0000
asID: 16276
IP address blocks: 187.55.36.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Nov 2026 13:42:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:79:60:dc:3f:ce:14:9e:45:7d:4a:8b:04:cc:8f:00:24:15:1e:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF
Validity
Not Before: Nov 8 08:48:13 2026 GMT
Not After : Nov 7 08:53:13 2027 GMT
Subject: CN=D2802266AA42446AEE1EBC200453E6CD902A08E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a1:20:bd:85:7e:3b:cb:78:36:19:d9:36:bf:
77:1f:e7:dd:8d:0f:50:ce:e1:08:e7:95:2e:ed:02:
b8:ed:37:27:a5:f1:2c:65:13:18:17:02:18:5c:0e:
6c:a8:7a:b2:9f:53:a1:48:57:ae:f3:e0:f9:15:07:
85:90:c6:5b:f9:65:5c:1d:24:7c:d9:d7:61:47:92:
d2:e2:77:61:f8:ae:70:ad:e4:a8:f1:fa:ab:f2:9c:
1b:4b:b0:a2:aa:75:e1:76:80:d8:c5:6a:64:5d:f1:
c2:02:8f:c9:55:63:4b:b4:47:c6:ff:6a:23:26:68:
84:d8:ea:08:d7:72:3b:ee:76:7d:ac:63:d1:52:c0:
58:c0:60:ba:7e:70:6d:2e:27:7a:ce:99:ff:2f:c5:
26:3e:64:36:0d:fe:1c:83:68:4f:b7:c6:96:0e:13:
20:9a:b4:c0:ad:86:5e:6b:9f:85:05:de:33:30:be:
ca:b1:0b:83:09:06:ab:f3:ab:f6:bd:fc:c5:2a:18:
1e:2d:6a:15:3d:27:49:f7:76:ce:9a:43:4b:2b:1e:
29:d8:82:cc:8c:bd:96:18:02:ec:88:4e:27:3b:ef:
de:4a:b6:6d:5d:41:bb:bc:3d:71:5f:ff:f9:ac:e8:
b8:da:89:51:f2:9e:eb:08:46:bf:4d:f2:67:01:fd:
2e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:80:22:66:AA:42:44:6A:EE:1E:BC:20:04:53:E6:CD:90:2A:08:E4
X509v3 Authority Key Identifier:
keyid:14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/AS16276.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.55.36.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:3a:1c:26:0a:29:2c:87:9e:c4:bc:71:6a:07:9d:80:34:bc:
ef:59:a5:cf:aa:c9:02:a6:32:5b:73:cc:f6:95:42:1f:19:26:
b8:2b:47:31:ae:98:fc:eb:4c:71:85:42:3f:51:4d:dd:df:7d:
f8:07:95:c2:29:40:1e:ae:dd:a1:a2:05:a2:81:42:00:6b:cb:
7a:a8:35:cc:7e:69:4d:22:ea:6f:71:be:e6:2c:cd:20:57:92:
5d:4a:ba:71:35:fe:1e:48:69:a5:50:bd:1f:b2:cb:06:e0:3f:
50:3b:51:c7:d7:25:06:f2:01:19:5e:e8:a8:12:c3:ec:05:1b:
27:3f:ad:fb:d9:0a:79:5d:8a:f2:9d:4f:3a:08:e9:fd:a4:a7:
14:4a:a2:3f:a9:6e:35:d6:bf:9e:3c:0f:09:41:a4:2d:f4:99:
e0:f5:d2:8a:b3:42:5f:d6:56:55:e5:a2:c5:cb:54:d3:3a:e7:
55:4c:8c:df:6c:c6:7a:bc:0b:ad:6f:57:18:39:10:9f:b2:e4:
02:a1:07:c2:ce:cc:c4:b3:43:18:26:02:f0:7f:9b:85:35:4f:
a2:4a:80:29:52:6d:73:d4:25:1d:96:65:47:29:55:0c:70:ae:
11:44:08:df:e4:c2:9f:30:7d:31:8b:b8:0e:2a:9d:2a:4f:be:
36:49:da:d7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 11 20:21:33 2026 by rpki-client