Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS16276.roa
File: AS16276.roa (raw, json)
Hash identifier: MAJX0RVEy5cZoK/Xe589srm656i3Blh5IV0Ht6jVP3Q=
Subject key identifier: DD:AE:07:93:04:8C:08:E4:44:95:22:88:14:15:20:F6:19:D9:94:E1
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 5EB3763EFBAD20C6033AB8C120E9E48D5425BFFE
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS16276.roa
Signing time: Tue 24 Mar 2026 11:52:59 +0000
ROA not before: Tue 24 Mar 2026 11:47:59 +0000
ROA not after: Tue 23 Mar 2027 11:52:59 +0000
asID: 16276
IP address blocks: 141.11.1.0/24 maxlen: 24
141.11.18.0/24 maxlen: 24
141.11.21.0/24 maxlen: 24
141.11.31.0/24 maxlen: 24
141.11.39.0/24 maxlen: 24
141.11.40.0/24 maxlen: 24
141.11.45.0/24 maxlen: 24
141.11.49.0/24 maxlen: 24
141.11.74.0/23 maxlen: 23
141.11.107.0/24 maxlen: 24
141.11.187.0/24 maxlen: 24
141.11.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:49:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:b3:76:3e:fb:ad:20:c6:03:3a:b8:c1:20:e9:e4:8d:54:25:bf:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Mar 24 11:47:59 2026 GMT
Not After : Mar 23 11:52:59 2027 GMT
Subject: CN=DDAE0793048C08E444952288141520F619D994E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5a:aa:1f:50:b7:a9:97:d1:5e:92:bc:9a:19:
3f:f0:e6:fa:1c:16:85:f4:a1:db:ee:5e:58:78:33:
1f:1e:fb:4a:f6:51:c8:91:23:54:bf:30:58:61:bb:
e0:d6:1f:1c:42:04:8a:eb:c1:14:43:05:3d:ac:d7:
92:d4:85:72:fd:54:73:8a:8d:ce:84:5b:cf:76:fa:
0d:0c:fd:62:4c:d9:98:7f:9d:1f:70:60:5e:44:d9:
06:11:10:b8:8e:35:f1:d3:33:cd:a8:eb:ac:fc:3f:
8a:39:04:bb:a1:65:4e:cc:7f:f2:89:59:a3:e1:bb:
75:ac:14:55:f9:bd:02:58:50:bd:03:f0:bf:4e:9f:
b4:d9:2e:dc:32:6d:26:e8:86:40:35:2e:07:2b:07:
57:0c:ab:3b:43:21:72:8a:a3:de:88:7b:98:a9:81:
ea:db:9f:0a:3a:14:20:03:9b:26:08:85:a0:02:e0:
82:ea:8f:72:50:ff:6b:ce:12:a0:e6:5d:b9:f5:a9:
5b:89:f2:45:fb:ff:5b:d9:a0:7f:cf:8a:9f:95:76:
01:6b:42:da:17:f9:b0:ef:cb:dd:c8:10:49:5c:9c:
11:1d:23:c6:38:3a:1e:48:80:29:73:af:dd:2d:73:
7f:48:60:0d:8c:3f:e0:fe:0c:f8:07:42:bc:6c:a0:
32:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:AE:07:93:04:8C:08:E4:44:95:22:88:14:15:20:F6:19:D9:94:E1
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS16276.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.1.0/24
141.11.18.0/24
141.11.21.0/24
141.11.31.0/24
141.11.39.0-141.11.40.255
141.11.45.0/24
141.11.49.0/24
141.11.74.0/23
141.11.107.0/24
141.11.187.0/24
141.11.250.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:68:35:df:bf:b8:cd:42:fa:83:94:e7:86:13:7c:b8:49:9c:
a2:e5:b6:82:1d:0e:3a:e2:ab:ef:c1:e1:30:10:20:33:ed:38:
a6:a5:df:50:1f:12:b1:84:d5:f2:39:a1:43:2b:ac:74:55:97:
63:91:98:dd:bd:7f:99:06:3a:0e:4b:46:ba:13:e2:fc:dc:20:
bd:d6:d7:94:6d:24:b9:7a:9f:4e:83:0d:7c:a4:7f:cd:01:c4:
e7:35:8a:7e:a6:64:60:2c:b8:ca:30:15:5b:4a:d9:fc:5d:28:
c0:48:73:a4:f9:c2:cd:d2:c7:58:ba:c1:d0:09:25:cd:ff:d0:
e2:5e:6c:2f:3d:f1:26:54:b8:39:bc:9d:ea:aa:45:cf:d4:e7:
95:ae:41:0b:98:a5:d8:b4:b1:d9:af:ca:48:86:e0:48:4f:3a:
7f:66:b4:ed:76:99:1b:6a:1c:92:5e:32:72:37:e6:2a:72:d2:
8a:bd:95:e4:ad:69:c9:d4:dd:ce:d9:77:93:c9:bd:6d:1c:21:
7c:22:60:dd:75:a1:ea:47:27:d9:bb:2e:b9:f3:74:09:01:f3:
50:0f:28:f1:9e:e9:eb:ab:e5:a1:a4:7a:09:dc:6f:35:cc:64:
69:6c:40:17:b1:c4:bf:66:99:ed:9b:41:23:d3:c4:a2:7d:3c:
7d:c9:fb:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:06:19 2026 by rpki-client