Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS16276.roa
File: AS16276.roa (raw, json)
Hash identifier: 1o/CWysWnbaaZUjN0EvaOGCPCG8LhHtiEXbb3ZMYEN8=
Subject key identifier: 22:8F:72:8A:F9:95:0E:E1:56:82:A6:AD:DE:44:DF:92:6B:6A:29:5A
Certificate issuer: /CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Certificate serial: 543D1D0EF0B9C1AE74768E351F45501A0779AF6D
Authority key identifier: 39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS16276.roa
Signing time: Mon 20 Jul 2026 16:42:33 +0000
ROA not before: Mon 20 Jul 2026 16:37:33 +0000
ROA not after: Mon 19 Jul 2027 16:42:33 +0000
asID: 16276
IP address blocks: 177.29.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:3d:1d:0e:f0:b9:c1:ae:74:76:8e:35:1f:45:50:1a:07:79:af:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Validity
Not Before: Jul 20 16:37:33 2026 GMT
Not After : Jul 19 16:42:33 2027 GMT
Subject: CN=228F728AF9950EE15682A6ADDE44DF926B6A295A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:75:a6:bd:02:29:67:e2:2f:1b:a3:35:8f:c3:
22:c1:de:fc:69:cc:bd:99:c0:fb:a9:e9:5e:23:3f:
7c:e9:88:02:f0:6e:40:7c:a8:4d:4c:2e:a8:0e:ff:
bb:f2:7c:e9:08:45:b1:2d:b5:e6:30:a4:be:ba:3b:
34:23:bc:47:3c:70:2a:29:f4:77:9c:91:c1:15:5a:
fd:27:7a:cf:d8:d6:9d:c4:75:29:27:dc:4e:fd:fd:
21:99:f3:f2:d0:b1:5f:1f:0a:f7:1b:36:45:3c:11:
27:c8:0f:03:80:62:6e:63:81:4a:da:79:ea:c7:1b:
a8:a8:32:37:fa:ab:0c:47:e3:49:e6:10:79:04:57:
f4:d6:2f:91:60:10:e6:02:93:d8:d6:93:ba:14:5c:
5e:ee:84:78:f5:20:5d:32:9c:39:35:a0:0b:ea:98:
d8:6f:c1:3b:c9:c9:63:67:11:4b:35:33:e0:38:24:
cf:38:ca:26:df:75:c4:93:35:4f:de:b0:1b:b2:e0:
a6:9b:d9:34:18:c6:c9:0a:b3:82:d0:f8:17:36:21:
10:86:eb:a8:4d:d5:37:32:0e:e5:5e:0b:2d:47:d4:
58:fa:8e:8f:41:17:d6:d1:ca:52:ca:67:73:dd:07:
61:ed:1a:3e:d2:3e:23:78:84:17:66:3f:17:87:42:
11:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:8F:72:8A:F9:95:0E:E1:56:82:A6:AD:DE:44:DF:92:6B:6A:29:5A
X509v3 Authority Key Identifier:
keyid:39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS16276.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.29.248.0/24
Signature Algorithm: sha256WithRSAEncryption
82:3a:1a:c0:9b:a9:ce:46:f4:8c:b7:a6:b5:bb:d2:da:fb:1c:
a6:a9:77:ea:05:7f:14:fa:d6:f3:c5:b2:1e:e4:9e:cf:b2:54:
97:15:db:c8:33:7e:f0:99:34:2d:b0:8d:a5:36:20:ef:fb:d4:
b3:9e:ef:07:4f:36:94:11:20:a9:82:a1:03:d0:fd:99:57:3e:
e6:8d:d7:19:29:47:e2:97:bc:17:d6:e9:a8:22:f4:fc:ea:0a:
a6:b8:0c:d0:9a:02:1c:bc:79:15:b3:22:8e:22:97:d6:d2:a9:
fc:b1:d6:02:e3:09:ae:f0:7c:fa:a7:33:02:b6:48:82:e4:27:
aa:63:fe:32:53:6c:c4:01:cd:6c:67:76:a5:5e:5a:67:1a:93:
ab:90:05:f2:23:93:92:7c:1e:16:aa:d3:b6:86:e5:09:96:1f:
2b:23:e9:ab:c2:97:e8:8c:97:56:19:39:1d:bf:16:79:b7:0b:
9f:25:de:c6:de:3a:13:a8:eb:74:7e:18:4a:cb:29:f3:95:94:
cb:60:47:3f:dc:7f:82:a6:3b:a2:71:de:4c:79:d1:ae:22:3c:
e8:ce:be:d0:2c:6d:bc:ae:6b:67:76:75:da:4a:cb:e6:35:45:
57:31:9c:0f:43:17:4e:9e:85:f3:73:45:79:d8:ee:a4:c1:ea:
bf:ad:08:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:06:35 2026 by rpki-client