Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS16276.roa
File: AS16276.roa (raw, json)
Hash identifier: ODLD25XwKHR81yy7e5QyayTpirwHPDu7zNA+YA6n7w8=
Subject key identifier: 1F:C1:6C:42:E0:96:F0:A9:4B:25:E0:5A:82:94:88:30:DB:29:E2:58
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 6A15A7C9B72D2FFFEB19A7620A4F42F080D2B8AB
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS16276.roa
Signing time: Wed 22 Jul 2026 00:00:11 +0000
ROA not before: Tue 21 Jul 2026 23:55:11 +0000
ROA not after: Wed 21 Jul 2027 00:00:11 +0000
asID: 16276
IP address blocks: 143.20.66.0/24 maxlen: 24
143.20.195.0/24 maxlen: 24
143.20.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:15:a7:c9:b7:2d:2f:ff:eb:19:a7:62:0a:4f:42:f0:80:d2:b8:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Jul 21 23:55:11 2026 GMT
Not After : Jul 21 00:00:11 2027 GMT
Subject: CN=1FC16C42E096F0A94B25E05A82948830DB29E258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7f:09:74:d9:59:d2:35:52:05:95:da:5a:82:
d5:32:9a:66:5b:e9:02:ef:a9:b2:e2:6c:04:c7:79:
07:19:67:70:c9:a3:4b:42:93:76:7c:08:69:d2:6d:
46:7f:d1:67:35:52:6f:37:31:3b:2e:df:e0:e4:ba:
d0:de:4d:29:76:ce:af:a1:86:c5:a6:79:00:b8:df:
18:b8:74:60:6f:7f:0e:92:76:30:6d:aa:27:5c:e5:
46:1d:9c:59:b8:9e:22:c7:76:4d:e2:eb:a2:a3:da:
8a:84:b8:a6:77:75:6c:91:63:71:8e:ad:48:95:d7:
df:7c:ee:1d:99:b4:80:d9:99:dc:90:7b:7d:7a:dd:
5d:d0:b5:c7:ab:95:34:3c:13:78:a9:92:37:ab:4f:
34:4d:32:34:78:40:89:ac:6c:c0:44:ab:a8:46:ce:
6a:cf:57:78:4f:87:94:d3:94:89:d2:e6:c6:a6:bb:
34:6a:15:c4:db:dd:93:9d:09:0e:8d:e5:2b:a9:96:
db:29:76:b0:88:99:c5:ad:00:c3:04:6f:da:69:50:
8d:66:dc:7c:5c:72:bd:d9:a0:17:57:a3:fc:01:fb:
97:d4:51:7a:cd:4d:11:81:98:8c:2c:2d:3d:0c:80:
61:db:1e:96:c2:d8:c9:7f:b1:6f:87:68:7a:0a:9b:
29:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C1:6C:42:E0:96:F0:A9:4B:25:E0:5A:82:94:88:30:DB:29:E2:58
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS16276.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.66.0/24
143.20.195.0/24
143.20.215.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:e7:83:6f:af:3f:16:43:7d:fd:45:9f:25:14:18:a4:07:a6:
c5:4c:4b:af:c0:6d:13:c9:7d:28:df:f6:ed:c9:dc:5e:17:fd:
18:d4:96:84:f0:57:58:2a:d1:27:c7:f9:08:f5:64:63:e2:d9:
a8:f4:fa:cc:bd:bb:09:e4:b4:ca:0a:fd:90:ae:22:9c:75:9a:
8e:6a:3d:43:3d:c8:78:f6:90:93:5a:7e:04:65:4b:ec:16:95:
b7:af:76:1c:44:23:22:2e:d0:da:6c:d0:3a:f4:15:27:02:10:
10:22:9c:34:7f:0b:b7:d2:ef:f4:f6:7d:ca:a4:47:3e:a5:fe:
6c:e0:a7:54:79:22:7c:be:da:ad:af:3c:7a:ad:91:9d:b0:e2:
49:01:b4:20:da:f2:a8:bb:05:5e:d1:c8:89:80:28:2f:66:b3:
53:2e:39:8e:7d:e7:d0:35:ed:a6:45:2e:ec:3d:0d:a5:a9:ff:
46:f9:a6:55:ff:c5:c6:e4:a4:89:7e:6d:92:7d:d5:a8:e8:ab:
d4:37:af:90:52:9d:c8:22:40:c0:0b:0c:a7:c6:5b:33:c2:a4:
e4:85:26:53:c5:1a:9f:03:42:90:88:00:13:39:a0:7d:68:75:
cf:47:a6:5d:04:5e:8e:8b:e2:8d:8e:7a:9a:c7:f2:c4:cc:b0:
ad:29:52:d3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:54:05 2026 by rpki-client