Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS16276.roa
File: AS16276.roa (raw, json)
Hash identifier: dg8DeagscSSU2inETc7GhZ3xKcIfb3FEEAGQeK8AnwI=
Subject key identifier: 7B:0F:58:D2:1A:4D:94:AC:AE:35:7C:E8:9C:7C:EB:A1:DD:B0:6A:AB
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 7B041C46BB39148839C4581B8969012BF70248C3
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS16276.roa
Signing time: Sun 19 Jul 2026 16:19:29 +0000
ROA not before: Sun 19 Jul 2026 16:14:29 +0000
ROA not after: Sun 18 Jul 2027 16:19:29 +0000
asID: 16276
IP address blocks: 46.202.232.0/22 maxlen: 24
46.202.240.0/22 maxlen: 24
46.203.108.0/22 maxlen: 24
46.203.116.0/22 maxlen: 24
46.203.128.0/22 maxlen: 24
46.203.140.0/22 maxlen: 24
91.124.192.0/24 maxlen: 24
91.124.199.0/24 maxlen: 24
92.113.13.0/24 maxlen: 24
95.135.167.0/24 maxlen: 24
178.92.120.0/24 maxlen: 24
178.93.247.0/24 maxlen: 24
178.95.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:04:1c:46:bb:39:14:88:39:c4:58:1b:89:69:01:2b:f7:02:48:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jul 19 16:14:29 2026 GMT
Not After : Jul 18 16:19:29 2027 GMT
Subject: CN=7B0F58D21A4D94ACAE357CE89C7CEBA1DDB06AAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d4:fe:02:48:39:42:a9:50:65:a2:e8:71:d7:
4f:1d:02:78:c4:00:10:1b:86:be:38:f2:2e:2a:36:
68:55:25:87:a9:ba:36:7c:1d:ea:9c:cd:e8:cb:56:
ab:29:be:59:bd:6a:e5:9f:8e:6f:5d:24:05:99:d6:
3b:6e:f1:e7:ed:a4:cc:d9:d0:1c:8e:3e:ed:0b:f0:
b0:02:b1:83:89:ca:db:c2:a5:24:5c:05:7e:6e:a2:
ce:83:bf:4e:7f:cd:17:2a:50:3d:8a:87:5d:46:e6:
f2:4e:e1:16:dc:7b:4d:f2:40:a9:e9:8b:b7:36:2f:
9d:bc:c1:28:99:36:17:dd:40:d4:aa:a3:b0:03:83:
c2:f7:25:14:e0:78:aa:5f:f1:3c:9b:f1:64:ec:ef:
02:08:ce:a4:ce:5e:71:d1:ff:96:ab:5a:9b:ff:c9:
21:b6:fe:47:74:6b:30:34:49:26:ef:e7:69:91:a7:
ea:b3:62:82:08:95:8a:f8:fa:d8:c5:ab:c3:93:10:
71:c7:38:df:b1:d8:7f:b1:d4:03:8f:48:0d:dd:43:
1a:4d:17:43:af:0a:30:00:a0:d1:9e:53:2e:2b:17:
bf:e9:33:8b:ef:33:90:02:00:0f:f0:86:7f:3b:04:
9f:b0:24:14:02:87:ea:da:d2:36:dc:b5:95:da:e3:
21:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:0F:58:D2:1A:4D:94:AC:AE:35:7C:E8:9C:7C:EB:A1:DD:B0:6A:AB
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS16276.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.232.0/22
46.202.240.0/22
46.203.108.0/22
46.203.116.0/22
46.203.128.0/22
46.203.140.0/22
91.124.192.0/24
91.124.199.0/24
92.113.13.0/24
95.135.167.0/24
178.92.120.0/24
178.93.247.0/24
178.95.83.0/24
Signature Algorithm: sha256WithRSAEncryption
62:39:7c:84:a5:f9:06:6a:19:37:cd:be:3b:15:9d:a2:e1:db:
56:33:4d:d2:9a:47:21:c6:4b:45:64:e8:ab:69:9f:f0:d0:b7:
51:a2:95:a8:f1:8b:ba:a3:38:da:da:1c:4b:52:a5:14:a8:c8:
82:25:34:8b:e8:b2:da:77:cd:d5:b8:df:29:76:4c:e5:a5:c3:
a3:62:df:76:b9:a3:ae:00:b7:48:fd:5a:dc:63:af:6c:96:6a:
6e:53:90:90:7a:d0:51:74:9a:60:52:77:ed:c7:54:de:b6:f3:
d3:63:95:c8:1d:93:45:0a:36:4d:85:f5:af:ea:ef:7f:bb:58:
c4:29:ee:f0:34:ec:3d:02:d4:46:db:5d:e9:27:33:06:2a:5c:
1e:01:36:98:23:17:99:d4:3f:3c:9b:87:a9:ee:d4:39:7d:55:
74:1e:fa:ae:fc:e5:b6:4b:c4:84:7e:8c:98:62:c6:69:b9:43:
10:54:2d:9d:70:ab:a6:13:3d:2e:0c:80:70:13:5b:2c:20:06:
e2:fc:bf:29:38:00:e3:92:0b:fc:07:2f:d0:4e:9b:fb:bd:a9:
f0:6e:7c:fd:e7:fc:7e:34:22:fe:48:bd:98:6e:86:c6:1b:e3:
6a:58:5a:e6:b0:30:19:28:ee:4d:83:70:35:5a:9f:d6:f4:c0:
cb:04:ea:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:55:11 2026 by rpki-client