Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS16276.roa
File: AS16276.roa (raw, json)
Hash identifier: 7GXMBXKHVGa5rwYdZakYX/aFnyEgm9dJkgUOBDcn5ZI=
Subject key identifier: 5E:1A:4E:8F:E2:16:41:54:4C:02:79:7A:5B:BE:09:AB:59:A0:49:D7
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 058CD469285FFA2562677F2883BE1EB7FEC31CBF
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS16276.roa
Signing time: Tue 24 Jun 2025 08:56:01 +0000
ROA not before: Tue 24 Jun 2025 08:51:01 +0000
ROA not after: Tue 23 Jun 2026 08:56:01 +0000
asID: 16276
IP address blocks: 91.124.192.0/24 maxlen: 24
91.124.199.0/24 maxlen: 24
91.124.209.0/24 maxlen: 24
92.113.13.0/24 maxlen: 24
92.113.67.0/24 maxlen: 24
92.113.74.0/24 maxlen: 24
92.113.77.0/24 maxlen: 24
92.113.80.0/24 maxlen: 24
95.135.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:8c:d4:69:28:5f:fa:25:62:67:7f:28:83:be:1e:b7:fe:c3:1c:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jun 24 08:51:01 2025 GMT
Not After : Jun 23 08:56:01 2026 GMT
Subject: CN=5E1A4E8FE21641544C02797A5BBE09AB59A049D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:17:74:84:53:ea:5c:31:4c:7f:10:93:c9:36:
41:fa:ff:b5:8d:55:45:66:3a:14:b7:b9:14:75:66:
c2:2c:96:fc:5f:e6:95:2c:11:a9:a9:db:92:6e:49:
0e:9d:67:c2:da:7f:29:81:67:ff:be:d2:c8:08:1d:
07:3e:46:d4:59:41:91:bb:00:7d:0a:db:a1:3a:f9:
ec:3a:2e:32:34:9f:3c:09:96:86:16:bc:5c:9a:8a:
79:54:5f:0d:eb:e7:cf:c6:f7:2f:fb:eb:62:32:6d:
01:2e:f2:2e:46:87:f3:64:80:fe:7a:17:c9:b7:36:
a8:1b:d8:4e:e0:4f:b1:5f:21:2a:da:78:b3:f5:3a:
d1:b5:ad:8f:26:24:cc:2a:27:28:12:b8:23:ea:77:
42:21:89:e2:6d:be:21:c0:52:2f:91:ea:33:72:87:
71:fe:1d:84:f5:7c:77:27:b6:88:96:c5:78:a8:07:
34:dd:77:34:47:43:64:b3:8b:00:2a:b1:2e:a3:bd:
62:a0:b5:ab:fa:20:01:56:0d:2e:67:09:35:70:65:
cf:14:87:75:96:d3:5e:60:cb:3c:75:32:8c:a6:70:
8d:15:98:90:f6:af:46:bc:ab:19:b1:b3:3e:49:af:
c2:85:78:d1:be:4a:59:7c:b7:f8:c0:18:ee:9a:63:
3a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:1A:4E:8F:E2:16:41:54:4C:02:79:7A:5B:BE:09:AB:59:A0:49:D7
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS16276.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.192.0/24
91.124.199.0/24
91.124.209.0/24
92.113.13.0/24
92.113.67.0/24
92.113.74.0/24
92.113.77.0/24
92.113.80.0/24
95.135.58.0/24
Signature Algorithm: sha256WithRSAEncryption
39:09:16:e2:96:ca:75:95:13:ad:58:88:02:e4:52:65:a8:6e:
ae:c8:71:ac:e3:41:27:86:59:1c:b1:f0:97:7a:30:63:71:3b:
93:c9:67:2e:de:64:45:95:a5:6e:9c:4c:9f:81:2d:e4:4d:72:
49:eb:49:72:9f:0b:24:65:1b:93:b3:76:4f:44:9b:30:55:ff:
00:a3:93:33:71:fa:98:8e:a6:fc:2c:e0:43:cc:de:c3:17:ae:
4d:d0:9a:15:94:c5:50:e6:97:e9:e1:af:cf:b5:f0:37:b2:fc:
19:3c:27:f7:53:a8:a6:b2:c1:26:d7:36:49:4f:7e:9f:c0:61:
51:6e:62:f6:41:e7:93:d6:68:2c:d5:ac:86:40:6b:d3:78:bc:
c8:1f:8a:f3:65:68:22:d6:f5:37:0b:98:00:19:4f:20:e1:ef:
e0:27:3d:a1:c4:c3:2f:99:14:25:39:cc:07:eb:48:29:cb:40:
30:ab:a4:56:3f:09:db:55:c3:de:eb:a0:bf:12:e5:db:69:f3:
69:cf:a3:ea:7c:57:25:74:43:53:23:b6:6f:62:aa:0d:fb:32:
e5:81:f9:8c:b7:46:d7:c9:b4:86:64:95:19:67:7a:0a:d8:da:
ad:80:88:31:bb:90:ec:7f:fb:20:df:1c:8c:e5:49:49:d0:76:
38:6a:b3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:53:38 2025 by rpki-client