Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS16276.roa
File: AS16276.roa (raw, json)
Hash identifier: sZUlhAwyrgl3QGyqaYXyO9mtihP4VCvS90apo9p56NQ=
Subject key identifier: 6C:D9:5A:66:B3:35:B5:48:03:F7:0D:C8:7D:74:95:33:53:3C:48:F5
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 542E39B65E1B1CC03B973628B573A3DFBB5171DD
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS16276.roa
Signing time: Thu 16 Oct 2025 09:04:08 +0000
ROA not before: Thu 16 Oct 2025 08:59:08 +0000
ROA not after: Thu 15 Oct 2026 09:04:08 +0000
asID: 16276
IP address blocks: 46.202.232.0/22 maxlen: 24
46.202.240.0/22 maxlen: 24
46.203.108.0/22 maxlen: 24
46.203.116.0/22 maxlen: 24
46.203.128.0/22 maxlen: 24
46.203.140.0/22 maxlen: 24
91.124.192.0/24 maxlen: 24
91.124.199.0/24 maxlen: 24
92.113.13.0/24 maxlen: 24
92.113.67.0/24 maxlen: 24
92.113.74.0/24 maxlen: 24
92.113.77.0/24 maxlen: 24
92.113.80.0/24 maxlen: 24
92.113.230.0/24 maxlen: 24
178.95.26.0/24 maxlen: 24
178.95.113.0/24 maxlen: 24
178.95.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:2e:39:b6:5e:1b:1c:c0:3b:97:36:28:b5:73:a3:df:bb:51:71:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 16 08:59:08 2025 GMT
Not After : Oct 15 09:04:08 2026 GMT
Subject: CN=6CD95A66B335B54803F70DC87D749533533C48F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1e:39:a3:cf:fa:cd:15:58:2e:22:d2:da:bc:
33:68:ca:98:53:68:b7:f5:89:a2:39:c0:9a:b0:7d:
38:e0:33:82:0d:3c:73:da:d8:45:72:42:53:40:06:
e6:73:b3:4b:6a:92:3e:c9:de:0a:5d:09:ec:62:15:
5f:25:10:48:c9:be:19:d7:ef:1f:31:ff:e9:2e:73:
8f:4f:43:bb:3a:1c:0b:61:1e:3b:37:b3:86:28:8f:
e4:42:f4:07:88:0a:de:72:29:29:29:cd:e0:32:ed:
96:06:e9:96:86:fe:f8:fe:f3:e3:78:42:85:4f:a7:
ab:ce:29:30:92:9b:5d:e7:67:b8:b1:57:e3:b4:cb:
03:c7:b5:1c:f1:17:47:db:ab:66:70:73:e8:10:94:
cd:36:7f:2c:46:74:c7:0f:c4:9d:23:64:7a:f5:01:
f2:a7:ec:ae:5f:86:d3:c4:2c:95:58:ee:ad:0c:ad:
a9:63:19:f9:bf:3d:4f:89:dd:31:e5:1c:76:05:0a:
27:18:26:5b:aa:f2:e4:b0:16:72:e2:8a:29:76:a7:
ad:1c:17:f5:69:f7:3a:19:18:2e:8b:ef:cf:18:b9:
98:cb:6e:75:81:3d:44:29:fe:e0:dc:92:37:ee:fd:
57:c8:51:6d:19:ee:b4:d9:4e:4c:63:6f:33:57:b6:
36:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D9:5A:66:B3:35:B5:48:03:F7:0D:C8:7D:74:95:33:53:3C:48:F5
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS16276.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.232.0/22
46.202.240.0/22
46.203.108.0/22
46.203.116.0/22
46.203.128.0/22
46.203.140.0/22
91.124.192.0/24
91.124.199.0/24
92.113.13.0/24
92.113.67.0/24
92.113.74.0/24
92.113.77.0/24
92.113.80.0/24
92.113.230.0/24
178.95.26.0/24
178.95.113.0/24
178.95.161.0/24
Signature Algorithm: sha256WithRSAEncryption
90:f8:62:ea:07:c7:7f:14:0a:7b:ab:be:e9:99:cc:04:28:a3:
93:1c:cb:68:08:91:d8:32:51:e2:fb:cd:8d:b9:7a:21:72:a6:
35:3b:91:3d:b2:70:a2:fd:83:fa:41:4e:19:e2:a0:b8:59:cd:
84:2d:a2:bb:76:2c:88:a6:79:7d:8b:82:fd:12:d2:ba:c2:9e:
d2:04:98:45:c0:70:9f:c2:25:61:be:e7:c4:eb:4f:91:b6:ea:
54:12:b0:24:93:68:95:e8:f9:a8:e7:5c:3b:6b:16:7b:fd:8b:
67:74:f1:bc:69:7e:0d:84:35:66:17:47:b5:ab:13:44:29:59:
37:0a:03:ad:63:11:cd:db:e5:fc:93:b0:4f:1c:61:0d:67:5e:
05:78:de:a4:4f:d5:66:9f:8a:6e:6d:7a:68:24:2f:fa:00:20:
65:13:32:a5:d0:8e:b3:c2:27:5a:15:37:77:3c:bb:e5:f2:5f:
00:42:41:90:80:5d:5a:68:b0:14:13:c3:84:e9:e4:3c:04:de:
e9:f5:0b:dd:e5:3d:93:62:fe:97:e6:ae:f3:03:52:0b:f8:32:
b1:96:b1:f0:f8:f2:a2:3e:ce:7f:c6:39:da:fd:02:c3:2c:a1:
c2:42:d1:ba:c1:e3:c5:90:26:8e:71:5f:e5:28:57:c6:a0:c9:
87:0d:5f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:33:33 2025 by rpki-client