This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS16276.roa
File:                     AS16276.roa (raw, json)
Hash identifier:          tTt9zUeZNYjM6GEJ0betEf1I9+iYU2iL4hAsGKQio58=
Subject key identifier:   92:27:95:81:A5:84:25:18:EB:17:CD:3D:05:96:31:00:3D:40:08:D8
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       1F86424F8FF0431DE8CA287056C6DCB2B056F9B1
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS16276.roa
Signing time:             Tue 02 Dec 2025 06:29:24 +0000
ROA not before:           Tue 02 Dec 2025 06:24:24 +0000
ROA not after:            Tue 01 Dec 2026 06:29:24 +0000
asID:                     16276
IP address blocks:        46.202.39.0/24 maxlen: 24
                          46.202.232.0/22 maxlen: 24
                          46.202.240.0/22 maxlen: 24
                          46.203.108.0/22 maxlen: 24
                          46.203.116.0/22 maxlen: 24
                          46.203.128.0/22 maxlen: 24
                          46.203.140.0/22 maxlen: 24
                          46.203.188.0/24 maxlen: 24
                          91.124.43.0/24 maxlen: 24
                          91.124.99.0/24 maxlen: 24
                          91.124.192.0/24 maxlen: 24
                          91.124.196.0/24 maxlen: 24
                          91.124.199.0/24 maxlen: 24
                          92.113.13.0/24 maxlen: 24
                          92.113.67.0/24 maxlen: 24
                          92.113.74.0/24 maxlen: 24
                          92.113.77.0/24 maxlen: 24
                          92.113.80.0/24 maxlen: 24
                          178.93.237.0/24 maxlen: 24
                          178.95.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 22:58:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:86:42:4f:8f:f0:43:1d:e8:ca:28:70:56:c6:dc:b2:b0:56:f9:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Dec  2 06:24:24 2025 GMT
            Not After : Dec  1 06:29:24 2026 GMT
        Subject: CN=92279581A5842518EB17CD3D059631003D4008D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:94:8f:4c:28:43:97:0b:18:fd:53:d8:63:64:
                    b7:41:82:b4:b4:49:fb:4e:28:79:6e:b3:01:69:2a:
                    5c:3c:85:9b:d6:d0:68:5e:47:ec:25:22:23:30:05:
                    f6:89:22:b2:a3:e8:9c:b8:d3:67:fe:4a:58:2e:9d:
                    25:02:ba:52:96:ff:10:bf:05:a7:b1:b3:0b:a5:0a:
                    46:7d:44:d7:11:81:88:3d:92:b0:ce:1b:c0:c5:3c:
                    8f:d1:e2:16:8d:3b:c5:a0:80:06:c3:d3:13:aa:82:
                    e9:e4:a8:b0:f0:55:fa:c7:37:85:73:e3:80:8c:1d:
                    e8:c7:38:7c:91:f4:af:0a:fe:bc:1b:45:61:d2:9d:
                    3a:b7:a6:78:76:76:f1:d7:fb:55:9d:6a:92:cd:d0:
                    ae:32:40:a3:fa:fa:3e:9b:65:6c:ea:0e:29:ce:91:
                    6d:c4:f7:a1:74:15:80:81:6a:aa:35:49:11:91:cb:
                    e4:72:ee:05:8e:4a:07:5d:dc:d8:19:8a:d2:5f:c8:
                    c2:36:c2:eb:63:7b:14:ec:3b:4f:fa:75:4e:54:50:
                    fd:bf:06:bc:d6:12:41:f4:d2:1d:51:5b:30:08:56:
                    c6:35:4f:bf:10:68:c0:cd:14:de:04:18:28:99:d0:
                    f6:b5:88:d8:64:2a:f5:ee:5d:ff:55:bc:e7:83:f6:
                    e6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:27:95:81:A5:84:25:18:EB:17:CD:3D:05:96:31:00:3D:40:08:D8
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS16276.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.202.39.0/24
                  46.202.232.0/22
                  46.202.240.0/22
                  46.203.108.0/22
                  46.203.116.0/22
                  46.203.128.0/22
                  46.203.140.0/22
                  46.203.188.0/24
                  91.124.43.0/24
                  91.124.99.0/24
                  91.124.192.0/24
                  91.124.196.0/24
                  91.124.199.0/24
                  92.113.13.0/24
                  92.113.67.0/24
                  92.113.74.0/24
                  92.113.77.0/24
                  92.113.80.0/24
                  178.93.237.0/24
                  178.95.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:23:9c:39:9d:04:37:fc:ec:4f:1a:56:db:b1:92:4e:7b:f3:
         f1:2b:d3:4e:d8:79:a1:bb:95:05:ff:73:c5:7c:df:32:4d:0d:
         30:86:20:2c:b0:24:06:2d:30:71:67:52:a8:59:6d:3d:8c:f4:
         f5:34:0e:11:c3:44:18:a3:e1:b4:69:ab:18:0e:dd:88:09:1f:
         24:cc:83:89:2e:8e:87:bd:44:1a:7e:5e:3b:2e:77:fa:61:10:
         fb:5e:6d:88:52:5f:e8:4e:ce:e6:d6:82:2b:b0:38:a4:84:8a:
         fb:f0:ba:10:ea:29:93:d4:b0:7a:ce:a4:0e:e0:80:f6:18:39:
         6e:e7:11:92:50:3a:92:fc:ca:17:6d:1d:eb:4a:7e:37:54:ae:
         f4:dd:2a:4b:ff:04:e7:c8:cb:8b:77:8d:a8:9c:c8:1d:ae:52:
         b3:56:dc:af:b3:89:fe:4d:08:12:01:18:9f:9a:59:ee:1a:7b:
         c0:e1:ca:1f:8d:9f:35:6a:89:18:21:5c:90:a0:3a:18:77:28:
         d6:b3:58:f7:82:2f:24:a6:f1:35:e1:ef:63:d3:73:ce:40:3c:
         90:4c:40:10:a0:eb:9e:b6:a8:98:c9:1c:37:03:f2:60:a4:73:
         29:8a:34:8f:cd:53:16:65:a6:eb:05:06:01:55:20:1f:c4:63:
         62:5a:57:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:43:13 2025 by rpki-client