Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS16276.roa
File: AS16276.roa (raw, json)
Hash identifier: 1LdjtayUnIzoouXXmHuWF8WFtcdlg1J8czSnH+pUM9Q=
Subject key identifier: 88:6B:71:52:0B:B5:7D:33:62:8D:98:A9:01:1D:91:F2:34:79:96:0F
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 18F2DAECCDC8F1D48082366821A38D0C4B792E57
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS16276.roa
Signing time: Tue 12 May 2026 15:12:01 +0000
ROA not before: Tue 12 May 2026 15:07:01 +0000
ROA not after: Tue 11 May 2027 15:12:01 +0000
asID: 16276
IP address blocks: 46.202.232.0/22 maxlen: 24
46.202.240.0/22 maxlen: 24
46.203.108.0/22 maxlen: 24
46.203.116.0/22 maxlen: 24
46.203.128.0/22 maxlen: 24
46.203.140.0/22 maxlen: 24
91.124.192.0/24 maxlen: 24
91.124.199.0/24 maxlen: 24
92.113.13.0/24 maxlen: 24
92.113.67.0/24 maxlen: 24
92.113.74.0/24 maxlen: 24
92.113.77.0/24 maxlen: 24
92.113.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:f2:da:ec:cd:c8:f1:d4:80:82:36:68:21:a3:8d:0c:4b:79:2e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: May 12 15:07:01 2026 GMT
Not After : May 11 15:12:01 2027 GMT
Subject: CN=886B71520BB57D33628D98A9011D91F23479960F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:95:f1:0c:81:ed:bc:a3:7e:41:86:83:c7:e0:
67:28:05:0e:63:ad:88:4f:9c:bf:e4:34:25:d0:cf:
33:33:42:7b:c5:06:0d:99:12:2f:2b:f3:c2:b2:8f:
87:c7:27:7a:62:24:01:b2:73:bd:bb:06:c6:70:4e:
1d:d4:ae:0e:fe:ad:20:cb:22:d6:fe:4d:07:97:e9:
5e:66:3f:69:ae:c1:05:53:d1:10:ce:24:61:7c:48:
79:d9:e4:b4:58:d4:e2:54:b7:82:65:75:54:11:0a:
28:d9:b6:74:b0:2a:49:f4:c8:c3:de:6b:31:c5:4c:
f6:8a:b4:33:8e:31:c6:1e:ec:ec:1d:70:98:c7:02:
de:41:08:d8:2e:f0:3f:d5:56:77:48:e1:0a:42:fe:
85:7e:6f:48:0c:ba:f2:f4:d1:41:fc:bc:46:74:d9:
93:a5:73:f4:4e:f9:99:c3:1a:4c:a5:e0:77:f6:ad:
93:5f:de:15:24:0b:50:eb:bc:2d:56:64:c1:4d:6b:
27:97:d9:b2:61:32:ae:28:dc:db:2d:3e:c0:7d:cb:
f6:47:f8:fa:c1:49:8b:12:23:aa:c0:9e:ce:0c:f3:
c0:f3:3b:2b:5d:dd:3c:22:f8:1e:b8:29:84:68:d7:
84:71:58:33:2f:50:92:9b:1e:e9:0a:d3:96:ec:17:
d2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:6B:71:52:0B:B5:7D:33:62:8D:98:A9:01:1D:91:F2:34:79:96:0F
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS16276.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.232.0/22
46.202.240.0/22
46.203.108.0/22
46.203.116.0/22
46.203.128.0/22
46.203.140.0/22
91.124.192.0/24
91.124.199.0/24
92.113.13.0/24
92.113.67.0/24
92.113.74.0/24
92.113.77.0/24
92.113.80.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:ab:43:be:60:1c:13:a3:a8:de:5f:6d:ab:00:b5:b5:8c:35:
ff:14:c8:e0:60:ba:3f:db:2d:31:6a:be:f2:4a:5b:20:cb:ce:
96:d3:ee:05:b8:d1:d0:9e:dc:7a:47:28:e2:af:e5:ca:85:2e:
a7:e8:41:cb:4e:c5:05:56:1c:33:0d:72:e1:4a:33:10:b1:98:
83:17:65:f7:bb:53:1f:b5:63:3f:76:e2:bb:88:05:87:73:bf:
3b:20:02:66:ec:75:af:df:0b:43:a7:2d:2c:44:b8:13:57:0f:
39:d6:3d:53:bf:f3:f4:c5:e4:c2:ec:6c:ff:6f:3b:79:8f:ee:
65:28:45:ba:4a:d3:70:e0:de:74:a4:69:2f:81:7c:21:14:42:
7a:3a:88:cf:fc:d6:dc:1f:0d:ac:a2:a2:1c:4b:70:85:59:6f:
17:1b:f5:75:4e:df:83:ec:47:3d:2e:cc:91:83:c0:e5:ef:fe:
76:fd:f0:51:d8:64:56:dc:a1:34:f2:39:54:10:a1:12:48:9b:
c7:28:82:91:94:29:1a:e9:4e:44:18:e1:3f:01:96:28:17:e1:
21:32:22:89:b8:e7:5a:94:89:a3:9b:bb:0c:34:b8:41:08:f0:
0f:bb:7d:36:c9:bf:bc:0e:b9:7f:d4:90:bf:2f:25:d0:b5:84:
3b:f5:46:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:37:48 2026 by rpki-client