Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS401776.roa
File: AS401776.roa (raw, json)
Hash identifier: xCaTEJYvdk7NJHdh2qOQU7ICs0fH4CMq90nR1/gvjfw=
Subject key identifier: 6D:3E:0F:8A:00:0B:51:A4:A8:D5:E5:B6:27:BA:E1:67:85:2A:50:D3
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 372D73CB3DF370BB8DB725BC1CF6B3CB8F17D84E
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS401776.roa
Signing time: Mon 23 Mar 2026 13:08:29 +0000
ROA not before: Mon 23 Mar 2026 13:03:29 +0000
ROA not after: Mon 22 Mar 2027 13:08:29 +0000
asID: 401776
IP address blocks: 46.202.32.0/24 maxlen: 24
178.92.14.0/24 maxlen: 24
178.93.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:2d:73:cb:3d:f3:70:bb:8d:b7:25:bc:1c:f6:b3:cb:8f:17:d8:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Mar 23 13:03:29 2026 GMT
Not After : Mar 22 13:08:29 2027 GMT
Subject: CN=6D3E0F8A000B51A4A8D5E5B627BAE167852A50D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3e:c3:10:6b:16:15:44:8f:02:e5:ca:5c:8f:
8a:89:ef:ed:19:2b:fb:fd:cf:ee:8e:e4:69:89:06:
2a:8f:d0:9e:40:cf:32:cd:14:dc:51:79:c0:52:3b:
a9:93:79:7f:6f:54:f4:07:43:07:02:57:5a:b8:71:
39:8a:06:16:02:98:d1:b2:92:3a:2a:ee:0d:4d:58:
6d:a9:1d:a3:ad:01:fe:4b:42:9f:ef:a4:2c:5f:dc:
9e:c2:19:33:70:b0:0f:2f:52:d3:47:da:71:2b:24:
3c:20:6e:2b:e4:67:83:53:65:03:8d:d7:c3:10:dd:
4c:41:d9:73:fa:0a:0c:70:ef:0c:63:90:ee:62:c2:
c9:e0:60:41:1e:0b:7a:99:64:e9:af:10:a4:2f:fa:
fc:2b:48:2f:95:9f:fc:29:d8:d6:e8:dd:5d:f9:33:
ea:3b:4f:b2:34:d0:cf:54:d3:65:ca:7e:26:da:99:
47:e3:b2:9b:53:21:c0:70:d2:32:0c:f1:db:fe:e1:
d4:75:45:44:ad:1c:cd:60:c0:04:88:50:13:e8:ca:
be:0a:89:6d:29:70:9e:44:87:a2:e8:f8:fa:d3:18:
0f:d3:59:ec:32:b0:0a:1c:c6:ee:1d:b4:a6:e5:44:
c2:8b:3a:a2:89:3e:35:48:b4:e8:54:40:3e:26:fb:
46:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:3E:0F:8A:00:0B:51:A4:A8:D5:E5:B6:27:BA:E1:67:85:2A:50:D3
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS401776.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.32.0/24
178.92.14.0/24
178.93.97.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:33:f6:7c:95:7e:c3:4b:8f:de:a8:2f:9c:68:a3:09:c0:21:
d0:e4:60:91:9f:92:2d:11:99:65:d4:79:25:ad:73:d2:e6:e6:
ea:93:f4:1c:09:0c:be:33:05:80:cf:3d:70:a4:1b:dc:bf:65:
4f:3c:6e:37:0e:37:dd:b7:75:5d:16:f3:92:b9:62:2c:14:9c:
cb:62:0e:b6:6a:28:6b:f3:98:f7:0a:87:b7:7d:a9:96:b7:29:
2a:16:dc:65:9f:66:53:9f:ee:e3:b8:7c:64:eb:75:05:2b:64:
db:6b:9c:2d:16:d8:df:a5:ca:12:03:69:47:98:f9:c3:50:59:
c9:d9:21:86:fd:35:e8:f5:1f:57:50:50:9d:01:65:91:1d:d3:
70:d6:d8:a6:46:a8:d5:fc:50:59:97:7e:46:56:be:9f:60:49:
05:93:95:01:8f:07:2c:42:85:ef:a0:4d:db:ef:3a:9b:1f:ac:
98:60:dc:2d:7a:7d:78:22:31:87:0e:a6:ac:c3:48:2d:f5:a9:
18:c8:bc:c8:0b:e2:9e:9e:db:88:90:a3:8c:f1:ba:4a:97:37:
df:14:66:9b:9f:fc:85:8a:6d:f6:a4:41:84:3f:d7:44:d7:09:
e4:55:b1:05:48:ed:4c:a6:6a:63:b9:f7:aa:7d:c2:69:e5:30:
89:7d:bc:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:48:23 2026 by rpki-client