Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402215.roa
File: AS402215.roa (raw, json)
Hash identifier: xda1TJGi/KI0dCHOJ1Wi7hPLzqD4XnAlNxuci1Y0ylM=
Subject key identifier: F5:17:A7:03:84:63:AF:AF:E1:61:82:17:82:35:C2:0E:DB:8B:89:DE
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 1F7F8B5F707EB45A6AD6124C19C445CC2A3E40E1
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402215.roa
Signing time: Thu 23 Jul 2026 16:35:46 +0000
ROA not before: Thu 23 Jul 2026 16:30:46 +0000
ROA not after: Thu 22 Jul 2027 16:35:46 +0000
asID: 402215
IP address blocks: 46.202.98.0/24 maxlen: 24
92.112.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:7f:8b:5f:70:7e:b4:5a:6a:d6:12:4c:19:c4:45:cc:2a:3e:40:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jul 23 16:30:46 2026 GMT
Not After : Jul 22 16:35:46 2027 GMT
Subject: CN=F517A7038463AFAFE16182178235C20EDB8B89DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:30:1a:17:76:1c:bc:86:25:f3:d7:fc:44:ca:
96:c2:8d:09:3e:72:c1:4e:fc:ca:bc:e6:dc:4e:25:
dd:a9:6a:84:94:b7:5e:34:9b:5d:15:a5:91:d3:b5:
d4:b2:dc:b1:39:44:e0:dc:39:40:81:03:bf:04:13:
72:06:7f:88:48:5e:86:19:2a:f2:fa:51:e3:17:09:
72:7c:e5:26:3d:89:d3:45:56:ff:47:32:ba:cc:cb:
b7:51:b5:6e:b4:94:7f:81:9f:e2:52:81:1d:38:6d:
7a:5b:3e:71:4b:fd:7c:fc:f4:b5:36:67:eb:08:f5:
f3:50:ca:b2:6e:d9:aa:1f:d0:b0:be:83:4e:26:93:
fb:30:a0:61:47:23:78:17:e8:97:0c:6d:45:9f:18:
0d:6a:95:30:c7:91:c3:af:69:ad:21:f2:d3:0e:29:
87:0a:ef:b3:3b:2d:39:f4:75:39:3b:1b:d6:b5:e6:
fc:65:94:91:5f:c1:ad:03:1e:a1:81:4d:e5:fd:1e:
53:f8:3e:14:40:35:69:93:53:05:93:a3:93:df:8c:
d8:de:27:0b:f5:72:8f:c4:25:8c:13:82:b8:21:d5:
1d:5b:5d:f1:63:65:1e:7a:c2:49:05:2f:8b:dc:42:
e5:d1:34:df:36:d8:31:8a:98:bb:a5:92:ce:f6:92:
ce:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:17:A7:03:84:63:AF:AF:E1:61:82:17:82:35:C2:0E:DB:8B:89:DE
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402215.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.98.0/24
92.112.47.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:de:5d:14:c5:3f:9a:db:dd:95:fd:3f:86:bc:79:2b:1a:29:
c3:34:00:13:eb:44:c5:bd:27:22:8f:8b:f8:bd:a3:52:f7:83:
f1:24:f5:be:40:1c:84:10:6b:0f:ee:56:98:c8:11:0d:2d:21:
9b:0d:0d:02:7d:57:46:5d:48:ea:73:08:fe:9c:0f:22:b6:35:
dc:2b:de:8c:f3:20:49:0c:4d:5d:60:42:4e:a6:74:77:74:c7:
da:00:04:1e:41:14:11:08:ce:f7:88:9a:d3:29:83:41:f7:69:
a8:cc:83:ef:63:23:5d:eb:80:1d:83:aa:0f:f5:8d:26:6e:35:
30:23:d2:42:72:92:5d:54:ce:f8:91:b3:f8:cd:a5:b8:48:5c:
f3:fa:46:4f:79:80:5e:a6:af:91:dc:27:c6:06:e4:c9:0e:cd:
7b:fb:4c:e8:1f:74:02:93:66:08:83:8b:79:68:8e:80:a0:6d:
29:c9:61:3d:50:27:22:3e:13:79:b3:60:98:0e:c6:42:86:04:
50:f1:d2:78:64:1a:5c:f6:ff:69:ad:22:8b:be:a7:98:5d:3e:
4e:e4:3f:14:9e:7f:44:66:b8:a7:45:32:85:53:cf:f7:68:e7:
76:4e:5f:2a:70:07:41:82:dd:88:d2:e6:13:8d:bb:58:94:f0:
52:89:3a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:31:46 2026 by rpki-client