Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402215.roa
File: AS402215.roa (raw, json)
Hash identifier: 1PCJuwFGbNwtkHPYuhH0TLCjMCdIP231I/7JcLqa5fg=
Subject key identifier: 92:9E:FB:AE:9E:18:35:83:CF:A9:F0:91:63:F4:7C:69:E5:82:E4:8B
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 71D53791BC86568C672E5729CB525A5C6CD52F3B
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402215.roa
Signing time: Fri 08 May 2026 13:01:58 +0000
ROA not before: Fri 08 May 2026 12:56:58 +0000
ROA not after: Fri 07 May 2027 13:01:58 +0000
asID: 402215
IP address blocks: 46.202.14.0/24 maxlen: 24
46.202.41.0/24 maxlen: 24
46.202.49.0/24 maxlen: 24
46.202.84.0/24 maxlen: 24
46.203.38.0/24 maxlen: 24
46.203.87.0/24 maxlen: 24
46.203.124.0/24 maxlen: 24
91.124.10.0/24 maxlen: 24
91.124.11.0/24 maxlen: 24
92.113.42.0/24 maxlen: 24
178.94.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:d5:37:91:bc:86:56:8c:67:2e:57:29:cb:52:5a:5c:6c:d5:2f:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: May 8 12:56:58 2026 GMT
Not After : May 7 13:01:58 2027 GMT
Subject: CN=929EFBAE9E183583CFA9F09163F47C69E582E48B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:22:69:4c:3f:26:b9:97:e4:f0:92:b3:2c:f0:
7a:36:ee:0d:ab:ca:a4:f9:de:7d:e5:0b:4e:d0:fc:
04:9d:f6:0a:09:0c:a2:a9:10:68:1c:c6:48:85:11:
97:10:d0:3a:2c:cf:52:8c:a7:9c:01:58:c7:71:d6:
e8:8a:9d:65:72:e1:5f:77:e3:07:b5:49:e3:00:cc:
aa:b3:1b:42:0d:f7:bf:5e:45:7c:a1:1a:1f:c5:61:
b6:35:b2:d3:7b:66:46:67:70:78:dc:9a:e3:7e:ae:
46:e4:5c:c2:d4:dc:8f:2e:24:36:2f:2e:7d:87:1f:
c2:6b:53:ad:d0:3a:f9:fd:13:7d:a2:ad:b9:b0:bc:
64:39:2c:ae:1a:ab:5f:f0:a6:92:5f:2e:59:20:33:
f7:b6:5d:e5:f1:2f:4d:da:bb:52:0b:d4:e1:c0:fb:
fe:f3:87:84:3c:cb:ed:d0:68:24:59:ae:00:ad:2e:
da:b0:09:a9:a0:a7:e0:9d:bf:7c:b3:77:e3:13:99:
45:45:00:61:f7:fc:60:a4:22:81:4e:2c:ff:37:db:
2a:0f:ec:7e:58:b9:f6:f7:cb:01:9a:76:4e:b2:30:
cb:e1:fb:59:7b:b6:ad:53:6a:03:76:fc:6d:d9:ee:
37:7a:c8:a0:d0:f9:7c:05:b0:0e:1c:bc:d7:fa:1c:
cf:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:9E:FB:AE:9E:18:35:83:CF:A9:F0:91:63:F4:7C:69:E5:82:E4:8B
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402215.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.14.0/24
46.202.41.0/24
46.202.49.0/24
46.202.84.0/24
46.203.38.0/24
46.203.87.0/24
46.203.124.0/24
91.124.10.0/23
92.113.42.0/24
178.94.177.0/24
Signature Algorithm: sha256WithRSAEncryption
91:5f:77:b8:a4:78:1f:ce:9c:91:cc:f2:8b:96:b4:b7:33:fd:
71:5f:f7:4a:4d:6d:85:5c:46:89:45:23:e7:cb:87:2e:5d:cd:
66:39:fc:a5:9a:53:57:bb:83:8e:92:8b:bb:55:42:95:e8:51:
0a:1f:9d:8c:e5:d9:4e:ab:cc:f1:d2:0c:a1:58:4f:a0:68:13:
90:ae:d3:e6:f5:6f:df:f6:c2:fe:ef:22:27:0a:ea:16:b0:66:
d5:a6:b7:b7:f3:88:8e:25:23:8f:c2:41:c0:7a:f3:40:f3:ca:
29:2f:b7:35:59:b6:dc:af:1f:b4:a1:bd:6a:cc:9c:12:eb:47:
f3:1e:c2:2b:36:05:51:fc:89:d4:8b:a7:22:80:c3:c6:25:9b:
40:fa:ea:40:8d:30:70:01:80:ec:29:c4:37:3c:c5:fa:ed:fc:
21:00:9f:d9:ab:4f:68:35:48:b7:9c:a1:69:f7:76:e5:99:cc:
94:26:f8:ac:8f:b5:c2:17:7c:83:c8:df:06:ca:75:b4:94:35:
1f:1c:10:68:7a:37:b1:21:b1:75:1e:c7:a8:4e:6c:9e:de:8d:
c2:fd:48:9d:42:91:47:4a:a2:c7:90:a8:3a:64:53:c7:06:d5:
10:a5:c0:5f:42:52:65:53:66:25:e9:b8:79:80:bc:48:24:b3:
78:d7:94:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:34:56 2026 by rpki-client