Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402236.roa
File: AS402236.roa (raw, json)
Hash identifier: yPMuhXouAarV01qHvXaJChIFj6hsSRm4M7zdYv2yd/0=
Subject key identifier: 45:FE:5B:5B:28:C8:EE:57:08:94:D5:FF:47:E2:69:E7:41:E0:7B:95
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 5D5AC51DFD80A0512EBBCDFAE939B09E7A3C0F2E
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402236.roa
Signing time: Wed 11 Nov 2026 00:01:41 +0000
ROA not before: Tue 10 Nov 2026 23:56:41 +0000
ROA not after: Wed 10 Nov 2027 00:01:41 +0000
asID: 402236
IP address blocks: 46.203.107.0/24 maxlen: 24
46.203.114.0/24 maxlen: 24
46.203.145.0/24 maxlen: 24
46.203.146.0/24 maxlen: 24
46.203.168.0/24 maxlen: 24
46.203.169.0/24 maxlen: 24
46.203.171.0/24 maxlen: 24
46.203.174.0/24 maxlen: 24
46.203.177.0/24 maxlen: 24
46.203.179.0/24 maxlen: 24
92.112.6.0/24 maxlen: 24
92.112.8.0/24 maxlen: 24
92.112.55.0/24 maxlen: 24
92.112.62.0/24 maxlen: 24
92.112.89.0/24 maxlen: 24
92.113.6.0/24 maxlen: 24
92.113.15.0/24 maxlen: 24
92.113.40.0/24 maxlen: 24
95.134.184.0/24 maxlen: 24
95.134.204.0/24 maxlen: 24
95.134.206.0/24 maxlen: 24
95.134.221.0/24 maxlen: 24
95.134.223.0/24 maxlen: 24
95.135.72.0/24 maxlen: 24
178.95.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 14:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:5a:c5:1d:fd:80:a0:51:2e:bb:cd:fa:e9:39:b0:9e:7a:3c:0f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Nov 10 23:56:41 2026 GMT
Not After : Nov 10 00:01:41 2027 GMT
Subject: CN=45FE5B5B28C8EE570894D5FF47E269E741E07B95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:91:c9:73:72:6c:6b:0f:c7:b7:b7:da:b5:f0:
66:7b:5a:e8:b5:ed:5c:f3:89:55:bc:19:67:de:d5:
d6:93:d8:1a:98:1f:77:15:ed:d2:67:dd:7d:b8:35:
21:60:a8:0d:02:3d:f7:b6:21:02:2c:43:b2:c4:77:
87:6c:58:75:18:76:3d:67:6f:d3:db:8d:fd:5f:9d:
44:d4:79:04:d4:82:58:52:ce:9d:32:59:bc:b4:c0:
78:41:01:04:b7:c4:3a:80:96:45:6f:6d:4c:2b:bd:
60:6a:6e:bb:64:64:04:12:c4:f7:ab:da:c8:64:29:
64:d1:1d:69:e3:fa:a1:89:4d:c4:c3:79:4b:4e:13:
dd:75:9a:dd:5e:a4:da:5e:93:84:d7:6e:c3:af:a4:
cb:9c:33:13:16:84:05:36:75:a2:7e:31:aa:b9:1c:
74:46:25:f8:1f:bd:ac:ed:9a:f8:77:69:32:c1:ae:
55:d8:af:21:36:52:ba:ec:1f:20:87:e8:c7:11:c6:
d6:fb:4a:96:57:36:17:3e:cb:39:72:48:f7:44:8b:
27:dd:1f:15:32:8b:3e:81:b7:13:bc:ba:3a:e4:64:
fe:7a:c7:45:4c:6e:ea:43:41:99:eb:bd:9a:bb:cd:
49:26:84:97:55:9d:3d:cb:6e:fe:7a:65:f2:be:f2:
db:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:FE:5B:5B:28:C8:EE:57:08:94:D5:FF:47:E2:69:E7:41:E0:7B:95
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.107.0/24
46.203.114.0/24
46.203.145.0-46.203.146.255
46.203.168.0/23
46.203.171.0/24
46.203.174.0/24
46.203.177.0/24
46.203.179.0/24
92.112.6.0/24
92.112.8.0/24
92.112.55.0/24
92.112.62.0/24
92.112.89.0/24
92.113.6.0/24
92.113.15.0/24
92.113.40.0/24
95.134.184.0/24
95.134.204.0/24
95.134.206.0/24
95.134.221.0/24
95.134.223.0/24
95.135.72.0/24
178.95.230.0/24
Signature Algorithm: sha256WithRSAEncryption
83:3d:14:46:ad:85:6c:6c:d5:d9:df:be:6c:81:bd:2f:db:53:
eb:dd:f6:14:75:6f:3e:d8:04:38:c3:fa:a2:12:31:bb:3d:a6:
ca:25:42:4f:52:fa:ed:90:50:f0:d7:e8:09:fe:56:fb:a9:04:
ae:3f:a9:83:7e:a0:ac:99:48:82:d7:7d:b9:15:7a:55:75:cd:
a6:35:75:0b:ce:ba:37:c3:c2:d8:f0:23:01:68:52:75:37:45:
2b:e5:0c:25:60:e8:f7:a8:b8:7a:ba:ce:35:78:07:d5:bb:ba:
6b:5e:48:8c:64:25:6d:b4:13:76:63:a3:9b:96:26:e5:40:ea:
91:43:8c:45:6a:2e:88:8b:fa:55:10:7f:a1:fd:35:27:3d:2a:
d4:d4:de:ae:7c:c9:57:fe:78:f4:a3:02:c4:bf:68:78:f8:70:
3a:70:0f:93:e9:5f:d9:4b:6f:c9:d7:4a:75:a3:56:0a:f9:1e:
3c:bd:bd:a0:0c:b5:b9:2b:d8:b0:5e:5d:1f:40:5c:60:80:b8:
68:5c:62:7c:06:16:11:5d:5a:dd:9d:3f:d8:28:5c:75:c4:7e:
a4:dc:c9:f5:75:a4:af:2b:05:7c:a3:89:5c:24:0a:51:9f:f6:
2e:df:a9:74:d3:dd:85:94:4b:22:a6:ac:76:80:f9:f6:ca:d6:
78:6c:d5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 23:16:04 2026 by rpki-client