Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402265.roa
File: AS402265.roa (raw, json)
Hash identifier: A8p2JbfRchegLVb2NQttBsVSuw2ROyGrVK+hHhAJMkY=
Subject key identifier: 1E:AF:CD:A4:3F:7E:98:36:4E:C5:36:25:02:A0:C1:01:63:50:20:8F
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 41F22C51DB4FBE0AC82C98C95FA217F20FAB9E16
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402265.roa
Signing time: Tue 22 Sep 2026 11:31:50 +0000
ROA not before: Tue 22 Sep 2026 11:26:50 +0000
ROA not after: Tue 21 Sep 2027 11:31:50 +0000
asID: 402265
IP address blocks: 46.202.49.0/24 maxlen: 24
46.202.51.0/24 maxlen: 24
46.202.66.0/24 maxlen: 24
46.202.119.0/24 maxlen: 24
46.203.32.0/24 maxlen: 24
46.203.43.0/24 maxlen: 24
46.203.44.0/24 maxlen: 24
46.203.47.0/24 maxlen: 24
46.203.54.0/24 maxlen: 24
46.203.55.0/24 maxlen: 24
46.203.58.0/24 maxlen: 24
46.203.97.0/24 maxlen: 24
46.203.102.0/24 maxlen: 24
46.203.104.0/24 maxlen: 24
46.203.113.0/24 maxlen: 24
46.203.121.0/24 maxlen: 24
46.203.136.0/24 maxlen: 24
46.203.149.0/24 maxlen: 24
46.203.161.0/24 maxlen: 24
46.203.183.0/24 maxlen: 24
46.203.213.0/24 maxlen: 24
91.124.26.0/24 maxlen: 24
91.124.40.0/24 maxlen: 24
91.124.57.0/24 maxlen: 24
91.124.67.0/24 maxlen: 24
91.124.89.0/24 maxlen: 24
91.124.120.0/24 maxlen: 24
91.124.136.0/24 maxlen: 24
91.124.137.0/24 maxlen: 24
91.124.142.0/24 maxlen: 24
91.124.143.0/24 maxlen: 24
91.124.148.0/24 maxlen: 24
91.124.170.0/24 maxlen: 24
91.124.173.0/24 maxlen: 24
91.124.177.0/24 maxlen: 24
91.124.179.0/24 maxlen: 24
91.124.199.0/24 maxlen: 24
91.124.202.0/24 maxlen: 24
91.124.241.0/24 maxlen: 24
92.112.36.0/24 maxlen: 24
92.112.42.0/24 maxlen: 24
92.112.46.0/24 maxlen: 24
92.112.144.0/24 maxlen: 24
92.112.223.0/24 maxlen: 24
92.113.104.0/24 maxlen: 24
92.113.118.0/24 maxlen: 24
92.113.193.0/24 maxlen: 24
92.113.228.0/24 maxlen: 24
95.134.29.0/24 maxlen: 24
95.134.40.0/24 maxlen: 24
95.134.77.0/24 maxlen: 24
95.134.123.0/24 maxlen: 24
95.134.149.0/24 maxlen: 24
95.134.158.0/24 maxlen: 24
95.134.203.0/24 maxlen: 24
95.135.13.0/24 maxlen: 24
95.135.60.0/24 maxlen: 24
95.135.63.0/24 maxlen: 24
95.135.81.0/24 maxlen: 24
95.135.83.0/24 maxlen: 24
95.135.110.0/24 maxlen: 24
95.135.117.0/24 maxlen: 24
95.135.201.0/24 maxlen: 24
95.135.210.0/24 maxlen: 24
95.135.239.0/24 maxlen: 24
178.92.37.0/24 maxlen: 24
178.92.38.0/24 maxlen: 24
178.93.3.0/24 maxlen: 24
178.93.192.0/24 maxlen: 24
178.94.241.0/24 maxlen: 24
178.95.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:f2:2c:51:db:4f:be:0a:c8:2c:98:c9:5f:a2:17:f2:0f:ab:9e:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 22 11:26:50 2026 GMT
Not After : Sep 21 11:31:50 2027 GMT
Subject: CN=1EAFCDA43F7E98364EC5362502A0C1016350208F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e7:58:24:1d:ce:55:b3:7c:20:a3:5f:30:0e:
7d:bd:53:58:92:2c:a7:2e:ee:bf:6d:c7:de:04:0b:
53:a6:cf:99:6e:b2:41:12:cd:65:c6:ed:fa:fd:87:
7c:fe:38:7d:3b:e9:35:e9:26:6e:d8:90:5b:29:16:
d9:5f:58:cd:ff:32:74:40:4b:64:7e:3f:0b:36:32:
28:8a:e9:70:53:ea:1c:19:ce:08:90:e8:b5:9b:c2:
77:1e:ad:8b:2a:62:0f:00:47:0e:4b:6c:03:1b:06:
ae:8b:a7:06:46:c5:11:73:56:79:46:78:dc:c9:f2:
59:37:cd:83:7b:88:66:6f:34:6a:3f:74:1d:fe:64:
d2:94:c4:a9:0f:6f:de:39:46:88:cf:2b:59:22:c4:
97:4c:e7:d0:48:a5:cd:56:1e:d5:3b:72:09:7b:4e:
30:78:84:ac:3c:33:ed:c2:69:11:8d:ca:3c:a7:7f:
fc:47:dc:91:f1:cd:aa:cd:fb:eb:ad:01:9e:54:99:
7b:34:35:79:61:ef:7c:38:01:b9:4f:31:11:98:8f:
d1:b4:80:1d:bd:93:98:f1:f8:9b:67:b9:11:95:f5:
f3:68:a9:95:bf:87:90:ba:82:1e:5f:0b:e4:23:61:
c6:f4:42:19:76:35:cb:60:c0:2a:f6:ce:e1:1a:cc:
63:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:AF:CD:A4:3F:7E:98:36:4E:C5:36:25:02:A0:C1:01:63:50:20:8F
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402265.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.49.0/24
46.202.51.0/24
46.202.66.0/24
46.202.119.0/24
46.203.32.0/24
46.203.43.0-46.203.44.255
46.203.47.0/24
46.203.54.0/23
46.203.58.0/24
46.203.97.0/24
46.203.102.0/24
46.203.104.0/24
46.203.113.0/24
46.203.121.0/24
46.203.136.0/24
46.203.149.0/24
46.203.161.0/24
46.203.183.0/24
46.203.213.0/24
91.124.26.0/24
91.124.40.0/24
91.124.57.0/24
91.124.67.0/24
91.124.89.0/24
91.124.120.0/24
91.124.136.0/23
91.124.142.0/23
91.124.148.0/24
91.124.170.0/24
91.124.173.0/24
91.124.177.0/24
91.124.179.0/24
91.124.199.0/24
91.124.202.0/24
91.124.241.0/24
92.112.36.0/24
92.112.42.0/24
92.112.46.0/24
92.112.144.0/24
92.112.223.0/24
92.113.104.0/24
92.113.118.0/24
92.113.193.0/24
92.113.228.0/24
95.134.29.0/24
95.134.40.0/24
95.134.77.0/24
95.134.123.0/24
95.134.149.0/24
95.134.158.0/24
95.134.203.0/24
95.135.13.0/24
95.135.60.0/24
95.135.63.0/24
95.135.81.0/24
95.135.83.0/24
95.135.110.0/24
95.135.117.0/24
95.135.201.0/24
95.135.210.0/24
95.135.239.0/24
178.92.37.0-178.92.38.255
178.93.3.0/24
178.93.192.0/24
178.94.241.0/24
178.95.83.0/24
Signature Algorithm: sha256WithRSAEncryption
47:16:b4:5c:e2:f6:bc:02:c2:71:13:4d:0a:2e:1c:52:cf:6f:
79:15:22:bf:8c:e8:9d:ae:a8:76:9c:bb:a5:80:e2:21:4e:da:
62:ca:07:51:77:e2:49:c8:4f:8d:76:ce:46:77:e5:d9:30:5b:
8b:c4:cd:55:0b:88:8b:b3:e0:14:d4:51:a8:42:ca:26:4e:20:
ca:b3:a6:12:b8:fe:b8:7a:03:2f:68:3d:b5:1c:2c:cb:e2:6a:
3b:3b:44:45:05:5d:6e:e3:2f:67:46:b3:e3:e8:f7:cd:26:fe:
30:92:95:f1:17:b0:d4:ef:4f:bd:a6:97:02:43:df:c5:4d:5d:
d7:df:12:a1:61:83:6a:1a:1a:79:d4:9f:fb:c6:14:ea:62:c8:
c0:45:b0:81:63:29:61:70:9c:5e:5b:03:0c:21:4a:5e:37:db:
3d:a9:e7:24:1c:ef:8f:d2:e5:74:dd:f2:e3:94:83:d4:6f:82:
85:52:f3:ee:fa:ef:d1:fc:4a:3d:a2:a8:bd:7e:8f:8c:42:87:
2a:d7:b8:bf:96:5e:92:d5:53:99:ab:b1:6a:c0:70:1a:8c:67:
c5:19:87:b3:f9:bd:76:8f:58:d9:c9:bb:28:81:20:1f:27:5f:
1c:d8:5a:f9:dd:a3:5f:b9:e2:70:cc:84:30:75:ba:09:9d:f9:
7e:dd:e0:21
-----BEGIN CERTIFICATE-----
MIIGoDCCBYigAwIBAgIUQfIsUdtPvgrILJjJX6IX8g+rnhYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjA5MjIxMTI2NTBaFw0yNzA5MjExMTMxNTBaMDMxMTAvBgNV
BAMTKDFFQUZDREE0M0Y3RTk4MzY0RUM1MzYyNTAyQTBDMTAxNjM1MDIwOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL51gkHc5Vs3wgo18wDn29U1iS
LKcu7r9tx94EC1Omz5luskESzWXG7fr9h3z+OH076TXpJm7YkFspFtlfWM3/MnRA
S2R+Pws2MiiK6XBT6hwZzgiQ6LWbwncerYsqYg8ARw5LbAMbBq6LpwZGxRFzVnlG
eNzJ8lk3zYN7iGZvNGo/dB3+ZNKUxKkPb945RojPK1kixJdM59BIpc1WHtU7cgl7
TjB4hKw8M+3CaRGNyjynf/xH3JHxzarN++utAZ5UmXs0NXlh73w4AblPMRGYj9G0
gB29k5jx+JtnuRGV9fNoqZW/h5C6gh5fC+QjYcb0Qhl2NctgwCr2zuEazGMXAgMB
AAGjggOqMIIDpjAdBgNVHQ4EFgQUHq/NpD9+mDZOxTYlAqDBAWNQII8wHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTNDAyMjY1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMIIBvQYIKwYBBQUHAQcBAf8EggGsMIIBqDCCAaQEAgAB
MIIBnAMEAC7KMQMEAC7KMwMEAC7KQgMEAC7KdwMEAC7LIDAMAwQALssrAwQALsss
AwQALssvAwQBLss2AwQALss6AwQALsthAwQALstmAwQALstoAwQALstxAwQALst5
AwQALsuIAwQALsuVAwQALsuhAwQALsu3AwQALsvVAwQAW3waAwQAW3woAwQAW3w5
AwQAW3xDAwQAW3xZAwQAW3x4AwQBW3yIAwQBW3yOAwQAW3yUAwQAW3yqAwQAW3yt
AwQAW3yxAwQAW3yzAwQAW3zHAwQAW3zKAwQAW3zxAwQAXHAkAwQAXHAqAwQAXHAu
AwQAXHCQAwQAXHDfAwQAXHFoAwQAXHF2AwQAXHHBAwQAXHHkAwQAX4YdAwQAX4Yo
AwQAX4ZNAwQAX4Z7AwQAX4aVAwQAX4aeAwQAX4bLAwQAX4cNAwQAX4c8AwQAX4c/
AwQAX4dRAwQAX4dTAwQAX4duAwQAX4d1AwQAX4fJAwQAX4fSAwQAX4fvMAwDBACy
XCUDBACyXCYDBACyXQMDBACyXcADBACyXvEDBACyX1MwDQYJKoZIhvcNAQELBQAD
ggEBAEcWtFzi9rwCwnETTQouHFLPb3kVIr+M6J2uqHacu6WA4iFO2mLKB1F34knI
T412zkZ35dkwW4vEzVULiIuz4BTUUahCyiZOIMqzphK4/rh6Ay9oPbUcLMviajs7
REUFXW7jL2dGs+Po980m/jCSlfEXsNTvT72mlwJD38VNXdffEqFhg2oaGnnUn/vG
FOpiyMBFsIFjKWFwnF5bAwwhSl432z2p5yQc74/S5XTd8uOUg9RvgoVS8+7679H8
Sj2iqL1+j4xChyrXuL+WXpLVU5mrsWrAcBqMZ8UZh7P5vXaPWNnJuyiBIB8nXxzY
Wvndo1+54nDMhDB1ugmd+X7d4CE=
-----END CERTIFICATE-----
Generated at Wed Sep 23 09:40:45 2026 by rpki-client