Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS133296.roa
File: AS133296.roa (raw, json)
Hash identifier: CKlVwF6sx3nDooj7XjXc2peOj18h454+fQQpBgG2538=
Subject key identifier: 32:32:2C:71:B1:0E:63:EA:A7:63:5A:98:B0:27:5A:68:24:2D:EC:A0
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 32DC9CD973F4377C338A8E0AF222ACE2CA55E3E1
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS133296.roa
Signing time: Tue 25 Aug 2026 14:49:30 +0000
ROA not before: Tue 25 Aug 2026 14:44:30 +0000
ROA not after: Tue 24 Aug 2027 14:49:30 +0000
asID: 133296
IP address blocks: 46.202.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 14:52:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:dc:9c:d9:73:f4:37:7c:33:8a:8e:0a:f2:22:ac:e2:ca:55:e3:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 25 14:44:30 2026 GMT
Not After : Aug 24 14:49:30 2027 GMT
Subject: CN=32322C71B10E63EAA7635A98B0275A68242DECA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9e:9d:d5:a6:76:fc:8c:38:09:f0:ff:f3:04:
1d:22:ee:bc:b5:ac:c6:cb:88:dd:79:45:f5:3f:39:
fb:02:47:2b:e9:48:2f:d0:38:26:0d:3b:c7:6c:e8:
af:8a:97:20:04:1c:c6:cb:80:d0:1c:45:3e:db:06:
04:95:13:75:60:67:9b:62:f2:1a:4b:79:0b:31:90:
aa:06:3e:7b:1b:73:db:ab:d1:36:61:09:3e:6d:fe:
2e:c1:88:8f:c9:9e:e5:28:8a:38:e7:63:0b:d5:f5:
02:83:04:ed:e4:7a:be:da:47:d6:48:a2:e9:be:98:
e8:50:82:eb:03:2c:e1:75:47:4d:05:c5:40:5b:2b:
fe:f9:95:be:7f:da:2e:4b:0f:2f:80:55:6c:b1:e6:
51:28:1d:b3:40:91:24:4d:45:a4:11:9d:da:d6:79:
71:25:27:02:15:29:3c:dd:55:b4:c4:f0:d9:6d:20:
dc:ec:a6:44:e4:5f:1a:65:0e:6e:d1:de:1f:d2:b7:
17:1d:d2:24:89:6e:0c:a8:62:18:0e:75:ac:69:6b:
7c:e6:d2:c2:d3:22:1c:f4:86:85:a0:f7:f9:31:cc:
bc:b1:c5:02:6c:5d:7d:ef:eb:ee:65:72:f5:15:6c:
37:e9:58:d9:87:e7:10:bc:b3:18:04:c0:8d:e3:38:
b0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:32:2C:71:B1:0E:63:EA:A7:63:5A:98:B0:27:5A:68:24:2D:EC:A0
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS133296.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.8.0/22
Signature Algorithm: sha256WithRSAEncryption
45:60:5a:85:c1:b8:e9:b0:bc:c3:22:8d:d9:00:b7:4a:01:15:
87:e0:b2:6c:47:54:ad:9f:38:89:6e:7d:e4:54:80:6e:fa:fe:
d9:db:61:df:1c:49:91:2f:f8:8c:d4:28:77:89:69:c6:7e:72:
2b:c2:e3:c8:a4:36:a1:6d:21:8b:69:08:b6:24:d8:f2:70:e1:
16:4a:45:7c:b4:c8:fa:f9:c2:5f:05:cd:1d:df:89:0e:78:0f:
33:8c:1c:26:af:a1:7f:74:75:74:bc:84:2a:c2:c5:44:99:74:
ef:41:e2:94:83:6f:bc:1f:a9:a7:23:2e:9f:5c:70:cf:89:65:
c6:9a:71:04:34:ae:ce:6c:1c:25:a5:57:ab:17:bb:33:8d:32:
a0:36:7c:0a:85:75:23:b8:d4:f5:75:cf:68:10:6e:9f:5c:3c:
28:11:24:bf:11:60:4a:c8:3a:3b:fc:a3:bc:1a:04:7d:f0:c4:
b4:d7:4b:ad:5f:4b:b2:ce:f9:fc:04:e0:8b:38:22:4c:e2:15:
7b:ce:cb:72:37:e0:03:f0:1e:8a:2c:d7:76:ef:9c:40:a6:52:
aa:2b:58:e5:9b:83:65:de:23:a8:71:4b:73:c8:a8:d7:c6:96:
37:4d:8b:54:68:9d:78:f1:08:14:ae:2e:14:f6:3e:f3:64:71:
55:9b:f3:aa
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUMtyc2XP0N3wzio4K8iKs4spV4+EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjA4MjUxNDQ0MzBaFw0yNzA4MjQxNDQ5MzBaMDMxMTAvBgNV
BAMTKDMyMzIyQzcxQjEwRTYzRUFBNzYzNUE5OEIwMjc1QTY4MjQyREVDQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAnp3Vpnb8jDgJ8P/zBB0i7ry1
rMbLiN15RfU/OfsCRyvpSC/QOCYNO8ds6K+KlyAEHMbLgNAcRT7bBgSVE3VgZ5ti
8hpLeQsxkKoGPnsbc9ur0TZhCT5t/i7BiI/JnuUoijjnYwvV9QKDBO3ker7aR9ZI
oum+mOhQgusDLOF1R00FxUBbK/75lb5/2i5LDy+AVWyx5lEoHbNAkSRNRaQRndrW
eXElJwIVKTzdVbTE8NltINzspkTkXxplDm7R3h/Stxcd0iSJbgyoYhgOdaxpa3zm
0sLTIhz0hoWg9/kxzLyxxQJsXX3v6+5lcvUVbDfpWNmH5xC8sxgEwI3jOLABAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUMjIscbEOY+qnY1qYsCdaaCQt7KAwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMTMzMjk2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLsoI
MA0GCSqGSIb3DQEBCwUAA4IBAQBFYFqFwbjpsLzDIo3ZALdKARWH4LJsR1StnziJ
bn3kVIBu+v7Z22HfHEmRL/iM1Ch3iWnGfnIrwuPIpDahbSGLaQi2JNjycOEWSkV8
tMj6+cJfBc0d34kOeA8zjBwmr6F/dHV0vIQqwsVEmXTvQeKUg2+8H6mnIy6fXHDP
iWXGmnEENK7ObBwlpVerF7szjTKgNnwKhXUjuNT1dc9oEG6fXDwoESS/EWBKyDo7
/KO8GgR98MS010utX0uyzvn8BOCLOCJM4hV7zstyN+AD8B6KLNd275xAplKqK1jl
m4Nl3iOocUtzyKjXxpY3TYtUaJ148QgUri4U9j7zZHFVm/Oq
-----END CERTIFICATE-----
Generated at Wed Sep 9 19:48:49 2026 by rpki-client