Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS134351.roa
File: AS134351.roa (raw, json)
Hash identifier: bi/SFggjtEdPZM3O3b9iN7UFrw5pa2Ya+2y0YYAuhBY=
Subject key identifier: 05:D1:2A:55:51:0D:EE:C5:89:43:84:9D:67:AD:C4:7E:6D:BA:95:28
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 32C6BCF5BCB10DFEC144CBC20E6C63218752ED4D
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS134351.roa
Signing time: Wed 30 Sep 2026 14:49:35 +0000
ROA not before: Wed 30 Sep 2026 14:44:35 +0000
ROA not after: Wed 29 Sep 2027 14:49:35 +0000
asID: 134351
IP address blocks: 46.202.253.0/24 maxlen: 24
46.202.255.0/24 maxlen: 24
46.203.23.0/24 maxlen: 24
46.203.28.0/24 maxlen: 24
46.203.45.0/24 maxlen: 24
46.203.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 14:54:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:c6:bc:f5:bc:b1:0d:fe:c1:44:cb:c2:0e:6c:63:21:87:52:ed:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 30 14:44:35 2026 GMT
Not After : Sep 29 14:49:35 2027 GMT
Subject: CN=05D12A55510DEEC58943849D67ADC47E6DBA9528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:37:df:85:83:f4:9b:27:56:32:9b:78:8a:0b:
85:96:c2:a0:0b:dd:f4:cc:cd:81:47:62:47:3b:3b:
57:d0:e5:42:63:b7:3a:63:49:bd:30:b0:90:bc:e2:
43:cf:1a:8b:ca:c0:90:dc:be:6f:c2:27:19:b9:9e:
60:b9:e0:b0:28:2e:68:eb:7f:f7:5a:e6:de:f4:a5:
35:ff:ba:df:9e:b8:d8:8c:de:49:7e:c2:f0:66:b1:
d8:69:43:6d:7c:aa:4f:54:0e:7b:b7:c5:36:0e:98:
6a:45:ad:cc:ee:b2:f5:2f:4b:32:a8:0e:fa:46:94:
7f:b7:b7:18:0f:71:30:7f:53:cc:09:ed:c7:f5:43:
6b:f3:ab:26:75:7a:9e:f4:cf:5a:5f:5b:c1:61:9d:
2f:22:b6:34:e7:12:fb:8b:b8:d7:c2:a8:90:bc:c1:
f5:f3:87:9f:a0:40:55:d3:c2:c2:89:6e:23:07:3d:
a9:f6:28:51:46:d8:a7:c8:4b:08:2c:2b:17:7d:52:
b7:de:c6:08:3e:04:58:dc:f5:63:6e:1b:cf:09:76:
02:1f:4b:38:8e:d2:42:e9:2a:d7:fb:b4:f8:44:be:
21:3c:b0:69:60:48:ab:1f:c1:12:cd:bb:9d:7d:47:
14:1c:22:82:7c:e9:86:56:6e:23:f5:0d:59:99:0f:
13:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D1:2A:55:51:0D:EE:C5:89:43:84:9D:67:AD:C4:7E:6D:BA:95:28
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS134351.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.253.0/24
46.202.255.0/24
46.203.23.0/24
46.203.28.0/24
46.203.45.0/24
46.203.52.0/24
Signature Algorithm: sha256WithRSAEncryption
69:3f:33:3a:ae:16:1c:32:69:20:80:49:eb:57:08:22:1c:e6:
43:6a:72:fe:f1:65:f2:50:b2:bc:8d:53:38:a7:1f:8f:2c:8b:
18:78:39:3f:2d:17:6d:9c:54:77:56:ae:75:81:a9:29:5c:80:
d7:d9:43:d0:f5:8d:b1:d4:32:ec:0b:30:f3:cb:25:b3:1e:00:
ce:53:da:27:71:77:9a:71:63:47:66:7d:77:c8:24:0b:77:96:
77:35:3b:dd:b8:6d:30:78:fa:90:9c:5b:95:0e:46:a8:d2:f3:
b6:a2:ad:1e:e4:27:55:5c:1e:5c:61:12:67:04:d8:8d:33:f9:
89:17:7e:17:7a:c0:f3:97:34:21:d6:dc:ba:78:fd:12:54:28:
b8:a8:c0:ae:b7:7d:08:c6:c0:ed:d8:f1:e7:a7:80:df:f7:a9:
77:e5:3a:b3:4f:5f:84:f4:65:94:b3:1b:ae:d3:67:1e:1b:f6:
bd:83:66:3a:1c:51:17:2a:8b:1b:eb:77:fe:5f:af:7c:fb:2d:
66:57:db:64:5b:95:d8:19:aa:33:dd:f5:3f:7b:5c:c0:00:93:
b6:28:61:a6:8b:1b:b6:86:4c:f9:b9:da:ce:cc:50:11:79:a5:
6f:97:18:54:3b:00:b9:85:de:bd:74:58:5d:41:b3:0f:a2:3f:
71:30:d3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 08:38:04 2026 by rpki-client