Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS201136.roa
File: AS201136.roa (raw, json)
Hash identifier: fcLp6k0NBNjbzre0AiQgALSIB+EC5edg4gqEF62JQg0=
Subject key identifier: BD:BE:BA:38:69:26:0E:2F:D2:9D:56:E2:A1:78:8E:50:5C:E2:3F:41
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 1A1E577C84CA63610D69455A921E5DF6D6EE9A27
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS201136.roa
Signing time: Mon 03 Aug 2026 20:01:03 +0000
ROA not before: Mon 03 Aug 2026 19:56:03 +0000
ROA not after: Mon 02 Aug 2027 20:01:03 +0000
asID: 201136
IP address blocks: 46.202.102.0/24 maxlen: 24
46.202.103.0/24 maxlen: 24
92.112.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:1e:57:7c:84:ca:63:61:0d:69:45:5a:92:1e:5d:f6:d6:ee:9a:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 3 19:56:03 2026 GMT
Not After : Aug 2 20:01:03 2027 GMT
Subject: CN=BDBEBA3869260E2FD29D56E2A1788E505CE23F41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:66:1d:d9:3c:a0:15:e8:b6:73:18:12:90:ee:
04:f2:82:f8:71:d6:61:0d:37:80:fc:0f:14:28:9e:
73:1f:7e:89:6f:bb:8e:49:00:4b:91:cb:6d:b3:51:
aa:60:6b:59:fa:63:42:56:f1:e5:e8:3e:04:c6:33:
bc:5c:01:d9:8d:2a:ba:72:ef:cb:20:ee:f4:84:fd:
02:a3:60:e4:72:1f:7c:9c:7c:7a:c5:ea:72:40:11:
5c:b0:b8:3c:63:d2:03:29:2f:a7:83:b9:af:01:60:
16:c9:db:8e:2c:f5:f6:d4:f1:dd:a2:25:ab:f3:7c:
b4:c4:d2:15:cd:1a:c3:17:7d:8a:41:5b:84:8b:01:
bc:26:02:47:9e:05:34:e7:20:92:96:8a:07:60:d7:
7b:51:2c:34:7e:7f:66:63:2f:37:85:d5:3a:9f:fe:
73:6d:57:82:0d:38:9f:27:79:21:79:e9:3c:8b:a6:
13:44:d2:87:35:4f:6e:a5:03:04:72:21:12:85:d0:
f3:74:e1:18:64:c8:82:c5:44:5d:d8:19:cd:36:a6:
89:32:9e:d8:20:b4:f8:43:ac:7d:f7:03:58:7b:84:
f9:97:e5:fc:fe:92:7c:1c:74:43:dd:10:fa:88:60:
2e:a8:92:3b:ab:ae:4e:67:c4:73:7a:0d:c2:c9:86:
ec:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:BE:BA:38:69:26:0E:2F:D2:9D:56:E2:A1:78:8E:50:5C:E2:3F:41
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS201136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.102.0/23
92.112.220.0/24
Signature Algorithm: sha256WithRSAEncryption
03:22:c9:9f:1d:d1:69:df:e4:e2:d6:64:e2:af:c2:e1:d1:87:
b1:41:57:67:ff:4e:74:b3:dc:e2:5b:38:7e:39:63:28:4d:c9:
fe:74:b3:fc:68:35:dd:64:82:fe:13:c1:0d:97:e1:18:c1:a5:
18:a7:3a:e5:8c:ea:bf:df:97:89:d4:e8:ca:8a:19:8e:53:9d:
f2:dc:10:22:08:4b:0b:e9:92:a0:31:92:ee:de:f0:c5:dc:b1:
ec:54:db:b1:b6:af:a2:65:c2:2b:15:70:e6:f1:08:1c:96:e4:
db:f2:86:ec:97:fd:26:6d:4b:68:21:e7:5e:35:55:0f:07:de:
d7:f1:af:58:21:5d:ec:9a:c7:92:70:fb:6f:98:ac:81:ba:08:
08:fb:dd:78:97:9b:cd:df:2c:a3:4d:af:be:2b:07:95:3a:c2:
99:df:2d:07:17:99:36:63:46:1e:31:ad:23:52:16:52:12:04:
cb:87:e3:cd:44:f2:99:47:bc:ca:ff:93:bc:7c:69:61:47:e3:
0f:24:83:b5:72:35:39:70:a6:50:d0:ea:57:69:d3:cf:95:41:
e0:4b:33:6b:8b:bc:63:ad:e0:0c:0e:e2:d8:9d:a7:dd:13:50:
68:12:ac:f1:ce:ca:cb:f3:0f:f2:13:59:71:61:f8:73:a2:2d:
27:a4:89:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 05:47:00 2026 by rpki-client