Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS201136.roa
File: AS201136.roa (raw, json)
Hash identifier: QCJnnd0T9Zv1ef8b8Cv9mvNy3pgdpHgaqir47JUbeU8=
Subject key identifier: BD:62:ED:D6:30:A1:37:A4:1A:DE:D5:2D:55:54:CD:6B:66:B9:C4:55
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 7F4893AC47A0F9DA4C6C06CFC5329E0E1393EC40
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS201136.roa
Signing time: Thu 03 Sep 2026 19:55:54 +0000
ROA not before: Thu 03 Sep 2026 19:50:54 +0000
ROA not after: Thu 02 Sep 2027 19:55:54 +0000
asID: 201136
IP address blocks: 46.202.102.0/24 maxlen: 24
46.202.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:48:93:ac:47:a0:f9:da:4c:6c:06:cf:c5:32:9e:0e:13:93:ec:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 3 19:50:54 2026 GMT
Not After : Sep 2 19:55:54 2027 GMT
Subject: CN=BD62EDD630A137A41ADED52D5554CD6B66B9C455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:5a:47:e3:b8:7f:42:6c:b1:c2:77:cb:01:f3:
10:c6:0a:ba:5b:0f:63:05:75:ea:22:db:b1:79:9a:
65:9e:01:46:fc:de:9f:3b:9e:fb:73:8f:91:2f:67:
5f:7a:0c:cb:3f:50:2a:5f:a7:74:22:db:53:3c:f6:
1d:c2:6b:92:5f:a5:3b:e7:05:f9:ed:5d:57:ba:21:
a3:bb:b3:f4:11:4a:42:33:c1:26:d9:c5:60:3d:12:
a6:9e:11:04:97:cd:05:6f:82:38:55:33:e6:cd:ac:
d3:2d:c6:4b:93:0b:0e:0e:f7:19:e6:49:96:f2:7a:
d3:0b:aa:1c:6f:54:eb:73:69:63:17:f4:6b:fe:47:
70:7b:8f:bf:b6:ed:82:f8:4e:7f:d6:bd:8b:9f:01:
c8:cd:4b:db:bf:c1:ee:05:e9:ad:c2:e4:6d:93:0d:
c4:38:55:ee:5a:4b:38:5a:d1:af:c2:45:5c:f4:54:
bd:ec:69:f7:71:2c:08:a6:54:9f:09:f2:1d:1d:12:
6f:90:ef:d8:db:1b:33:2c:e0:e8:01:90:a5:1b:4b:
c7:c2:d6:6e:b2:57:87:8a:e9:4b:ad:c3:65:5e:9e:
be:ec:46:b7:b8:0f:33:aa:34:91:86:4e:5a:ab:23:
b8:0e:01:26:9e:2a:f8:64:63:b8:a9:41:27:b2:5a:
46:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:62:ED:D6:30:A1:37:A4:1A:DE:D5:2D:55:54:CD:6B:66:B9:C4:55
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS201136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.102.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:4c:13:e7:c9:c3:72:5a:dd:02:fa:c9:13:45:6a:ba:f8:09:
28:41:cf:f3:b6:dc:fb:0c:fc:57:2d:c5:1d:9e:ca:a6:39:81:
0b:8a:c7:28:7a:dd:47:36:ea:fb:e6:0d:6f:53:8b:49:f2:c1:
12:5c:88:58:e6:6d:b5:60:c6:59:d4:83:fa:a3:58:aa:35:a0:
ca:7a:2f:da:3f:90:43:4e:c0:21:40:28:20:82:26:f0:a5:0b:
7d:66:8a:96:fe:02:9c:9d:5f:7d:2c:1c:0d:f4:33:b2:0c:6a:
9d:b7:cc:fc:82:4d:ac:ae:b8:2b:a8:3e:67:2f:71:4e:56:67:
fd:5e:5c:0d:16:3f:18:22:9e:ea:24:f5:34:2d:4a:68:68:d3:
14:aa:de:4b:98:a2:0c:1d:aa:a5:9f:3c:41:9a:cc:f0:84:83:
e7:29:2e:10:12:a2:7e:72:bb:d0:27:9c:00:0a:ea:18:f5:b6:
07:09:48:dd:98:b5:17:8f:af:fe:2e:75:88:81:b0:61:71:4e:
0e:70:12:6e:48:f8:7b:21:97:dc:24:c6:f9:eb:18:df:38:ea:
f7:e6:29:ea:4a:b0:f2:36:0c:4f:91:17:ba:3b:3c:f4:06:50:
43:8b:62:35:38:ce:54:06:51:51:13:91:f3:63:28:32:0a:67:
75:a3:c4:ec
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUf0iTrEeg+dpMbAbPxTKeDhOT7EAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjA5MDMxOTUwNTRaFw0yNzA5MDIxOTU1NTRaMDMxMTAvBgNV
BAMTKEJENjJFREQ2MzBBMTM3QTQxQURFRDUyRDU1NTRDRDZCNjZCOUM0NTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7WkfjuH9CbLHCd8sB8xDGCrpb
D2MFdeoi27F5mmWeAUb83p87nvtzj5EvZ196DMs/UCpfp3Qi21M89h3Ca5JfpTvn
BfntXVe6IaO7s/QRSkIzwSbZxWA9EqaeEQSXzQVvgjhVM+bNrNMtxkuTCw4O9xnm
SZbyetMLqhxvVOtzaWMX9Gv+R3B7j7+27YL4Tn/WvYufAcjNS9u/we4F6a3C5G2T
DcQ4Ve5aSzha0a/CRVz0VL3safdxLAimVJ8J8h0dEm+Q79jbGzMs4OgBkKUbS8fC
1m6yV4eK6Uutw2Venr7sRre4DzOqNJGGTlqrI7gOASaeKvhkY7ipQSeyWkZbAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUvWLt1jChN6Qa3tUtVVTNa2a5xFUwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjAxMTM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLspm
MA0GCSqGSIb3DQEBCwUAA4IBAQBqTBPnycNyWt0C+skTRWq6+AkoQc/zttz7DPxX
LcUdnsqmOYELiscoet1HNur75g1vU4tJ8sESXIhY5m21YMZZ1IP6o1iqNaDKei/a
P5BDTsAhQCgggibwpQt9ZoqW/gKcnV99LBwN9DOyDGqdt8z8gk2srrgrqD5nL3FO
Vmf9XlwNFj8YIp7qJPU0LUpoaNMUqt5LmKIMHaqlnzxBmszwhIPnKS4QEqJ+crvQ
J5wACuoY9bYHCUjdmLUXj6/+LnWIgbBhcU4OcBJuSPh7IZfcJMb56xjfOOr35inq
SrDyNgxPkRe6Ozz0BlBDi2I1OM5UBlFRE5HzYygyCmd1o8Ts
-----END CERTIFICATE-----
Generated at Fri Sep 18 09:33:28 2026 by rpki-client