Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS202791.roa
File: AS202791.roa (raw, json)
Hash identifier: fw96cMNxMXwAG1LahljiIrf31KkaUb1kyvSEGhHqg+s=
Subject key identifier: 72:5F:0C:98:EB:7E:80:0B:BE:AF:E5:EC:DB:B5:5B:18:30:52:2B:09
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 2CB5A629E643B998F9764B77DF6DD24B7E7854BA
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS202791.roa
Signing time: Wed 30 Sep 2026 10:03:04 +0000
ROA not before: Wed 30 Sep 2026 09:58:04 +0000
ROA not after: Wed 29 Sep 2027 10:03:04 +0000
asID: 202791
IP address blocks: 46.203.35.0/24 maxlen: 24
92.113.136.0/24 maxlen: 24
92.113.187.0/24 maxlen: 24
92.113.248.0/24 maxlen: 24
178.92.190.0/24 maxlen: 24
178.95.238.0/24 maxlen: 24
178.95.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 13:21:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:b5:a6:29:e6:43:b9:98:f9:76:4b:77:df:6d:d2:4b:7e:78:54:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 30 09:58:04 2026 GMT
Not After : Sep 29 10:03:04 2027 GMT
Subject: CN=725F0C98EB7E800BBEAFE5ECDBB55B1830522B09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:73:d8:57:83:66:73:ad:7b:3f:f3:fb:f2:3c:
5d:4a:11:7e:11:42:77:55:d3:9a:83:48:af:36:34:
a8:39:6c:d7:eb:79:98:4e:4f:eb:f6:b7:51:c5:19:
d3:c0:d7:0d:fc:47:59:e4:ca:ef:22:51:e9:df:15:
cd:86:c6:39:40:6f:4b:83:16:83:15:69:43:eb:7d:
67:bb:a1:3a:d8:e7:a5:48:0e:bc:eb:68:52:6a:81:
2d:f1:16:c4:6c:46:79:68:8c:96:a2:3f:72:69:df:
8e:b6:dc:59:82:26:4c:1a:26:df:48:52:42:e5:a9:
21:84:4e:e9:9b:b2:dd:30:49:e5:3e:bd:1c:48:76:
66:94:e8:96:f8:4c:23:28:0f:4c:9b:40:21:38:32:
bb:61:5f:2b:6a:11:68:37:66:ec:75:eb:8e:32:5a:
9e:27:cb:57:5d:2b:88:f3:d2:53:70:15:77:8c:e1:
0f:84:8b:c7:85:9f:e3:63:b2:8b:f3:0d:23:eb:0c:
81:dd:a8:4f:00:9e:c4:be:ff:f9:42:0a:a1:e6:53:
3b:fd:20:99:88:8e:ac:fc:89:52:97:d6:28:26:47:
4a:13:cf:a5:03:0b:30:a7:45:de:c5:cd:74:24:cf:
97:73:d7:80:96:8f:d4:f6:92:e6:0f:60:52:8f:9e:
64:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:5F:0C:98:EB:7E:80:0B:BE:AF:E5:EC:DB:B5:5B:18:30:52:2B:09
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS202791.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.35.0/24
92.113.136.0/24
92.113.187.0/24
92.113.248.0/24
178.92.190.0/24
178.95.238.0/24
178.95.242.0/24
Signature Algorithm: sha256WithRSAEncryption
14:63:7e:8b:46:5a:cb:03:f1:7c:57:b9:a0:07:39:99:1a:99:
ad:c3:fc:13:b3:f5:c9:0d:21:75:14:29:c3:01:c9:d3:b4:13:
68:4c:73:a1:ce:3a:28:42:07:e8:8d:5c:2f:6c:97:00:d7:f4:
0b:1e:e6:05:5a:38:3b:c7:c4:e3:4e:29:a1:7b:aa:ad:82:53:
8f:b6:22:7a:85:ae:0f:89:2d:6d:8f:87:8d:1f:ca:08:b8:84:
e5:19:a7:e1:c8:6c:07:bf:28:96:5a:e2:db:53:dc:e7:7a:36:
11:11:5b:17:d1:29:63:9a:5c:7e:3e:51:ff:f2:dd:35:6d:4f:
6e:ab:38:f9:94:33:ef:86:68:b1:54:dd:87:5e:ff:22:e1:bd:
e1:a6:28:9f:72:c8:77:45:ff:9c:2a:44:85:cb:e6:a3:2b:81:
8d:6f:96:d7:44:93:16:27:7d:cd:fe:2e:35:be:2d:60:53:27:
a1:89:e6:3e:73:8e:e7:fe:85:f4:b8:2f:94:38:12:c4:18:34:
59:61:86:15:e0:dd:a2:31:9e:e3:80:73:c3:55:e6:5c:62:ed:
42:56:1b:13:15:4a:56:a5:54:e7:a5:cb:f5:74:83:47:c3:e7:
4f:ea:6b:e8:6f:1b:f0:1f:41:9f:fd:4a:5a:54:fe:f9:da:0b:
aa:53:91:24
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIULLWmKeZDuZj5dkt3323SS354VLowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjA5MzAwOTU4MDRaFw0yNzA5MjkxMDAzMDRaMDMxMTAvBgNV
BAMTKDcyNUYwQzk4RUI3RTgwMEJCRUFGRTVFQ0RCQjU1QjE4MzA1MjJCMDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYc9hXg2ZzrXs/8/vyPF1KEX4R
QndV05qDSK82NKg5bNfreZhOT+v2t1HFGdPA1w38R1nkyu8iUenfFc2GxjlAb0uD
FoMVaUPrfWe7oTrY56VIDrzraFJqgS3xFsRsRnlojJaiP3Jp34623FmCJkwaJt9I
UkLlqSGETumbst0wSeU+vRxIdmaU6Jb4TCMoD0ybQCE4MrthXytqEWg3Zux1644y
Wp4ny1ddK4jz0lNwFXeM4Q+Ei8eFn+NjsovzDSPrDIHdqE8AnsS+//lCCqHmUzv9
IJmIjqz8iVKX1igmR0oTz6UDCzCnRd7FzXQkz5dz14CWj9T2kuYPYFKPnmT7AgMB
AAGjggIuMIICKjAdBgNVHQ4EFgQUcl8MmOt+gAu+r+Xs27VbGDBSKwkwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjAyNzkxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQALssj
AwQAXHGIAwQAXHG7AwQAXHH4AwQAsly+AwQAsl/uAwQAsl/yMA0GCSqGSIb3DQEB
CwUAA4IBAQAUY36LRlrLA/F8V7mgBzmZGpmtw/wTs/XJDSF1FCnDAcnTtBNoTHOh
zjooQgfojVwvbJcA1/QLHuYFWjg7x8TjTimhe6qtglOPtiJ6ha4PiS1tj4eNH8oI
uITlGafhyGwHvyiWWuLbU9znejYREVsX0Sljmlx+PlH/8t01bU9uqzj5lDPvhmix
VN2HXv8i4b3hpiifcsh3Rf+cKkSFy+ajK4GNb5bXRJMWJ33N/i41vi1gUyehieY+
c47n/oX0uC+UOBLEGDRZYYYV4N2iMZ7jgHPDVeZcYu1CVhsTFUpWpVTnpcv1dINH
w+dP6mvobxvwH0Gf/UpaVP752guqU5Ek
-----END CERTIFICATE-----
Generated at Sun Oct 11 16:51:09 2026 by rpki-client