Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS202923.roa
File: AS202923.roa (raw, json)
Hash identifier: OCzmvIXpYhCKNu7J1By8WPgrX3yI/KVShPr634qx52I=
Subject key identifier: 49:2E:9B:3E:E6:6F:BE:2F:B6:26:C4:F7:7F:D2:DE:F4:48:02:5E:43
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 7900988498A7CE4A8A7EA9C2073442FBB5ECDA54
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS202923.roa
Signing time: Tue 27 Oct 2026 12:59:10 +0000
ROA not before: Tue 27 Oct 2026 12:54:10 +0000
ROA not after: Tue 26 Oct 2027 12:59:10 +0000
asID: 202923
IP address blocks: 46.202.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:16:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:00:98:84:98:a7:ce:4a:8a:7e:a9:c2:07:34:42:fb:b5:ec:da:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 27 12:54:10 2026 GMT
Not After : Oct 26 12:59:10 2027 GMT
Subject: CN=492E9B3EE66FBE2FB626C4F77FD2DEF448025E43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f0:84:ff:3d:dc:6a:bb:16:75:c8:9e:82:46:
94:e4:78:e5:8b:f9:07:b4:d8:9e:27:8c:36:47:8d:
9a:29:9d:33:35:a7:96:67:fa:bd:2c:b4:69:49:59:
d8:2c:d5:db:af:85:9f:3d:f3:c8:8e:7c:94:8b:b9:
40:46:02:3b:3d:e1:25:11:97:29:4b:c4:33:d7:e9:
1e:3f:c3:3c:bb:60:92:d1:76:7a:b4:26:fa:53:f3:
1f:83:99:9d:3a:ea:02:c0:ae:11:c3:1d:91:fa:be:
0e:23:b6:71:db:aa:3b:3f:ba:d5:36:70:35:8e:1f:
41:ae:01:3e:4a:86:85:95:60:17:1e:87:c7:12:28:
4d:0c:04:ef:28:fd:97:ad:6c:5a:2b:0b:b8:5b:fd:
4c:63:6f:73:88:fa:6a:ab:b8:d0:6c:ce:5b:f6:e6:
c4:6d:24:38:5e:3b:b8:a1:09:52:44:89:1d:e6:98:
e8:a3:1a:6f:15:d5:1c:be:60:1e:d4:64:e5:f8:43:
d0:3d:24:b4:2d:9a:4e:5a:b8:4a:05:7a:aa:39:b9:
b4:45:b4:25:ee:a0:1a:02:56:9d:c9:61:de:9c:f8:
37:b2:53:23:4e:a3:6d:e0:0b:e9:89:8e:70:31:c5:
f2:8a:dc:14:4c:ac:71:b6:44:30:bc:1f:2e:cf:f1:
7c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:2E:9B:3E:E6:6F:BE:2F:B6:26:C4:F7:7F:D2:DE:F4:48:02:5E:43
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS202923.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.97.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:5a:43:8e:c0:4d:38:43:a0:58:62:5e:4f:2c:b0:36:e1:f7:
5e:05:6f:c6:8c:47:01:33:71:68:8b:f1:fa:f8:69:10:a9:68:
3a:62:56:d0:c3:18:05:e1:d2:e8:61:ac:01:18:0b:b7:05:9e:
0f:71:7e:7c:ef:42:41:24:85:19:cf:d0:88:0b:d2:f6:b7:eb:
ef:3c:3d:da:74:00:89:2d:2e:a3:f4:24:5f:61:98:2c:ac:9c:
67:62:5b:d6:4d:4b:24:66:73:06:12:36:7b:b5:a6:b5:8e:24:
42:a5:cf:2f:12:8f:cd:81:b8:6a:03:01:08:07:46:fb:5d:a4:
7c:1d:ce:63:02:25:7c:b1:82:ce:15:c2:85:9a:1d:b7:8d:56:
c6:d9:7c:0c:f1:73:88:f6:bf:45:0b:f1:0d:7d:69:99:f4:b7:
9d:2f:7c:ef:33:44:85:81:e0:dd:70:7e:33:79:70:f1:80:3e:
8d:7f:3a:23:c5:3a:fb:e0:04:2a:06:43:28:ed:b1:c1:7b:eb:
b7:3c:ca:c5:b7:f5:f4:c1:a9:53:a0:ae:90:b8:a6:b4:bd:dd:
59:1d:1b:05:a9:f3:95:fa:83:00:cc:b5:99:b9:fd:d6:ac:46:
20:b1:aa:f2:fd:a0:0d:57:0d:4c:89:d3:6e:17:cd:10:56:4e:
e2:ad:b7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:56:03 2026 by rpki-client