Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS401776.roa
File: AS401776.roa (raw, json)
Hash identifier: +bod1CCPrvf11JCBCxRm8i6bIURfxJkIoB2NZq7Vug4=
Subject key identifier: F5:8A:8B:93:9F:FA:0D:A1:45:51:B1:01:DB:68:DA:0E:B1:32:89:65
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 0A8F43A10EB25E5B30A8D5A66921CE9E268EA5B6
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS401776.roa
Signing time: Mon 20 Apr 2026 10:33:57 +0000
ROA not before: Mon 20 Apr 2026 10:28:57 +0000
ROA not after: Mon 19 Apr 2027 10:33:57 +0000
asID: 401776
IP address blocks: 46.202.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Apr 2026 22:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:8f:43:a1:0e:b2:5e:5b:30:a8:d5:a6:69:21:ce:9e:26:8e:a5:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Apr 20 10:28:57 2026 GMT
Not After : Apr 19 10:33:57 2027 GMT
Subject: CN=F58A8B939FFA0DA14551B101DB68DA0EB1328965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:01:73:68:cc:1d:c3:55:6e:d1:e6:99:bc:3b:
f9:a5:ee:aa:26:27:b6:15:b3:fb:6e:34:f3:12:89:
bd:fb:42:a7:99:c3:d2:b9:f5:c4:42:e6:52:5a:95:
ee:41:c0:bf:4a:df:1a:3c:27:4f:6e:5f:38:4d:0e:
e9:ad:31:5f:29:ad:cc:48:3d:f2:c9:9b:dc:c1:45:
b8:e4:0e:e3:86:7e:71:d1:f9:de:25:96:2e:6b:8c:
82:cf:14:29:4e:91:c6:bc:a4:7e:4e:b1:26:2f:81:
44:31:81:ae:e1:8d:57:af:78:0a:59:e6:22:d9:45:
db:c6:1c:5f:20:d5:25:78:7e:95:86:ba:97:f4:d7:
63:00:f2:0b:ff:41:35:6a:b6:7d:2d:03:ac:fc:6c:
5a:81:d7:79:92:01:e2:48:81:60:47:0e:f9:40:72:
e5:04:f9:bd:d6:ee:c8:90:18:d1:d1:fe:6a:f3:96:
a0:1a:9a:8f:62:b2:9b:dd:57:b2:c5:2e:0d:00:48:
c5:48:19:b2:83:93:4f:d8:4b:21:a8:95:e7:97:bc:
10:e7:75:89:de:6c:45:7f:41:fd:bc:f4:46:03:64:
dc:5c:41:9c:1f:64:bb:7d:83:8a:2d:c5:02:2b:5e:
53:90:38:30:e5:30:04:01:ad:2b:41:b5:2c:9e:f8:
68:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:8A:8B:93:9F:FA:0D:A1:45:51:B1:01:DB:68:DA:0E:B1:32:89:65
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS401776.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.12.0/24
Signature Algorithm: sha256WithRSAEncryption
03:ad:02:74:38:09:34:7c:38:16:a4:db:78:61:62:82:d5:e8:
9a:b0:31:e3:15:a8:b4:f7:ff:75:93:0e:eb:6b:8b:01:d4:7d:
51:f7:7e:09:fa:d7:58:af:26:66:12:6c:44:8e:3b:61:13:b8:
11:95:8d:fb:50:d0:9a:fb:f0:b7:72:fa:d2:f7:eb:6b:bf:cf:
8c:2b:5a:18:f9:b9:da:6c:df:7f:92:e0:11:cd:03:70:f7:6d:
2b:a4:d8:b2:bd:1f:cc:07:54:0c:72:57:79:51:e2:8b:30:af:
c7:5c:45:df:49:f9:08:73:a6:55:bd:74:f2:86:de:f3:4e:6a:
63:56:e7:94:e7:92:91:b5:39:9c:c0:43:e5:21:5a:d3:ff:bc:
e4:3b:e2:2f:ee:19:61:2e:6b:b9:10:f0:5f:89:94:4e:d3:06:
51:4b:db:cb:79:13:e8:ca:e1:50:67:ea:e7:43:49:51:8e:12:
fb:60:ac:b2:32:ce:db:de:76:8d:4e:07:da:c1:9a:3a:43:19:
94:33:c1:bd:e0:59:7a:09:ff:c3:0a:a1:8f:a5:a6:e2:6c:95:
2e:40:46:0e:b7:b2:af:c2:26:58:50:9f:28:ae:15:d0:73:64:
c8:62:85:bf:af:ac:75:9b:bb:ff:18:7f:99:55:9c:8e:f8:e3:
43:db:3c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 08:54:42 2026 by rpki-client