Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402203.roa
File: AS402203.roa (raw, json)
Hash identifier: 0j/kaDaihE3/u2WFe0ziZG0Nvkt9M2c/kzSFsXxKw70=
Subject key identifier: 0E:65:6E:9E:78:F5:9F:CF:1F:04:2D:36:A5:0F:8C:85:DC:77:A8:BA
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 24358CA00B05A8C99EFE36347EED4AB28919029A
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402203.roa
Signing time: Wed 18 Mar 2026 09:26:04 +0000
ROA not before: Wed 18 Mar 2026 09:21:04 +0000
ROA not after: Wed 17 Mar 2027 09:26:04 +0000
asID: 402203
IP address blocks: 178.93.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Mar 2026 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:35:8c:a0:0b:05:a8:c9:9e:fe:36:34:7e:ed:4a:b2:89:19:02:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Mar 18 09:21:04 2026 GMT
Not After : Mar 17 09:26:04 2027 GMT
Subject: CN=0E656E9E78F59FCF1F042D36A50F8C85DC77A8BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b1:c1:67:29:10:67:b1:53:04:6b:f5:32:b8:
65:17:cb:0e:d0:40:ea:58:6a:f5:16:c4:dc:34:92:
95:0f:c7:b8:cc:cd:39:15:3e:10:91:62:cf:49:b1:
ae:12:0e:f6:ac:36:94:33:91:4d:ef:cd:55:c3:5a:
72:64:96:57:6d:be:b9:6a:14:57:de:3c:fd:81:77:
26:63:a0:a6:08:4f:18:88:9e:aa:ec:1d:5f:21:e2:
14:38:d6:ce:28:0d:8e:ad:11:6b:96:ea:04:f4:49:
35:a8:05:24:1f:25:54:fc:46:85:a0:6c:91:3d:db:
62:0a:01:99:5b:4b:86:be:3a:6f:dc:4d:67:40:8d:
16:dc:e8:df:d0:11:cd:41:4b:54:12:de:09:3c:54:
bf:b8:a5:02:27:18:5a:54:90:3c:d9:db:e6:54:32:
19:37:0f:6e:77:c1:f4:ea:93:a9:e8:c0:b6:36:ca:
2b:b4:17:59:a5:2b:d7:e2:2f:91:3b:fc:79:b3:b6:
2e:b6:19:ed:18:d1:93:0a:38:c3:25:33:fb:78:4c:
f2:5e:66:22:ed:3b:41:5c:d9:52:7b:25:9e:e2:82:
e0:a9:66:c3:5a:b1:0f:03:79:95:6c:dc:9c:6d:98:
6e:3a:1e:25:2c:73:9b:38:4f:f8:96:5f:22:ca:e3:
82:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:65:6E:9E:78:F5:9F:CF:1F:04:2D:36:A5:0F:8C:85:DC:77:A8:BA
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402203.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.93.124.0/24
Signature Algorithm: sha256WithRSAEncryption
40:13:27:22:90:86:34:c6:2f:ca:56:48:a9:28:91:59:b6:07:
1c:13:49:a3:6d:cf:0e:7f:20:ad:4b:d1:a5:c5:2b:d6:2b:c0:
e3:31:2a:7c:7d:ca:ef:74:53:fd:9a:cd:82:06:a7:e1:0b:e1:
84:f1:f3:b1:30:da:19:34:50:bf:ba:86:97:57:0d:2d:ec:cf:
90:a5:53:c7:44:c2:c8:14:0c:f8:07:07:63:f5:4a:df:82:72:
27:39:f5:33:f2:21:95:60:63:13:66:e4:6c:28:97:8d:1a:e7:
8c:42:d9:1f:0b:5d:2e:7a:ce:9f:2f:e8:dd:57:b5:32:e5:f3:
61:af:0f:81:ff:62:f7:f0:be:5a:91:55:55:26:30:86:17:a0:
78:4d:92:26:09:e4:93:fb:09:fa:25:11:d8:7f:73:1d:e6:af:
22:1a:58:6c:70:c6:6c:fb:af:e5:37:e2:eb:3f:f7:ee:3b:a8:
d3:ec:5a:20:ca:d0:e6:ba:14:92:db:ad:b4:fe:25:71:4d:93:
6c:55:e8:d1:16:cd:ff:61:ab:4a:62:64:46:8f:42:60:bb:cc:
d2:37:50:1b:30:06:41:2d:19:ac:b7:5e:5c:ef:68:ee:ab:34:
cf:9a:3d:33:42:2a:a5:7a:e2:12:8c:9d:b7:49:bd:a2:45:d6:
55:09:1a:2b
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUJDWMoAsFqMme/jY0fu1KsokZApowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjAzMTgwOTIxMDRaFw0yNzAzMTcwOTI2MDRaMDMxMTAvBgNV
BAMTKDBFNjU2RTlFNzhGNTlGQ0YxRjA0MkQzNkE1MEY4Qzg1REM3N0E4QkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwscFnKRBnsVMEa/UyuGUXyw7Q
QOpYavUWxNw0kpUPx7jMzTkVPhCRYs9Jsa4SDvasNpQzkU3vzVXDWnJklldtvrlq
FFfePP2BdyZjoKYITxiInqrsHV8h4hQ41s4oDY6tEWuW6gT0STWoBSQfJVT8RoWg
bJE922IKAZlbS4a+Om/cTWdAjRbc6N/QEc1BS1QS3gk8VL+4pQInGFpUkDzZ2+ZU
Mhk3D253wfTqk6nowLY2yiu0F1mlK9fiL5E7/Hmzti62Ge0Y0ZMKOMMlM/t4TPJe
ZiLtO0Fc2VJ7JZ7iguCpZsNasQ8DeZVs3JxtmG46HiUsc5s4T/iWXyLK44LVAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUDmVunnj1n88fBC02pQ+Mhdx3qLowHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTNDAyMjAzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsl18
MA0GCSqGSIb3DQEBCwUAA4IBAQBAEycikIY0xi/KVkipKJFZtgccE0mjbc8OfyCt
S9GlxSvWK8DjMSp8fcrvdFP9ms2CBqfhC+GE8fOxMNoZNFC/uoaXVw0t7M+QpVPH
RMLIFAz4Bwdj9UrfgnInOfUz8iGVYGMTZuRsKJeNGueMQtkfC10ues6fL+jdV7Uy
5fNhrw+B/2L38L5akVVVJjCGF6B4TZImCeST+wn6JRHYf3Md5q8iGlhscMZs+6/l
N+LrP/fuO6jT7FogytDmuhSS2620/iVxTZNsVejRFs3/YatKYmRGj0Jgu8zSN1Ab
MAZBLRmst15c72juqzTPmj0zQiqleuISjJ23Sb2iRdZVCRor
-----END CERTIFICATE-----
Generated at Wed Mar 18 15:41:47 2026 by rpki-client