Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402215.roa
File: AS402215.roa (raw, json)
Hash identifier: F+aTetXT/1jUKTF5UsG5jmOCHY25EJH7U35Pa21n/fI=
Subject key identifier: 4A:52:A3:3E:9E:BD:F6:A2:A8:29:6E:12:D4:77:6F:5C:E9:6E:AE:28
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 2B17CE40301439BF4629FF004D4F2093F37D4A7F
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402215.roa
Signing time: Sat 18 Jul 2026 07:58:51 +0000
ROA not before: Sat 18 Jul 2026 07:53:51 +0000
ROA not after: Sat 17 Jul 2027 07:58:51 +0000
asID: 402215
IP address blocks: 46.203.87.0/24 maxlen: 24
92.112.47.0/24 maxlen: 24
92.113.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:17:ce:40:30:14:39:bf:46:29:ff:00:4d:4f:20:93:f3:7d:4a:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jul 18 07:53:51 2026 GMT
Not After : Jul 17 07:58:51 2027 GMT
Subject: CN=4A52A33E9EBDF6A2A8296E12D4776F5CE96EAE28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:48:a4:c4:09:40:68:2a:fb:47:67:75:a2:73:
df:b8:8a:f1:cb:f6:07:45:76:9e:be:82:26:59:60:
2d:1e:3a:4f:e1:b5:a0:ae:95:16:22:11:3d:84:e7:
24:a5:5b:b7:60:da:30:56:79:dd:d8:57:52:f8:7e:
8e:76:35:38:a6:63:d1:c0:fd:23:3c:e7:de:3e:80:
fd:cf:bb:4b:df:14:77:b4:ca:ab:a7:96:34:cf:2b:
1a:19:98:bf:fb:a4:d4:71:9b:d2:d0:d4:17:17:1b:
37:96:ce:eb:ca:9d:86:dc:39:1e:ea:5b:98:7b:6c:
82:68:4a:b1:f3:8d:50:80:bc:bc:35:b2:18:66:90:
2c:81:28:fd:9b:5b:87:f0:2e:e7:f5:d4:84:11:d4:
9a:a6:7f:c6:80:20:54:5e:b2:2a:9f:eb:1b:db:ab:
04:18:05:cc:7d:1b:c0:0f:36:34:cd:cd:60:0a:03:
da:39:04:61:d2:fa:22:e8:2c:88:33:50:40:ec:86:
82:f2:2a:4e:61:80:2b:07:cb:6a:cb:a6:2e:fc:40:
1e:52:0d:67:08:09:b8:8a:55:d7:d1:ab:23:b1:f6:
11:6e:20:e8:a9:20:fc:17:c3:4c:e9:2c:d0:89:68:
23:0f:97:41:34:4a:bd:f4:ae:08:74:a4:5d:8e:c1:
d2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:52:A3:3E:9E:BD:F6:A2:A8:29:6E:12:D4:77:6F:5C:E9:6E:AE:28
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402215.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.87.0/24
92.112.47.0/24
92.113.105.0/24
Signature Algorithm: sha256WithRSAEncryption
14:a0:82:02:6a:5d:20:60:2d:68:0e:0a:8b:60:57:9f:65:47:
fb:2b:4d:09:c6:e5:3f:74:c0:72:72:8b:fe:29:f0:f9:69:87:
7d:a1:eb:1a:6b:83:d0:8c:cd:ae:d4:e2:e2:0b:14:5b:4d:83:
18:e7:3e:75:0b:e9:6e:6e:43:1f:46:88:02:b0:8a:24:3e:d5:
79:80:8c:9b:1a:52:71:d6:7e:51:93:ea:9d:f9:20:5a:d7:23:
b8:8a:fd:24:23:11:1c:b1:e0:1f:6d:07:e2:d0:d5:d4:33:3b:
2b:8a:96:8b:ee:36:e1:76:9e:ac:02:a1:f7:4e:43:da:a4:cd:
ef:de:67:45:48:9b:05:83:6c:05:d9:27:ac:ec:a2:d0:30:f5:
ac:32:29:38:c2:72:0d:09:66:a5:b3:57:b9:44:9e:a6:b9:74:
99:02:a8:a2:c8:d8:ef:d5:b3:f0:3f:0c:58:b3:4c:bd:35:e5:
f8:58:f3:14:7d:66:d0:83:81:85:cb:b6:8c:e0:d5:d4:3e:35:
6e:3b:86:71:07:4e:ec:4e:3c:92:b1:cc:0d:3d:06:03:21:31:
2a:38:a8:d8:da:41:b9:e9:cc:e6:af:ce:a6:88:37:05:21:ae:
18:a0:b2:cc:18:fc:e5:17:99:ec:23:b2:76:3b:ef:2e:14:30:
19:6a:7c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 14:34:14 2026 by rpki-client