Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402215.roa
File: AS402215.roa (raw, json)
Hash identifier: WvYHtQtN4dyYRq1X6B/4BBbGgLZzOuIzwEByb+3dFs8=
Subject key identifier: 21:E0:CD:A7:73:CE:EA:52:3C:02:88:61:3B:4B:13:9A:1B:D0:3F:9E
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 291A6599D6EDFA6ABEEFF0DA9ACCEAD8C102EA2B
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402215.roa
Signing time: Sun 04 Oct 2026 21:53:40 +0000
ROA not before: Sun 04 Oct 2026 21:48:40 +0000
ROA not after: Sun 03 Oct 2027 21:53:40 +0000
asID: 402215
IP address blocks: 178.92.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 05:38:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:1a:65:99:d6:ed:fa:6a:be:ef:f0:da:9a:cc:ea:d8:c1:02:ea:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 4 21:48:40 2026 GMT
Not After : Oct 3 21:53:40 2027 GMT
Subject: CN=21E0CDA773CEEA523C0288613B4B139A1BD03F9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:02:ad:35:61:87:a0:e9:9b:f5:32:97:3b:1c:
2a:c6:5e:0b:ea:fc:5f:c5:fa:00:5f:81:11:01:a2:
c7:de:7c:3d:71:1f:1b:00:4a:12:93:da:d5:d6:79:
2f:a4:18:00:c9:56:2b:dc:bb:13:b2:f1:6c:d8:69:
24:38:67:dd:ff:27:89:51:bd:42:74:9b:4e:96:a0:
7d:80:b6:0a:7d:4a:03:04:84:c9:63:6f:4f:f5:56:
28:66:bf:e5:d2:cf:92:17:fb:3e:c5:ca:11:ab:ff:
f5:6b:8d:dc:c2:9d:76:c3:85:87:99:24:cb:8c:c8:
8f:c1:fd:16:43:75:65:8a:4f:ee:68:2f:26:8f:4d:
3d:a3:ed:73:2a:34:be:e3:22:cd:b2:65:c6:3e:10:
60:27:12:ae:d5:83:de:c3:03:d4:c6:2b:51:c3:cb:
a3:64:27:9a:02:ab:b5:9b:7d:e8:f5:6b:f9:e8:b1:
93:b5:0e:04:e2:41:d9:ca:eb:0b:ef:ee:ca:72:ae:
3e:c8:d8:1b:97:63:ec:4b:5d:4c:9e:d3:85:97:3f:
1b:8c:52:1d:70:79:39:6f:b4:d4:c4:c9:7f:a2:48:
27:c5:b5:cb:52:c8:9e:ef:e4:5b:c9:f9:29:a5:18:
10:e6:5a:60:16:bc:f4:ed:39:ec:02:e6:ea:aa:31:
3e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E0:CD:A7:73:CE:EA:52:3C:02:88:61:3B:4B:13:9A:1B:D0:3F:9E
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402215.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.92.117.0/24
Signature Algorithm: sha256WithRSAEncryption
47:2e:08:c4:4e:16:15:4e:52:13:f9:53:8f:3d:fb:8c:2e:86:
6d:f1:53:85:03:12:61:ec:73:9f:9d:13:32:a7:69:9d:4e:11:
d4:75:fe:1a:b2:ba:eb:d3:9d:31:a2:43:07:9d:c1:bb:22:cf:
ef:6a:38:a1:31:d8:fa:7f:72:ce:41:11:d8:2e:f1:37:06:5e:
68:27:e6:c8:01:b9:9e:83:ef:5b:b1:29:66:4f:e3:b5:2f:96:
7e:a9:27:6a:7f:01:8c:dc:2d:43:d0:e5:6c:00:5d:0c:20:4b:
15:a3:ec:f8:c1:49:5f:ff:8f:b7:e7:2b:21:88:64:09:ca:72:
41:3f:65:82:85:b7:18:b2:89:fc:6e:46:62:12:eb:08:df:3e:
d2:12:d2:e1:5c:2a:af:2c:ce:aa:8b:e3:7b:f3:da:3e:ee:27:
7c:df:5c:a3:70:16:05:da:e4:5e:dd:a2:08:0f:5c:0f:d8:01:
b7:8b:f4:ba:95:18:2f:b5:5c:73:9f:db:a5:2a:52:5b:e8:96:
ca:c4:2c:e6:b2:10:56:b4:34:c7:eb:b2:1d:ea:14:bb:51:f9:
b7:c3:15:76:c4:7c:aa:c9:c4:d0:91:68:cf:29:fc:62:f5:c0:
cd:88:bf:7c:da:1f:f3:d1:dd:87:aa:a6:b1:b1:7c:81:55:93:
60:83:70:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 23:48:14 2026 by rpki-client