Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402236.roa
File: AS402236.roa (raw, json)
Hash identifier: PbWT+DumAkZG2IsFYIp8p6D2XvZns4p1ry7DttGjsX0=
Subject key identifier: 64:12:B8:35:08:BC:CF:00:14:80:79:60:FF:59:F5:7F:A3:3B:36:6B
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 29121E9A788483494640969DE8C3663CEA7F0D2E
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402236.roa
Signing time: Fri 14 Aug 2026 00:05:22 +0000
ROA not before: Fri 14 Aug 2026 00:00:22 +0000
ROA not after: Fri 13 Aug 2027 00:05:22 +0000
asID: 402236
IP address blocks: 46.203.107.0/24 maxlen: 24
46.203.114.0/24 maxlen: 24
46.203.145.0/24 maxlen: 24
46.203.146.0/24 maxlen: 24
46.203.168.0/24 maxlen: 24
46.203.169.0/24 maxlen: 24
46.203.171.0/24 maxlen: 24
46.203.174.0/24 maxlen: 24
46.203.177.0/24 maxlen: 24
46.203.179.0/24 maxlen: 24
91.124.242.0/24 maxlen: 24
92.112.6.0/24 maxlen: 24
92.112.8.0/24 maxlen: 24
92.112.55.0/24 maxlen: 24
92.112.62.0/24 maxlen: 24
92.112.89.0/24 maxlen: 24
92.113.6.0/24 maxlen: 24
92.113.15.0/24 maxlen: 24
92.113.40.0/24 maxlen: 24
95.134.184.0/24 maxlen: 24
95.134.204.0/24 maxlen: 24
95.134.206.0/24 maxlen: 24
95.134.221.0/24 maxlen: 24
95.134.223.0/24 maxlen: 24
95.135.72.0/24 maxlen: 24
178.95.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 00:12:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:12:1e:9a:78:84:83:49:46:40:96:9d:e8:c3:66:3c:ea:7f:0d:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 14 00:00:22 2026 GMT
Not After : Aug 13 00:05:22 2027 GMT
Subject: CN=6412B83508BCCF0014807960FF59F57FA33B366B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:70:82:30:8b:a1:1d:6c:8c:74:61:10:db:7d:
44:ce:1f:d4:11:bb:f1:d5:0f:7e:e3:3a:d9:db:06:
1a:0f:97:d1:8f:c4:2c:ca:53:d8:ad:ca:10:d4:12:
32:6f:6f:3a:e7:96:ed:58:9b:2f:25:8a:f2:d4:ce:
f8:9b:f1:72:38:55:f3:f7:eb:58:75:c7:5d:1b:99:
7c:c9:87:ac:cf:9d:19:16:c3:ca:c3:89:ad:05:28:
56:c4:be:56:f0:9f:29:e9:75:77:4c:72:f0:f8:60:
e3:da:49:04:b5:06:7e:7e:82:d4:70:ca:7a:f4:96:
9d:7d:7d:c6:5e:a5:0a:2b:00:fb:d4:31:10:96:4e:
27:f7:55:b1:e5:e8:47:a3:88:4a:84:9d:4a:ab:ea:
60:c5:28:3a:b8:23:c0:77:a9:87:60:b4:c6:2b:3c:
52:9e:40:aa:f4:6e:f6:38:b2:d6:c3:7e:f5:2b:c4:
2a:07:14:7f:61:ea:87:de:c2:4f:2f:03:0a:51:c6:
bd:e6:fc:ca:7c:87:bb:16:ab:9d:27:4d:81:7d:28:
24:64:0e:0d:35:21:28:9d:32:01:58:88:72:23:52:
c2:91:0c:29:e3:e9:6c:9f:e4:cb:eb:1e:a4:c5:65:
44:ca:a0:7c:90:e1:44:18:2c:31:82:7b:cb:2e:59:
a7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:12:B8:35:08:BC:CF:00:14:80:79:60:FF:59:F5:7F:A3:3B:36:6B
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.107.0/24
46.203.114.0/24
46.203.145.0-46.203.146.255
46.203.168.0/23
46.203.171.0/24
46.203.174.0/24
46.203.177.0/24
46.203.179.0/24
91.124.242.0/24
92.112.6.0/24
92.112.8.0/24
92.112.55.0/24
92.112.62.0/24
92.112.89.0/24
92.113.6.0/24
92.113.15.0/24
92.113.40.0/24
95.134.184.0/24
95.134.204.0/24
95.134.206.0/24
95.134.221.0/24
95.134.223.0/24
95.135.72.0/24
178.95.230.0/24
Signature Algorithm: sha256WithRSAEncryption
13:ca:b4:4d:5a:02:d0:6a:72:73:a1:e3:c3:db:0d:92:35:59:
59:30:0d:29:01:be:aa:fa:86:db:42:b7:e0:f4:03:24:9b:67:
9e:ae:f8:73:7c:eb:e3:e7:d3:95:b0:c0:ee:d2:77:8c:0a:b0:
2d:c4:3d:26:3a:d1:db:b7:a9:81:1f:f9:f4:33:b4:87:45:4f:
d7:cb:e6:46:fe:b9:df:11:66:2d:28:fc:a7:a7:0c:45:04:78:
f7:64:5e:a0:1a:a7:96:01:56:00:a8:02:90:98:b9:10:d9:d5:
c4:14:e2:b6:98:83:13:23:ae:82:0f:e8:29:8e:87:90:51:91:
bd:f3:e9:7f:ad:4e:67:be:58:15:3d:03:f0:ac:3d:5b:ec:3a:
78:02:e2:43:d4:3e:86:85:cc:93:4e:cf:5e:16:b7:1c:df:6f:
fe:47:2b:1a:17:d4:c1:5a:50:c3:91:71:90:66:98:39:ea:b5:
9e:ec:4e:2a:9a:aa:80:32:00:bb:ec:6a:bd:e6:66:a3:fc:23:
01:0d:b8:8a:17:3b:ed:6a:cf:c5:88:e2:fb:4f:57:30:82:62:
b5:48:22:b5:a1:28:9f:28:69:e4:44:86:df:14:69:e1:52:5a:
81:8b:cb:de:ca:55:63:47:41:ae:21:1e:f8:ed:bb:96:5d:ab:
eb:8d:2e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 11:58:55 2026 by rpki-client