Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402236.roa
File: AS402236.roa (raw, json)
Hash identifier: iV2w1sK7Wd//KruwErNNgHXR3PxkaB1XnyOpbLFgTXo=
Subject key identifier: F9:ED:07:39:17:26:07:B3:AC:44:5F:F0:4D:CF:33:CC:6D:3F:9C:23
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 6347E67B864EFDA42FC37662670D79C1A877105D
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402236.roa
Signing time: Mon 06 Jul 2026 18:24:18 +0000
ROA not before: Mon 06 Jul 2026 18:19:18 +0000
ROA not after: Mon 05 Jul 2027 18:24:18 +0000
asID: 402236
IP address blocks: 46.203.107.0/24 maxlen: 24
46.203.114.0/24 maxlen: 24
46.203.145.0/24 maxlen: 24
46.203.146.0/24 maxlen: 24
46.203.168.0/24 maxlen: 24
46.203.169.0/24 maxlen: 24
46.203.171.0/24 maxlen: 24
46.203.174.0/24 maxlen: 24
46.203.177.0/24 maxlen: 24
46.203.179.0/24 maxlen: 24
91.124.242.0/24 maxlen: 24
92.112.6.0/24 maxlen: 24
92.112.8.0/24 maxlen: 24
92.112.55.0/24 maxlen: 24
92.112.62.0/24 maxlen: 24
92.112.89.0/24 maxlen: 24
92.112.142.0/24 maxlen: 24
92.113.6.0/24 maxlen: 24
92.113.15.0/24 maxlen: 24
92.113.40.0/24 maxlen: 24
95.134.184.0/24 maxlen: 24
95.134.204.0/24 maxlen: 24
95.134.206.0/24 maxlen: 24
95.134.221.0/24 maxlen: 24
95.134.223.0/24 maxlen: 24
95.135.72.0/24 maxlen: 24
178.95.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 20:41:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:47:e6:7b:86:4e:fd:a4:2f:c3:76:62:67:0d:79:c1:a8:77:10:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jul 6 18:19:18 2026 GMT
Not After : Jul 5 18:24:18 2027 GMT
Subject: CN=F9ED0739172607B3AC445FF04DCF33CC6D3F9C23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:51:c9:6e:1e:3d:5b:6c:a0:68:5e:a9:36:f8:
e5:38:2f:a1:f3:f4:91:e4:c8:71:7b:9e:1e:48:73:
71:37:6d:96:da:7d:95:4f:fc:95:bb:26:85:e4:77:
46:ac:6d:a1:ac:b4:f4:54:66:d9:ce:f7:9f:6a:32:
ca:95:c8:0a:7d:5a:12:92:3b:91:75:35:ca:5a:f7:
53:f1:ce:58:d0:29:d1:b2:19:20:30:a2:47:d3:18:
4c:3e:34:f3:b1:1a:75:88:23:ce:05:99:6f:52:be:
9c:b9:a5:ae:a1:59:68:62:d5:9b:fb:68:d3:55:d9:
3c:c8:94:43:3b:90:36:f8:43:00:8a:79:0e:b2:93:
e5:d9:5c:4a:ff:02:c4:86:8a:7f:31:d4:ee:4c:c4:
ee:1e:24:66:a4:f1:ab:98:7b:2e:e4:dc:20:d6:38:
64:8c:ce:25:11:51:a2:5e:30:5e:24:7d:96:8b:44:
d2:fc:cb:bb:70:99:36:18:c3:08:05:2d:d3:62:e5:
8b:9b:1c:d0:1f:cb:57:94:9b:b8:da:e8:19:ad:5c:
b4:cd:89:a3:ba:8b:4c:2a:d9:24:29:89:de:d3:9c:
fa:7a:f9:d4:5d:9f:aa:8a:f7:00:7b:4b:7d:96:1d:
d0:d3:61:dd:6e:fa:30:eb:67:48:2e:01:74:28:95:
84:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:ED:07:39:17:26:07:B3:AC:44:5F:F0:4D:CF:33:CC:6D:3F:9C:23
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.107.0/24
46.203.114.0/24
46.203.145.0-46.203.146.255
46.203.168.0/23
46.203.171.0/24
46.203.174.0/24
46.203.177.0/24
46.203.179.0/24
91.124.242.0/24
92.112.6.0/24
92.112.8.0/24
92.112.55.0/24
92.112.62.0/24
92.112.89.0/24
92.112.142.0/24
92.113.6.0/24
92.113.15.0/24
92.113.40.0/24
95.134.184.0/24
95.134.204.0/24
95.134.206.0/24
95.134.221.0/24
95.134.223.0/24
95.135.72.0/24
178.95.230.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:63:8a:13:ab:9c:38:2c:12:3b:1e:6f:b5:a3:c7:0f:e1:d2:
a6:8d:5d:99:73:c6:7a:11:0a:33:0a:a5:f1:2d:0d:c2:55:98:
af:3b:c4:b1:e7:b3:96:10:4f:d4:16:88:ca:79:d0:76:b9:0c:
40:c7:4f:ab:de:62:24:a8:08:f6:52:15:86:6c:86:88:dd:26:
a6:9f:5d:ff:ea:0a:96:7c:66:f4:32:95:e0:18:6e:63:81:38:
a5:e8:fb:6e:ed:88:10:37:b3:3f:4a:44:d5:14:ed:2b:8e:14:
30:e0:49:2c:f4:fc:0d:c6:20:d0:b5:3c:14:52:f6:75:a7:11:
51:e8:e1:25:a4:5d:fd:c3:23:96:d2:4b:46:9f:de:67:35:da:
8f:84:5a:a4:b3:f3:85:7d:b7:72:ec:4e:25:f5:00:3f:17:5b:
1f:4a:1a:9a:c0:3e:c4:f0:e5:b1:5b:b6:9e:21:6b:f9:da:3e:
fc:03:40:16:0f:5c:6a:a0:70:9f:ca:96:a4:41:c3:0e:87:2e:
d4:32:0d:c0:3c:bb:a0:a8:b4:f5:4e:ed:5d:27:46:24:d1:15:
bb:1a:d8:9c:d7:57:9f:f7:26:94:5c:49:0d:58:44:f0:ff:d2:
c9:d3:76:86:82:12:45:34:54:cf:c8:5a:6f:ff:fc:45:79:50:
4f:e4:f1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 05:42:42 2026 by rpki-client