Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402265.roa
File: AS402265.roa (raw, json)
Hash identifier: Y5FzUFr5IrkRXEajdwoerc0cXIB1ixghNY/V62PqFIg=
Subject key identifier: AA:F1:B0:32:54:54:12:D1:4C:00:91:D2:2C:8A:93:63:29:DC:98:5D
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 19FC4FF5766593699BEB55ACD59482A639FBD104
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402265.roa
Signing time: Fri 23 Oct 2026 10:30:32 +0000
ROA not before: Fri 23 Oct 2026 10:25:32 +0000
ROA not after: Fri 22 Oct 2027 10:30:32 +0000
asID: 402265
IP address blocks: 46.202.119.0/24 maxlen: 24
91.124.173.0/24 maxlen: 24
91.124.179.0/24 maxlen: 24
92.112.42.0/24 maxlen: 24
92.112.144.0/24 maxlen: 24
92.113.118.0/24 maxlen: 24
95.134.123.0/24 maxlen: 24
95.134.158.0/24 maxlen: 24
95.135.239.0/24 maxlen: 24
178.94.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 01:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:fc:4f:f5:76:65:93:69:9b:eb:55:ac:d5:94:82:a6:39:fb:d1:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 23 10:25:32 2026 GMT
Not After : Oct 22 10:30:32 2027 GMT
Subject: CN=AAF1B032545412D14C0091D22C8A936329DC985D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0d:4c:51:b8:33:0f:f5:7a:c8:b9:bb:1f:83:
35:f3:63:b8:43:05:27:e0:c9:ae:cd:f2:cd:45:ba:
ac:1a:d5:35:6d:55:eb:77:db:91:37:38:59:4a:75:
10:5d:9c:03:d2:76:ce:0c:bf:d9:24:9a:78:91:c4:
73:fb:c6:50:f4:3e:c7:e0:ee:d1:06:96:6b:5f:c6:
dd:4a:48:f4:c2:bd:e4:7d:65:14:26:f9:21:71:45:
8a:2b:ae:9f:ca:fc:e3:94:dd:d4:87:00:7f:5e:71:
48:c6:06:c7:55:32:4d:1f:91:88:6c:3a:d0:09:be:
f3:19:9d:82:bb:1f:3b:9a:a0:0c:e6:ba:86:f0:15:
39:a8:05:42:fc:89:ae:5a:b0:2c:97:7e:c8:a8:a4:
e0:83:ce:98:61:a4:3b:11:e8:1f:82:1d:5a:08:90:
7f:c4:f9:df:5f:9b:5e:34:2d:1c:4c:43:bd:af:30:
9c:28:21:aa:4f:f7:ad:4a:f7:5d:b0:2e:e9:8f:f8:
f7:14:c5:40:ec:22:f8:cd:3e:9f:3c:ae:81:1b:ee:
2e:68:54:5b:e8:be:64:99:39:29:83:92:09:09:05:
51:1b:3a:96:01:c7:2c:a0:be:ee:c2:a3:44:d0:f2:
6e:98:28:b8:11:ae:c5:6f:88:1e:28:a2:ee:86:65:
b2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F1:B0:32:54:54:12:D1:4C:00:91:D2:2C:8A:93:63:29:DC:98:5D
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402265.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.119.0/24
91.124.173.0/24
91.124.179.0/24
92.112.42.0/24
92.112.144.0/24
92.113.118.0/24
95.134.123.0/24
95.134.158.0/24
95.135.239.0/24
178.94.241.0/24
Signature Algorithm: sha256WithRSAEncryption
61:d2:87:a0:1a:48:7b:f2:2f:41:e5:72:52:6c:7f:42:20:37:
c3:36:8d:ae:a4:71:47:eb:2a:14:b2:1a:12:7e:62:95:83:5f:
17:f5:ec:6e:22:3a:80:9a:2e:8d:53:e5:20:a1:bc:9a:b2:c7:
66:a8:bf:6d:b9:19:78:25:bc:42:54:bc:0f:f3:b4:c6:cc:fb:
c4:6f:38:4e:24:8b:a5:ea:3b:99:a4:85:af:7f:76:8b:2f:69:
ca:e8:58:cf:5a:06:e8:05:f3:65:27:cb:8b:65:92:7b:be:2d:
c5:8a:ab:15:bc:89:25:14:f1:eb:19:56:07:7d:e8:44:e7:99:
6b:2f:89:a4:a0:5a:6e:a4:91:dd:a0:fe:d6:d1:ad:43:f7:da:
b6:53:f5:75:86:64:23:c5:a4:ff:7d:71:ed:1c:74:09:0e:e8:
de:4d:26:c1:b6:d8:e3:0e:a5:01:c5:eb:a8:51:89:72:f9:03:
cb:db:8a:b6:11:0e:73:0c:af:86:3c:ff:1e:00:94:7b:6b:79:
39:e0:05:0f:ac:49:07:df:b3:9d:4c:0c:c2:58:3f:4c:fa:c6:
82:80:5e:81:01:d0:42:56:58:6f:b0:c1:9a:a7:7f:7f:f1:f1:
73:c3:15:dc:b8:11:91:c5:45:26:0e:57:35:cd:74:30:c0:be:
51:90:6c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 11:37:07 2026 by rpki-client