Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402265.roa
File:                     AS402265.roa (raw, json)
Hash identifier:          vydypO2hY6qLnfA00V7d8H/AhHAqoSUKkcr/79Y6qVQ=
Subject key identifier:   23:96:5C:90:CF:EE:06:E4:6E:73:9A:EF:19:3B:39:85:C6:66:25:CA
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       15927B190B4526A81B34589A8C94B3DFBE1A1A4F
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402265.roa
Signing time:             Sat 19 Sep 2026 09:15:12 +0000
ROA not before:           Sat 19 Sep 2026 09:10:12 +0000
ROA not after:            Sat 18 Sep 2027 09:15:12 +0000
asID:                     402265
IP address blocks:        46.202.49.0/24 maxlen: 24
                          46.202.51.0/24 maxlen: 24
                          46.202.66.0/24 maxlen: 24
                          46.203.32.0/24 maxlen: 24
                          46.203.43.0/24 maxlen: 24
                          46.203.44.0/24 maxlen: 24
                          46.203.47.0/24 maxlen: 24
                          46.203.54.0/24 maxlen: 24
                          46.203.55.0/24 maxlen: 24
                          46.203.58.0/24 maxlen: 24
                          46.203.97.0/24 maxlen: 24
                          46.203.102.0/24 maxlen: 24
                          46.203.104.0/24 maxlen: 24
                          46.203.113.0/24 maxlen: 24
                          46.203.121.0/24 maxlen: 24
                          46.203.136.0/24 maxlen: 24
                          46.203.149.0/24 maxlen: 24
                          46.203.161.0/24 maxlen: 24
                          46.203.183.0/24 maxlen: 24
                          46.203.213.0/24 maxlen: 24
                          91.124.26.0/24 maxlen: 24
                          91.124.40.0/24 maxlen: 24
                          91.124.57.0/24 maxlen: 24
                          91.124.67.0/24 maxlen: 24
                          91.124.89.0/24 maxlen: 24
                          91.124.120.0/24 maxlen: 24
                          91.124.136.0/24 maxlen: 24
                          91.124.137.0/24 maxlen: 24
                          91.124.142.0/24 maxlen: 24
                          91.124.143.0/24 maxlen: 24
                          91.124.148.0/24 maxlen: 24
                          91.124.170.0/24 maxlen: 24
                          91.124.177.0/24 maxlen: 24
                          91.124.199.0/24 maxlen: 24
                          91.124.202.0/24 maxlen: 24
                          91.124.241.0/24 maxlen: 24
                          92.112.36.0/24 maxlen: 24
                          92.112.46.0/24 maxlen: 24
                          92.112.223.0/24 maxlen: 24
                          92.113.104.0/24 maxlen: 24
                          92.113.118.0/24 maxlen: 24
                          92.113.193.0/24 maxlen: 24
                          92.113.228.0/24 maxlen: 24
                          95.134.29.0/24 maxlen: 24
                          95.134.40.0/24 maxlen: 24
                          95.134.77.0/24 maxlen: 24
                          95.134.123.0/24 maxlen: 24
                          95.134.149.0/24 maxlen: 24
                          95.134.158.0/24 maxlen: 24
                          95.134.203.0/24 maxlen: 24
                          95.135.13.0/24 maxlen: 24
                          95.135.60.0/24 maxlen: 24
                          95.135.63.0/24 maxlen: 24
                          95.135.81.0/24 maxlen: 24
                          95.135.83.0/24 maxlen: 24
                          95.135.110.0/24 maxlen: 24
                          95.135.117.0/24 maxlen: 24
                          95.135.201.0/24 maxlen: 24
                          95.135.210.0/24 maxlen: 24
                          95.135.239.0/24 maxlen: 24
                          178.92.37.0/24 maxlen: 24
                          178.92.38.0/24 maxlen: 24
                          178.93.3.0/24 maxlen: 24
                          178.93.192.0/24 maxlen: 24
                          178.94.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Sep 2026 08:20:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:92:7b:19:0b:45:26:a8:1b:34:58:9a:8c:94:b3:df:be:1a:1a:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Sep 19 09:10:12 2026 GMT
            Not After : Sep 18 09:15:12 2027 GMT
        Subject: CN=23965C90CFEE06E46E739AEF193B3985C66625CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:29:a0:38:c8:eb:6f:20:d8:09:7c:7d:27:39:
                    48:9d:3a:7f:20:14:54:f9:e3:60:e1:34:da:89:62:
                    c7:6a:cc:7e:4d:66:19:01:42:6c:97:75:04:3b:ca:
                    d7:4a:45:9f:b4:80:b2:25:d9:fc:3f:ed:52:28:1a:
                    d4:8d:9c:4a:61:32:e0:51:67:db:84:61:a6:56:08:
                    c5:d9:42:cb:db:46:9c:96:03:72:20:d7:5c:f3:b4:
                    ea:37:40:83:00:75:f7:d8:7f:ce:21:06:de:9e:49:
                    14:6c:fe:f4:71:45:d1:07:de:e0:52:19:9f:13:7b:
                    2e:64:32:03:08:9d:11:68:0e:4d:60:fa:2a:db:cf:
                    23:b6:6d:81:48:b2:74:97:52:dc:67:c8:f1:4f:a4:
                    ad:ee:70:4f:0d:d5:5f:78:16:31:23:61:e6:5a:f7:
                    9c:45:42:9f:ea:da:ae:77:ff:1b:21:32:f0:88:3a:
                    20:84:89:57:de:5a:ce:96:c6:ec:a1:ec:a8:47:2c:
                    73:d5:19:b0:9a:24:36:7a:19:9f:c7:f6:46:90:00:
                    1f:ac:9f:06:aa:21:95:5b:19:3a:9c:88:2d:4c:11:
                    3f:2a:eb:d3:8b:91:3b:9a:e4:be:9e:3b:2f:46:c5:
                    b9:f5:bb:a0:c9:b7:a4:4d:40:48:f2:a6:42:6c:eb:
                    c2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:96:5C:90:CF:EE:06:E4:6E:73:9A:EF:19:3B:39:85:C6:66:25:CA
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402265.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.202.49.0/24
                  46.202.51.0/24
                  46.202.66.0/24
                  46.203.32.0/24
                  46.203.43.0-46.203.44.255
                  46.203.47.0/24
                  46.203.54.0/23
                  46.203.58.0/24
                  46.203.97.0/24
                  46.203.102.0/24
                  46.203.104.0/24
                  46.203.113.0/24
                  46.203.121.0/24
                  46.203.136.0/24
                  46.203.149.0/24
                  46.203.161.0/24
                  46.203.183.0/24
                  46.203.213.0/24
                  91.124.26.0/24
                  91.124.40.0/24
                  91.124.57.0/24
                  91.124.67.0/24
                  91.124.89.0/24
                  91.124.120.0/24
                  91.124.136.0/23
                  91.124.142.0/23
                  91.124.148.0/24
                  91.124.170.0/24
                  91.124.177.0/24
                  91.124.199.0/24
                  91.124.202.0/24
                  91.124.241.0/24
                  92.112.36.0/24
                  92.112.46.0/24
                  92.112.223.0/24
                  92.113.104.0/24
                  92.113.118.0/24
                  92.113.193.0/24
                  92.113.228.0/24
                  95.134.29.0/24
                  95.134.40.0/24
                  95.134.77.0/24
                  95.134.123.0/24
                  95.134.149.0/24
                  95.134.158.0/24
                  95.134.203.0/24
                  95.135.13.0/24
                  95.135.60.0/24
                  95.135.63.0/24
                  95.135.81.0/24
                  95.135.83.0/24
                  95.135.110.0/24
                  95.135.117.0/24
                  95.135.201.0/24
                  95.135.210.0/24
                  95.135.239.0/24
                  178.92.37.0-178.92.38.255
                  178.93.3.0/24
                  178.93.192.0/24
                  178.94.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:36:b9:9e:d9:ac:c6:9d:71:e6:a3:bc:f0:33:a2:5d:d4:d8:
         66:b9:2b:4c:b2:8c:e2:e3:81:1e:4e:6f:e4:5f:4f:5b:2f:60:
         9c:ba:93:e4:e3:86:6e:99:1c:7e:fa:3d:b4:b0:55:ae:f4:eb:
         34:02:c3:3e:6a:bf:66:1e:8e:63:59:60:30:73:be:db:44:4e:
         47:5b:c5:70:c0:f1:a2:7b:2c:31:07:a5:a0:31:bf:8e:79:23:
         ea:9e:7b:ed:d0:f5:a9:fd:7a:fa:1e:92:10:aa:9c:dc:74:2f:
         87:91:97:03:89:53:b9:07:1c:2f:77:71:81:9d:eb:41:ae:9f:
         82:5e:f1:e0:bd:1b:e4:d0:08:b9:34:a3:b8:1e:26:a1:60:50:
         5d:44:67:8c:17:00:8e:ee:7f:1c:25:e6:de:59:c5:82:f4:9d:
         74:b7:8a:47:57:49:bb:5e:bf:ab:8f:a0:f3:c1:17:26:9e:6f:
         b2:43:77:d6:15:d0:49:35:51:b7:15:af:f7:e6:93:24:cf:f1:
         46:42:de:69:bd:c2:3e:f8:08:46:e5:3b:03:20:fa:30:3a:0a:
         b4:77:1e:5f:41:ce:60:d7:cf:89:f9:ac:df:c2:8c:00:2d:47:
         b4:61:c5:36:4a:25:b9:ff:49:76:d9:cc:2d:87:69:77:b7:6a:
         f2:3a:cf:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 14:17:27 2026 by rpki-client