Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402268.roa
File: AS402268.roa (raw, json)
Hash identifier: 3fMuERC0CMLlAYJ6ftZqKcwkyGkbaiiNvpYLZu9EcJU=
Subject key identifier: 44:7A:2A:30:2D:6C:D3:A2:1F:8C:AA:AB:A0:DA:A9:F0:C7:96:C8:21
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 1159CFBA14835888F1BAFD4AF4DEE01EE690D38B
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402268.roa
Signing time: Fri 10 Apr 2026 11:49:12 +0000
ROA not before: Fri 10 Apr 2026 11:44:12 +0000
ROA not after: Fri 09 Apr 2027 11:49:12 +0000
asID: 402268
IP address blocks: 91.124.30.0/24 maxlen: 24
91.124.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Apr 2026 16:16:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:59:cf:ba:14:83:58:88:f1:ba:fd:4a:f4:de:e0:1e:e6:90:d3:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Apr 10 11:44:12 2026 GMT
Not After : Apr 9 11:49:12 2027 GMT
Subject: CN=447A2A302D6CD3A21F8CAAABA0DAA9F0C796C821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:08:ad:86:5f:a7:a3:a2:e4:a0:b3:ca:8c:56:
43:e2:c7:f9:b5:fc:83:c0:dc:de:dd:1a:1d:36:50:
96:2b:5b:fc:13:20:29:37:df:47:b4:02:21:a2:06:
ad:68:c7:4d:bc:d7:1a:0e:73:7f:1d:f9:77:f2:ab:
0e:9b:ed:98:06:7e:70:c4:77:d4:cb:6f:db:83:f2:
43:1e:b9:64:38:d9:b6:02:93:99:d5:48:d7:aa:0c:
54:ee:0d:6c:3e:02:10:9d:ce:6c:87:d6:95:27:ad:
17:f0:dd:0c:48:95:9f:87:fa:04:27:cb:f5:14:59:
b0:b7:a8:63:59:d0:82:74:5b:12:76:18:b3:a6:02:
0e:2b:dd:73:64:ce:47:fd:1f:5b:b1:ab:92:a4:10:
a5:c5:f7:69:20:08:aa:0b:6e:0a:85:41:13:de:56:
fb:35:fb:6a:c1:db:bb:a6:1b:fb:8d:e4:ab:85:a6:
55:7a:79:c4:9e:7e:81:9a:72:0c:58:b1:a2:77:8f:
42:96:e5:ad:10:ff:94:6c:a1:dd:51:d7:98:05:e4:
c0:7a:7d:10:e4:9f:ee:7f:0e:f4:8a:82:43:c9:b7:
4f:e6:ee:b3:f5:74:38:bd:6e:6e:0d:ad:ff:59:b7:
dc:12:7a:93:61:2a:b1:c1:a2:7e:55:d0:ec:08:b8:
db:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:7A:2A:30:2D:6C:D3:A2:1F:8C:AA:AB:A0:DA:A9:F0:C7:96:C8:21
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402268.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.30.0/24
91.124.198.0/24
Signature Algorithm: sha256WithRSAEncryption
76:54:a8:31:05:9b:3d:e7:27:f6:f4:02:43:b1:dc:45:4b:29:
9a:86:a5:ee:e0:2e:08:b0:52:ca:13:03:f3:1d:7e:e3:45:d3:
37:73:65:67:06:47:96:14:6b:a3:75:7b:8b:92:ac:36:2e:77:
31:e7:0a:2c:8a:86:3c:b7:29:be:cd:96:d0:db:98:15:9f:d0:
d0:49:52:3c:79:11:5d:66:2a:2d:a4:79:72:c1:e6:27:1d:8f:
3e:de:54:50:e4:33:ff:28:49:59:e5:62:82:d8:03:40:ea:37:
1a:ea:d2:75:60:19:a3:c1:c8:9a:98:55:34:52:03:12:df:ef:
5f:ef:c2:d3:e0:e4:1a:9c:d8:1e:50:92:f5:ba:e9:03:28:d3:
b4:a7:5e:4c:b4:76:29:67:9b:69:08:7f:25:b1:31:7f:f8:47:
c5:5c:45:1e:23:30:9f:b8:53:80:4a:44:d6:5e:42:6a:d2:28:
27:d9:15:ca:d5:25:30:4b:a6:7e:c0:c0:47:44:69:a4:e6:45:
90:92:d1:92:73:8f:e7:d1:7e:e7:ac:82:01:62:b1:80:d9:b1:
31:43:ed:7b:73:4f:7c:45:9a:7a:bd:b5:5e:10:97:9a:79:a8:
7b:95:8f:8b:57:8f:7d:81:3e:1b:bd:d1:cc:d2:f6:e8:20:aa:
f1:95:03:9a
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUEVnPuhSDWIjxuv1K9N7gHuaQ04swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjA0MTAxMTQ0MTJaFw0yNzA0MDkxMTQ5MTJaMDMxMTAvBgNV
BAMTKDQ0N0EyQTMwMkQ2Q0QzQTIxRjhDQUFBQkEwREFBOUYwQzc5NkM4MjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVCK2GX6ejouSgs8qMVkPix/m1
/IPA3N7dGh02UJYrW/wTICk330e0AiGiBq1ox0281xoOc38d+Xfyqw6b7ZgGfnDE
d9TLb9uD8kMeuWQ42bYCk5nVSNeqDFTuDWw+AhCdzmyH1pUnrRfw3QxIlZ+H+gQn
y/UUWbC3qGNZ0IJ0WxJ2GLOmAg4r3XNkzkf9H1uxq5KkEKXF92kgCKoLbgqFQRPe
Vvs1+2rB27umG/uN5KuFplV6ecSefoGacgxYsaJ3j0KW5a0Q/5Rsod1R15gF5MB6
fRDkn+5/DvSKgkPJt0/m7rP1dDi9bm4Nrf9Zt9wSepNhKrHBon5V0OwIuNsBAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQURHoqMC1s06IfjKqroNqp8MeWyCEwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTNDAyMjY4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW3we
AwQAW3zGMA0GCSqGSIb3DQEBCwUAA4IBAQB2VKgxBZs95yf29AJDsdxFSymahqXu
4C4IsFLKEwPzHX7jRdM3c2VnBkeWFGujdXuLkqw2Lncx5wosioY8tym+zZbQ25gV
n9DQSVI8eRFdZiotpHlyweYnHY8+3lRQ5DP/KElZ5WKC2ANA6jca6tJ1YBmjwcia
mFU0UgMS3+9f78LT4OQanNgeUJL1uukDKNO0p15MtHYpZ5tpCH8lsTF/+EfFXEUe
IzCfuFOASkTWXkJq0ign2RXK1SUwS6Z+wMBHRGmk5kWQktGSc4/n0X7nrIIBYrGA
2bExQ+17c098RZp6vbVeEJeaeah7lY+LV499gT4bvdHM0vboIKrxlQOa
-----END CERTIFICATE-----
Generated at Fri Apr 10 22:03:59 2026 by rpki-client