Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402487.roa
File: AS402487.roa (raw, json)
Hash identifier: Ji8WQVaKkdTSd2Qe8/MNlwAMn2m11BojvjhjCYhtHXM=
Subject key identifier: F1:27:2E:4B:76:8C:A7:72:96:CD:2C:11:85:17:1E:7B:D8:B1:3C:72
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 72D9273971B3E55AD220AF699F74B6A9F0111300
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402487.roa
Signing time: Mon 29 Jun 2026 08:19:03 +0000
ROA not before: Mon 29 Jun 2026 08:14:03 +0000
ROA not after: Mon 28 Jun 2027 08:19:03 +0000
asID: 402487
IP address blocks: 46.203.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:d9:27:39:71:b3:e5:5a:d2:20:af:69:9f:74:b6:a9:f0:11:13:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jun 29 08:14:03 2026 GMT
Not After : Jun 28 08:19:03 2027 GMT
Subject: CN=F1272E4B768CA77296CD2C1185171E7BD8B13C72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:61:85:8f:49:b2:27:13:8e:f1:e2:30:c3:b5:
de:bb:de:29:a4:69:5f:16:94:b8:bf:e3:44:a8:df:
26:fa:4e:35:38:51:75:01:e7:e3:b6:82:52:28:42:
84:04:03:69:d0:69:6b:2d:63:57:b2:2b:d6:19:d7:
5d:7b:0d:9a:86:df:3d:ba:91:dd:ad:af:1c:1a:5a:
59:b2:fd:70:07:ac:cf:0a:3e:01:e9:3c:b5:e0:b4:
7e:e1:d1:96:82:2f:bd:9a:17:11:b4:34:31:ee:65:
c0:4f:a2:53:2a:b7:b6:4e:7c:fb:fa:cc:0f:50:25:
41:1c:cd:8b:ea:7d:54:fb:dc:0f:b6:0a:91:a9:2c:
a4:7a:a9:02:0b:19:28:7c:b0:19:61:8e:5c:69:b6:
c9:1f:c2:25:e0:90:82:c1:06:cd:22:1a:d7:44:2d:
e5:93:2d:6a:6d:60:4f:3a:f5:d9:1d:49:a5:e0:f2:
6b:60:75:4a:98:34:f3:82:e3:b9:2c:28:7c:b3:1c:
c4:a7:62:eb:bb:86:be:ab:90:97:dc:5b:89:78:86:
c1:19:9e:a2:ca:52:fe:f3:0a:a4:2c:21:fe:1a:d2:
01:c1:b1:5a:6d:b8:a4:bc:e8:d8:f9:71:99:ed:7e:
96:b9:ab:a0:bb:d7:f1:b4:bb:7c:0a:24:42:c9:0e:
c8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:27:2E:4B:76:8C:A7:72:96:CD:2C:11:85:17:1E:7B:D8:B1:3C:72
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402487.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.13.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:c4:21:10:b6:da:67:e9:51:91:fc:e3:fd:08:ac:31:3f:33:
08:cf:3b:c1:83:b4:ce:92:e1:3f:9e:7b:a1:a4:d0:67:71:ca:
7a:5d:1c:2e:86:14:49:65:f6:44:0d:44:5c:99:86:11:ea:5a:
d3:c3:8a:91:76:16:fe:b6:07:70:62:1d:76:04:a1:f1:4a:aa:
d4:01:06:66:87:25:58:8a:ab:c4:63:ea:34:68:4d:81:7f:d8:
a5:a3:5f:4f:40:b1:86:ff:21:91:23:f8:ad:3c:a6:70:7f:77:
d8:92:05:ce:d3:78:89:a3:19:a9:d4:57:b7:e9:ee:c9:02:e5:
db:d6:5d:59:53:16:08:9e:ec:a0:77:d8:78:fd:8e:e8:fd:fc:
a0:ca:5d:f1:7c:c2:86:d1:db:ba:4d:fd:a7:34:9a:8e:59:2a:
e4:1b:01:f6:6c:55:33:15:61:5d:10:89:11:dc:b6:f8:f5:2e:
ee:42:33:99:dd:c7:16:70:68:a8:65:7a:6f:c7:a9:87:fa:6d:
d1:d2:9a:ae:f5:48:8a:e7:97:1a:8f:48:c8:d3:01:75:5f:97:
b5:0f:17:73:08:9b:dc:76:39:1d:11:bc:8b:11:1f:62:f1:8a:
4c:02:b5:e8:d5:07:a9:d0:66:e9:cf:06:94:3b:5a:dc:5d:05:
b0:d0:4e:9f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUctknOXGz5VrSIK9pn3S2qfAREwAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjA2MjkwODE0MDNaFw0yNzA2MjgwODE5MDNaMDMxMTAvBgNV
BAMTKEYxMjcyRTRCNzY4Q0E3NzI5NkNEMkMxMTg1MTcxRTdCRDhCMTNDNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtYYWPSbInE47x4jDDtd673imk
aV8WlLi/40So3yb6TjU4UXUB5+O2glIoQoQEA2nQaWstY1eyK9YZ1117DZqG3z26
kd2trxwaWlmy/XAHrM8KPgHpPLXgtH7h0ZaCL72aFxG0NDHuZcBPolMqt7ZOfPv6
zA9QJUEczYvqfVT73A+2CpGpLKR6qQILGSh8sBlhjlxptskfwiXgkILBBs0iGtdE
LeWTLWptYE869dkdSaXg8mtgdUqYNPOC47ksKHyzHMSnYuu7hr6rkJfcW4l4hsEZ
nqLKUv7zCqQsIf4a0gHBsVptuKS86Nj5cZntfpa5q6C71/G0u3wKJELJDshBAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQU8ScuS3aMp3KWzSwRhRcee9ixPHIwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTNDAyNDg3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALssN
MA0GCSqGSIb3DQEBCwUAA4IBAQBOxCEQttpn6VGR/OP9CKwxPzMIzzvBg7TOkuE/
nnuhpNBnccp6XRwuhhRJZfZEDURcmYYR6lrTw4qRdhb+tgdwYh12BKHxSqrUAQZm
hyVYiqvEY+o0aE2Bf9ilo19PQLGG/yGRI/itPKZwf3fYkgXO03iJoxmp1Fe36e7J
AuXb1l1ZUxYInuygd9h4/Y7o/fygyl3xfMKG0du6Tf2nNJqOWSrkGwH2bFUzFWFd
EIkR3Lb49S7uQjOZ3ccWcGioZXpvx6mH+m3R0pqu9UiK55caj0jI0wF1X5e1Dxdz
CJvcdjkdEbyLER9i8YpMArXo1Qep0GbpzwaUO1rcXQWw0E6f
-----END CERTIFICATE-----
Generated at Mon Jun 29 11:58:44 2026 by rpki-client