Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402507.roa
File: AS402507.roa (raw, json)
Hash identifier: 0uESRP3tqqE8t16+ZX9Z+HI4diqAyYacnRBsV1PmIAA=
Subject key identifier: 09:32:E5:7C:14:20:27:CD:96:09:96:EA:37:64:29:3C:C1:7C:ED:96
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 3FD89D083A4DBBC18573AD4E3C01ED13AB47E53A
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402507.roa
Signing time: Fri 05 Jun 2026 13:10:27 +0000
ROA not before: Fri 05 Jun 2026 13:05:27 +0000
ROA not after: Fri 04 Jun 2027 13:10:27 +0000
asID: 402507
IP address blocks: 46.202.45.0/24 maxlen: 24
92.112.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:d8:9d:08:3a:4d:bb:c1:85:73:ad:4e:3c:01:ed:13:ab:47:e5:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jun 5 13:05:27 2026 GMT
Not After : Jun 4 13:10:27 2027 GMT
Subject: CN=0932E57C142027CD960996EA3764293CC17CED96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:06:99:df:d2:6c:93:64:d4:31:1a:ad:cf:26:
e6:16:fb:53:f3:45:4f:35:57:b4:25:22:ae:3c:5c:
db:51:cd:bb:5c:9c:60:de:0b:5e:8a:9e:a0:f5:47:
ed:0b:a9:13:e5:d5:e9:8e:22:c7:c8:66:9e:ea:45:
0b:d9:0b:6a:52:92:a2:95:99:4c:59:52:cb:4d:3e:
91:53:54:75:7c:05:51:45:03:a7:06:35:d2:7b:47:
81:04:82:6b:dc:b7:bd:54:0d:de:c1:ef:cd:4e:64:
a3:15:f7:6e:7a:9b:6d:56:7b:37:65:6f:3d:50:fc:
3b:56:f2:80:07:a6:1c:cd:e4:89:8f:8b:ff:d3:4f:
a3:a0:0d:f1:4b:7d:99:7f:f3:2c:73:b8:64:44:1d:
9d:17:0c:93:a5:3c:38:aa:b7:ed:c4:83:ea:7a:25:
8a:ab:70:b3:07:06:74:ec:3a:0a:d3:a7:f4:d5:7a:
2a:b0:e1:97:67:85:5d:bf:3a:24:3a:8d:3f:c5:2f:
e6:05:e6:e2:94:2f:5b:72:ac:36:56:89:ba:47:80:
84:cc:f3:d4:f0:90:a0:c4:39:eb:65:f6:a7:4b:83:
83:a7:18:1a:d6:1a:32:9a:73:7c:af:f9:0f:ac:0b:
3e:13:61:9b:dc:41:c4:d0:5c:f9:b2:35:d2:1a:d4:
cd:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:32:E5:7C:14:20:27:CD:96:09:96:EA:37:64:29:3C:C1:7C:ED:96
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402507.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.45.0/24
92.112.5.0/24
Signature Algorithm: sha256WithRSAEncryption
07:76:bc:fd:75:5b:2d:d0:c6:24:92:24:2c:eb:30:9f:b8:6a:
cf:1b:2e:71:63:6b:3d:be:74:b8:f7:91:f2:a7:af:e1:d3:1b:
ad:db:7f:a5:d6:1d:cd:63:17:cb:3d:e5:42:98:c5:80:01:ae:
e2:69:2f:e5:eb:4d:04:5f:ca:59:92:76:6f:f5:77:d9:f3:d8:
3a:3f:36:0c:47:4e:76:16:0e:2a:eb:8b:21:21:8d:fa:18:e6:
9f:e2:c7:3d:80:f3:68:41:8d:6b:d2:f1:1e:b4:de:df:d6:dc:
d3:4c:34:d6:2d:c5:42:80:a8:a6:74:7e:11:ef:fa:69:31:01:
65:3d:55:3a:0c:dc:a0:d9:39:6a:fb:c0:7b:b8:c2:d7:35:a5:
73:b9:b2:78:81:2c:b1:04:d7:5a:dd:b8:49:64:6a:a4:e0:49:
b9:16:95:0c:26:42:7a:02:2d:c6:c7:92:db:49:de:72:68:14:
cb:90:84:08:1a:d7:b9:42:48:52:1e:82:f9:54:4c:c7:a0:52:
41:ac:2f:c1:aa:64:b4:e1:58:85:8e:56:9c:82:22:89:b3:ab:
9a:51:a6:f1:61:3a:df:c7:b3:08:7a:42:01:21:66:9c:77:a9:
ec:0c:53:80:f4:3a:b1:0c:d4:90:eb:67:94:38:1e:bc:27:e7:
6f:1e:98:cb
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUP9idCDpNu8GFc61OPAHtE6tH5TowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjA2MDUxMzA1MjdaFw0yNzA2MDQxMzEwMjdaMDMxMTAvBgNV
BAMTKDA5MzJFNTdDMTQyMDI3Q0Q5NjA5OTZFQTM3NjQyOTNDQzE3Q0VEOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtBpnf0myTZNQxGq3PJuYW+1Pz
RU81V7QlIq48XNtRzbtcnGDeC16KnqD1R+0LqRPl1emOIsfIZp7qRQvZC2pSkqKV
mUxZUstNPpFTVHV8BVFFA6cGNdJ7R4EEgmvct71UDd7B781OZKMV9256m21Wezdl
bz1Q/DtW8oAHphzN5ImPi//TT6OgDfFLfZl/8yxzuGREHZ0XDJOlPDiqt+3Eg+p6
JYqrcLMHBnTsOgrTp/TVeiqw4ZdnhV2/OiQ6jT/FL+YF5uKUL1tyrDZWibpHgITM
89TwkKDEOetl9qdLg4OnGBrWGjKac3yv+Q+sCz4TYZvcQcTQXPmyNdIa1M0VAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUCTLlfBQgJ82WCZbqN2QpPMF87ZYwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTNDAyNTA3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALsot
AwQAXHAFMA0GCSqGSIb3DQEBCwUAA4IBAQAHdrz9dVst0MYkkiQs6zCfuGrPGy5x
Y2s9vnS495Hyp6/h0xut23+l1h3NYxfLPeVCmMWAAa7iaS/l600EX8pZknZv9XfZ
89g6PzYMR052Fg4q64shIY36GOaf4sc9gPNoQY1r0vEetN7f1tzTTDTWLcVCgKim
dH4R7/ppMQFlPVU6DNyg2Tlq+8B7uMLXNaVzubJ4gSyxBNda3bhJZGqk4Em5FpUM
JkJ6Ai3Gx5LbSd5yaBTLkIQIGte5QkhSHoL5VEzHoFJBrC/BqmS04ViFjlacgiKJ
s6uaUabxYTrfx7MIekIBIWacd6nsDFOA9DqxDNSQ62eUOB68J+dvHpjL
-----END CERTIFICATE-----
Generated at Fri Jun 5 16:35:26 2026 by rpki-client