Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS202791.roa
File: AS202791.roa (raw, json)
Hash identifier: Ob/DVCu0ioftj2P0LEBqXGUjOz3C+LwQcnNqw9PCegg=
Subject key identifier: 74:96:BE:0D:51:07:8A:B3:0E:20:3A:C6:76:48:02:39:F4:CB:F7:8E
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 469C9DF6DB315DF4A87EF0A1BE754F89B261D839
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS202791.roa
Signing time: Tue 01 Sep 2026 04:18:14 +0000
ROA not before: Tue 01 Sep 2026 04:13:14 +0000
ROA not after: Tue 31 Aug 2027 04:18:14 +0000
asID: 202791
IP address blocks: 46.203.35.0/24 maxlen: 24
46.203.180.0/24 maxlen: 24
92.113.136.0/24 maxlen: 24
92.113.187.0/24 maxlen: 24
92.113.248.0/24 maxlen: 24
95.134.183.0/24 maxlen: 24
95.135.62.0/24 maxlen: 24
178.92.190.0/24 maxlen: 24
178.92.241.0/24 maxlen: 24
178.95.238.0/24 maxlen: 24
178.95.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:9c:9d:f6:db:31:5d:f4:a8:7e:f0:a1:be:75:4f:89:b2:61:d8:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 1 04:13:14 2026 GMT
Not After : Aug 31 04:18:14 2027 GMT
Subject: CN=7496BE0D51078AB30E203AC676480239F4CBF78E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:73:0f:d4:b1:58:a5:a7:ee:6a:d3:94:e2:23:
1c:0c:c2:6a:30:4f:37:6c:fe:2c:6b:d5:ca:5d:47:
16:32:db:7e:7e:7a:24:ca:ae:fb:52:0e:2b:9d:50:
a9:c8:42:da:b0:a1:42:63:6a:27:69:bb:8d:3a:76:
db:ed:cc:a5:2d:81:ec:06:4e:8d:13:6f:94:19:d2:
46:8b:86:b5:19:77:af:6a:7b:f1:49:60:82:9d:51:
43:5a:63:26:63:21:01:33:48:ee:0f:1d:b9:90:28:
79:9a:19:1b:b8:66:b9:10:19:59:cd:a3:9e:fb:3e:
5f:b7:8a:98:f3:32:10:39:2d:3f:68:4d:0b:04:9d:
7f:76:dd:66:54:a4:3f:89:b7:fc:0a:7f:0f:71:84:
c0:49:a7:88:ea:6b:d7:a3:f8:52:f8:63:f4:e4:72:
78:eb:e6:21:14:5a:b2:fa:6f:46:2e:c9:3b:05:c5:
08:17:d3:58:23:65:24:dd:c4:02:a1:40:0d:86:c5:
b3:3e:d9:93:11:a7:db:07:27:54:90:7d:b7:d2:2e:
7a:84:b1:c1:66:f4:17:1b:26:ea:27:0e:24:46:e2:
d2:fd:cc:21:de:07:79:bc:e9:e0:70:bc:ad:cd:d8:
c8:27:70:4f:47:4c:8c:11:86:a1:eb:11:e5:50:2e:
cb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:96:BE:0D:51:07:8A:B3:0E:20:3A:C6:76:48:02:39:F4:CB:F7:8E
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS202791.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.35.0/24
46.203.180.0/24
92.113.136.0/24
92.113.187.0/24
92.113.248.0/24
95.134.183.0/24
95.135.62.0/24
178.92.190.0/24
178.92.241.0/24
178.95.238.0/24
178.95.242.0/24
Signature Algorithm: sha256WithRSAEncryption
36:34:d2:89:1a:9e:ca:91:73:f9:b4:cc:36:76:61:61:20:e0:
8d:4f:32:28:a0:5b:8a:2c:bb:35:b4:d5:2f:61:f9:30:7e:14:
c2:51:b8:1d:54:8b:ec:ea:9d:a3:6e:75:10:38:e8:0c:46:21:
de:3a:77:4c:d1:f2:bd:16:24:22:05:c8:16:dc:99:85:cf:ef:
34:ed:c1:b2:0f:59:9b:0d:08:eb:fb:ad:cf:68:60:57:32:fa:
d1:37:b1:99:20:e0:cb:06:69:ab:a5:1e:be:44:11:2a:bd:18:
c4:6d:48:60:0c:c0:3d:e1:10:84:ad:5f:9b:d6:24:61:51:b4:
d5:7b:9c:3f:82:e3:05:bf:b8:4c:dc:dc:c1:d2:f4:b2:c5:33:
70:13:1f:28:df:fd:1d:13:30:d9:33:5a:df:37:3c:b8:97:a5:
ef:00:d7:79:3f:67:43:b2:c4:d3:c6:12:f5:9c:88:4e:86:68:
96:8b:49:15:8a:53:46:a6:31:99:c4:e0:71:8b:47:91:53:d6:
c7:62:60:7f:75:01:56:c0:17:40:02:80:05:5b:27:d6:6a:35:
05:f2:e5:68:90:02:3a:de:9c:71:8f:72:98:28:77:c3:94:6b:
55:52:0e:0b:57:06:b2:1a:f6:d4:11:55:02:ea:be:1c:5d:90:
b8:64:2f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:13:31 2026 by rpki-client