Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS396356.roa
File: AS396356.roa (raw, json)
Hash identifier: xEULHYye9jh9EwQ4d7D9fMEUs8m9gckDX94G6z421cU=
Subject key identifier: FB:99:10:E2:4E:7E:9E:69:14:40:5A:64:4F:4E:72:AE:DA:B9:EB:09
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 218879FE1269587A0A16547A3AA243DAE2DE61E3
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS396356.roa
Signing time: Thu 12 Jun 2025 10:43:05 +0000
ROA not before: Thu 12 Jun 2025 10:38:05 +0000
ROA not after: Thu 11 Jun 2026 10:43:05 +0000
asID: 396356
IP address blocks: 46.202.4.0/22 maxlen: 24
46.202.20.0/22 maxlen: 24
46.202.108.0/22 maxlen: 24
46.203.8.0/22 maxlen: 24
46.203.64.0/22 maxlen: 24
46.203.218.0/24 maxlen: 24
46.203.224.0/24 maxlen: 24
46.203.226.0/24 maxlen: 24
46.203.228.0/24 maxlen: 24
46.203.229.0/24 maxlen: 24
46.203.230.0/24 maxlen: 24
46.203.231.0/24 maxlen: 24
46.203.232.0/24 maxlen: 24
91.124.184.0/24 maxlen: 24
92.112.155.0/24 maxlen: 24
92.112.160.0/24 maxlen: 24
92.112.161.0/24 maxlen: 24
92.112.162.0/24 maxlen: 24
92.112.163.0/24 maxlen: 24
92.112.165.0/24 maxlen: 24
92.112.166.0/24 maxlen: 24
92.112.167.0/24 maxlen: 24
92.112.201.0/24 maxlen: 24
92.113.129.0/24 maxlen: 24
92.113.133.0/24 maxlen: 24
92.113.134.0/24 maxlen: 24
92.113.135.0/24 maxlen: 24
92.113.138.0/24 maxlen: 24
92.113.139.0/24 maxlen: 24
92.113.140.0/24 maxlen: 24
92.113.141.0/24 maxlen: 24
92.113.231.0/24 maxlen: 24
92.113.236.0/24 maxlen: 24
92.113.241.0/24 maxlen: 24
92.113.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:88:79:fe:12:69:58:7a:0a:16:54:7a:3a:a2:43:da:e2:de:61:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jun 12 10:38:05 2025 GMT
Not After : Jun 11 10:43:05 2026 GMT
Subject: CN=FB9910E24E7E9E6914405A644F4E72AEDAB9EB09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3e:2c:ed:ad:41:5a:36:8e:86:d9:ed:29:61:
e3:91:65:e2:42:06:f1:d8:8f:6a:b8:e4:6b:cc:22:
07:bc:72:b8:b0:0a:57:b5:d3:7d:4b:e6:a1:cc:28:
8c:dd:03:81:51:73:e7:8a:9a:07:6b:2f:15:7e:22:
84:b8:c4:83:92:85:f1:c8:df:4f:c0:00:6c:fa:44:
de:2c:c3:d0:9b:bc:70:b0:0a:63:75:a8:d2:81:46:
27:e5:2a:01:41:23:e4:54:24:ec:68:6c:c6:dc:15:
5a:3b:b8:39:45:89:30:d6:57:e8:b5:80:3e:d3:61:
7f:d7:6f:45:cf:97:01:84:ce:6f:03:2b:ea:03:aa:
dd:fe:0b:aa:6e:24:80:d0:2a:71:b5:e8:4d:e8:54:
e0:14:81:21:bb:bf:d0:1b:1b:af:d3:44:18:ed:ee:
30:db:96:e8:31:cb:19:40:b8:4b:ad:fd:ee:86:97:
d2:74:00:c8:eb:6a:34:e5:87:f4:a4:ec:f9:b0:00:
86:17:5c:f3:50:b3:e6:47:e2:81:7e:28:5c:cd:c1:
66:f1:0b:78:05:19:76:92:e1:b4:ac:76:00:7f:b8:
43:47:7a:10:71:62:56:5d:ba:4c:9a:e9:04:e1:25:
b7:e2:97:e2:c8:91:b7:32:0b:be:34:aa:9f:66:55:
c6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:99:10:E2:4E:7E:9E:69:14:40:5A:64:4F:4E:72:AE:DA:B9:EB:09
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS396356.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.4.0/22
46.202.20.0/22
46.202.108.0/22
46.203.8.0/22
46.203.64.0/22
46.203.218.0/24
46.203.224.0/24
46.203.226.0/24
46.203.228.0-46.203.232.255
91.124.184.0/24
92.112.155.0/24
92.112.160.0/22
92.112.165.0-92.112.167.255
92.112.201.0/24
92.113.129.0/24
92.113.133.0-92.113.135.255
92.113.138.0-92.113.141.255
92.113.231.0/24
92.113.236.0/24
92.113.241.0/24
92.113.246.0/24
Signature Algorithm: sha256WithRSAEncryption
96:51:be:fd:b0:cd:00:4f:55:e0:65:f2:e4:6e:49:08:48:7f:
8b:af:06:9e:17:93:db:49:17:0c:96:a2:cc:44:0e:c3:dd:4c:
dc:72:b9:74:d0:53:20:f2:e8:b8:b4:9f:32:af:5a:99:ac:e7:
a3:80:5e:95:6b:af:61:3d:25:d5:3d:c5:d3:84:70:1f:a2:24:
28:fb:f2:15:70:78:0b:82:61:a5:eb:bb:a1:3f:f7:f4:ca:16:
37:67:c7:7b:5f:f6:74:63:83:6d:34:40:e3:20:ee:5b:be:ed:
ef:45:5e:79:10:89:82:03:6b:a2:8e:25:2a:7a:60:dd:f8:d4:
1a:8e:28:8a:b6:a4:9f:40:c2:15:8a:dd:dd:80:4d:6c:c9:a1:
e8:40:18:6c:e4:61:58:e3:83:5e:ad:6c:d9:76:76:c3:4c:f4:
76:dc:6c:c0:6b:50:bb:8a:ff:df:ed:e8:ae:8c:5c:51:02:f7:
0b:f0:82:b1:09:f3:af:1d:61:f2:76:40:a8:5f:86:3e:62:66:
93:11:42:c9:ab:95:f9:9b:cf:7e:f2:a5:be:07:18:a6:7d:93:
49:ab:ca:33:0a:e1:64:7e:5c:01:b8:17:f7:f3:9b:14:d7:1f:
45:99:a1:4a:ed:34:dc:6c:a4:62:8f:71:f1:9e:e9:9b:00:96:
13:f5:69:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:01:03 2025 by rpki-client