Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS396356.roa
File: AS396356.roa (raw, json)
Hash identifier: 7Aw2TqtTb+NKBkQOfwF5rxBU1yhcvA35r5tlGIE9TQQ=
Subject key identifier: 04:06:0B:82:CE:F3:90:73:84:EA:A9:D4:90:52:C6:F5:FB:3C:D3:F5
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 6E504B0E31F36F3E0CF3852051F183EED5DE6FE6
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS396356.roa
Signing time: Wed 20 May 2026 12:04:05 +0000
ROA not before: Wed 20 May 2026 11:59:05 +0000
ROA not after: Wed 19 May 2027 12:04:05 +0000
asID: 396356
IP address blocks: 46.202.2.0/24 maxlen: 24
46.202.4.0/22 maxlen: 24
46.202.20.0/22 maxlen: 24
46.202.29.0/24 maxlen: 24
46.202.31.0/24 maxlen: 24
46.202.37.0/24 maxlen: 24
46.202.43.0/24 maxlen: 24
46.202.44.0/24 maxlen: 24
46.202.47.0/24 maxlen: 24
46.202.48.0/24 maxlen: 24
46.202.76.0/24 maxlen: 24
46.202.80.0/24 maxlen: 24
46.202.108.0/22 maxlen: 24
46.203.8.0/22 maxlen: 24
46.203.64.0/22 maxlen: 24
46.203.89.0/24 maxlen: 24
46.203.106.0/24 maxlen: 24
46.203.218.0/24 maxlen: 24
46.203.224.0/24 maxlen: 24
46.203.226.0/24 maxlen: 24
46.203.228.0/24 maxlen: 24
46.203.229.0/24 maxlen: 24
46.203.230.0/24 maxlen: 24
46.203.231.0/24 maxlen: 24
46.203.232.0/24 maxlen: 24
91.124.44.0/24 maxlen: 24
91.124.45.0/24 maxlen: 24
91.124.46.0/24 maxlen: 24
91.124.47.0/24 maxlen: 24
91.124.184.0/24 maxlen: 24
92.112.13.0/24 maxlen: 24
92.112.16.0/24 maxlen: 24
92.112.17.0/24 maxlen: 24
92.112.18.0/24 maxlen: 24
92.112.19.0/24 maxlen: 24
92.112.69.0/24 maxlen: 24
92.112.76.0/24 maxlen: 24
92.112.78.0/24 maxlen: 24
92.112.80.0/24 maxlen: 24
92.112.87.0/24 maxlen: 24
92.112.88.0/24 maxlen: 24
92.112.155.0/24 maxlen: 24
92.112.160.0/24 maxlen: 24
92.112.161.0/24 maxlen: 24
92.112.162.0/24 maxlen: 24
92.112.163.0/24 maxlen: 24
92.112.165.0/24 maxlen: 24
92.112.166.0/24 maxlen: 24
92.112.167.0/24 maxlen: 24
92.112.201.0/24 maxlen: 24
92.113.129.0/24 maxlen: 24
92.113.133.0/24 maxlen: 24
92.113.134.0/24 maxlen: 24
92.113.135.0/24 maxlen: 24
92.113.138.0/24 maxlen: 24
92.113.139.0/24 maxlen: 24
92.113.140.0/24 maxlen: 24
92.113.141.0/24 maxlen: 24
92.113.231.0/24 maxlen: 24
92.113.236.0/24 maxlen: 24
92.113.241.0/24 maxlen: 24
92.113.246.0/24 maxlen: 24
95.135.2.0/24 maxlen: 24
95.135.3.0/24 maxlen: 24
95.135.4.0/24 maxlen: 24
95.135.5.0/24 maxlen: 24
95.135.8.0/24 maxlen: 24
95.135.9.0/24 maxlen: 24
95.135.10.0/24 maxlen: 24
95.135.11.0/24 maxlen: 24
95.135.14.0/24 maxlen: 24
95.135.15.0/24 maxlen: 24
95.135.16.0/24 maxlen: 24
95.135.17.0/24 maxlen: 24
95.135.20.0/24 maxlen: 24
95.135.21.0/24 maxlen: 24
95.135.22.0/24 maxlen: 24
95.135.23.0/24 maxlen: 24
95.135.26.0/24 maxlen: 24
95.135.27.0/24 maxlen: 24
95.135.28.0/24 maxlen: 24
95.135.29.0/24 maxlen: 24
95.135.32.0/24 maxlen: 24
95.135.33.0/24 maxlen: 24
95.135.34.0/24 maxlen: 24
95.135.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:50:4b:0e:31:f3:6f:3e:0c:f3:85:20:51:f1:83:ee:d5:de:6f:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: May 20 11:59:05 2026 GMT
Not After : May 19 12:04:05 2027 GMT
Subject: CN=04060B82CEF3907384EAA9D49052C6F5FB3CD3F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:37:03:7d:d1:22:a1:e7:7c:a6:a5:8d:93:be:
1a:e8:39:60:2d:d9:12:49:79:ed:af:0a:48:c7:c7:
b1:1e:36:f4:52:4d:32:90:5a:db:30:c2:a8:14:e5:
11:dd:d5:c1:6f:7b:a6:91:eb:90:3a:48:23:a0:fc:
1b:bd:87:11:aa:b5:8e:9a:5e:80:0f:62:6c:45:4b:
7e:65:12:36:6d:94:b2:e5:ba:d9:fe:70:7e:d2:4e:
10:0b:93:41:17:05:18:16:f7:49:2e:43:80:b8:99:
68:63:bf:0a:37:7a:3d:ca:9a:cd:b6:9d:86:48:8f:
8b:22:f1:a0:bd:d2:c4:45:c9:d8:11:44:bb:c4:ae:
bd:8d:d7:f5:3c:6b:08:10:f0:21:df:a0:bc:b1:e1:
4e:c7:ba:33:5a:93:1e:46:43:0a:2b:97:81:d1:60:
6f:6a:f6:76:e8:a8:be:b9:35:be:11:52:5e:fe:cb:
fe:d3:85:ff:52:57:74:3a:15:b1:f4:5b:8c:f4:da:
f7:da:f6:0a:55:4f:2b:ca:17:86:1c:4f:47:8f:af:
48:8e:72:07:f4:64:0c:d2:0e:76:81:70:0d:ba:ae:
e4:88:4e:49:34:79:f5:3c:fd:81:28:74:67:a9:20:
9e:e7:d4:cd:6a:74:e8:bb:dd:38:e3:0f:3f:00:19:
90:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:06:0B:82:CE:F3:90:73:84:EA:A9:D4:90:52:C6:F5:FB:3C:D3:F5
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS396356.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.2.0/24
46.202.4.0/22
46.202.20.0/22
46.202.29.0/24
46.202.31.0/24
46.202.37.0/24
46.202.43.0-46.202.44.255
46.202.47.0-46.202.48.255
46.202.76.0/24
46.202.80.0/24
46.202.108.0/22
46.203.8.0/22
46.203.64.0/22
46.203.89.0/24
46.203.106.0/24
46.203.218.0/24
46.203.224.0/24
46.203.226.0/24
46.203.228.0-46.203.232.255
91.124.44.0/22
91.124.184.0/24
92.112.13.0/24
92.112.16.0/22
92.112.69.0/24
92.112.76.0/24
92.112.78.0/24
92.112.80.0/24
92.112.87.0-92.112.88.255
92.112.155.0/24
92.112.160.0/22
92.112.165.0-92.112.167.255
92.112.201.0/24
92.113.129.0/24
92.113.133.0-92.113.135.255
92.113.138.0-92.113.141.255
92.113.231.0/24
92.113.236.0/24
92.113.241.0/24
92.113.246.0/24
95.135.2.0-95.135.5.255
95.135.8.0/22
95.135.14.0-95.135.17.255
95.135.20.0/22
95.135.26.0-95.135.29.255
95.135.32.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:3a:d9:e8:ab:bd:0f:27:ae:b8:76:cd:cd:ab:24:20:0b:70:
4f:57:2c:06:68:c6:25:2a:79:0a:03:e7:c0:94:9b:9e:52:55:
4c:94:fd:b6:c7:d6:49:91:00:eb:af:44:86:7d:ef:2a:f7:b6:
46:0a:79:9d:5b:09:d2:5c:89:97:5b:b3:5a:e2:03:e1:78:c7:
1e:4f:9e:aa:f1:bc:ab:c5:91:f5:1e:d9:af:a6:52:e3:3a:41:
48:30:3f:85:16:7f:05:b2:0a:2a:69:a8:d6:47:90:d8:d3:0d:
d3:8f:0b:57:18:7b:d3:a9:93:26:69:58:e8:4f:ae:61:dd:6d:
d9:19:14:6a:78:6a:ee:46:de:20:8a:17:bf:3d:3f:a2:45:95:
13:6c:6e:b3:1b:0e:bf:2a:b5:24:33:be:ae:43:e5:0d:a8:61:
61:bc:49:d1:65:4a:a8:ff:71:0d:6d:27:43:ea:60:bf:d7:28:
2f:bd:96:86:37:93:e8:d4:07:bf:0c:64:f6:f5:8f:02:22:22:
eb:9e:51:f9:bd:47:c0:55:75:8f:9d:e9:53:0d:5b:67:0b:aa:
66:1a:ae:b0:b6:8f:fa:6d:f8:09:71:8b:f7:82:e1:48:db:58:
27:01:01:ab:d2:2e:6f:7a:62:26:b0:f6:33:48:4d:73:70:14:
b4:2d:c0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:45:59 2026 by rpki-client