Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS401838.roa
File: AS401838.roa (raw, json)
Hash identifier: sOwMFCaHwHoF9xlCtglOi+X0frkOtJlFbcePgNUuvBc=
Subject key identifier: BC:9A:8F:03:07:4D:76:7D:17:B1:07:64:1E:80:02:52:1D:FA:46:62
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 21629829BC56EAF7CB00975A6FDBB94541AF2BE0
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS401838.roa
Signing time: Tue 14 Apr 2026 00:03:05 +0000
ROA not before: Mon 13 Apr 2026 23:58:05 +0000
ROA not after: Tue 13 Apr 2027 00:03:05 +0000
asID: 401838
IP address blocks: 46.203.107.0/24 maxlen: 24
46.203.112.0/24 maxlen: 24
46.203.114.0/24 maxlen: 24
46.203.145.0/24 maxlen: 24
46.203.146.0/24 maxlen: 24
46.203.152.0/24 maxlen: 24
46.203.156.0/24 maxlen: 24
46.203.168.0/24 maxlen: 24
46.203.169.0/24 maxlen: 24
46.203.171.0/24 maxlen: 24
46.203.174.0/24 maxlen: 24
46.203.177.0/24 maxlen: 24
46.203.179.0/24 maxlen: 24
46.203.187.0/24 maxlen: 24
46.203.199.0/24 maxlen: 24
46.203.208.0/24 maxlen: 24
46.203.227.0/24 maxlen: 24
46.203.235.0/24 maxlen: 24
91.124.242.0/24 maxlen: 24
92.112.6.0/24 maxlen: 24
92.112.8.0/24 maxlen: 24
92.112.55.0/24 maxlen: 24
92.112.62.0/24 maxlen: 24
92.112.89.0/24 maxlen: 24
92.112.142.0/24 maxlen: 24
92.113.4.0/24 maxlen: 24
92.113.6.0/24 maxlen: 24
92.113.9.0/24 maxlen: 24
92.113.15.0/24 maxlen: 24
92.113.40.0/24 maxlen: 24
95.134.114.0/23 maxlen: 24
95.134.166.0/23 maxlen: 24
95.134.184.0/24 maxlen: 24
95.134.186.0/23 maxlen: 24
95.134.193.0/24 maxlen: 24
95.134.204.0/24 maxlen: 24
95.134.206.0/24 maxlen: 24
95.134.221.0/24 maxlen: 24
95.134.223.0/24 maxlen: 24
95.135.61.0/24 maxlen: 24
95.135.72.0/24 maxlen: 24
178.92.76.0/23 maxlen: 24
178.92.180.0/22 maxlen: 24
178.92.252.0/23 maxlen: 24
178.93.192.0/22 maxlen: 24
178.94.167.0/24 maxlen: 24
178.94.191.0/24 maxlen: 24
178.94.244.0/22 maxlen: 24
178.95.60.0/22 maxlen: 24
178.95.77.0/24 maxlen: 24
178.95.82.0/24 maxlen: 24
178.95.172.0/23 maxlen: 24
178.95.230.0/24 maxlen: 24
178.95.236.0/24 maxlen: 24
178.95.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:62:98:29:bc:56:ea:f7:cb:00:97:5a:6f:db:b9:45:41:af:2b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Apr 13 23:58:05 2026 GMT
Not After : Apr 13 00:03:05 2027 GMT
Subject: CN=BC9A8F03074D767D17B107641E8002521DFA4662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:56:93:ea:94:96:1d:22:59:e7:fb:95:ad:63:
2e:44:6d:d1:8f:39:44:e4:3f:82:f5:6f:4a:ec:d8:
8c:df:4b:db:77:a2:e2:62:1f:e5:3e:30:58:fa:60:
17:03:09:ed:61:04:70:4e:4c:02:0e:6f:49:d9:aa:
91:ac:78:e9:e2:e9:1b:4d:ba:9e:2c:f7:85:8c:81:
50:53:90:ab:16:04:73:4a:74:2b:81:a6:52:54:9d:
c6:7a:e7:12:7e:95:38:40:93:98:34:da:3f:63:d5:
d2:8a:e2:2b:fa:66:e7:d9:5c:15:0f:9e:41:eb:a2:
5a:7e:df:72:09:70:1c:ea:3a:2f:78:9f:ed:ee:82:
52:86:a1:be:cd:e5:2c:0c:d6:fd:0f:62:67:64:b5:
fa:31:66:5a:2a:4a:aa:81:30:f2:6a:a4:94:5e:1d:
5d:da:73:69:48:9f:48:79:9c:dd:a6:42:bc:ab:10:
9c:55:28:8f:a0:77:a9:25:ad:82:b7:d8:62:f0:e6:
75:61:eb:1e:70:a1:7b:e2:5a:2d:9d:b7:e2:c8:c0:
47:05:0f:1d:54:b3:43:a8:37:6f:0f:e1:35:26:87:
41:9d:77:33:ac:c9:92:7b:4c:9b:b2:bc:df:0a:80:
8d:2b:2a:d1:77:2e:ca:c2:a5:11:cc:8a:43:08:7f:
03:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:9A:8F:03:07:4D:76:7D:17:B1:07:64:1E:80:02:52:1D:FA:46:62
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS401838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.107.0/24
46.203.112.0/24
46.203.114.0/24
46.203.145.0-46.203.146.255
46.203.152.0/24
46.203.156.0/24
46.203.168.0/23
46.203.171.0/24
46.203.174.0/24
46.203.177.0/24
46.203.179.0/24
46.203.187.0/24
46.203.199.0/24
46.203.208.0/24
46.203.227.0/24
46.203.235.0/24
91.124.242.0/24
92.112.6.0/24
92.112.8.0/24
92.112.55.0/24
92.112.62.0/24
92.112.89.0/24
92.112.142.0/24
92.113.4.0/24
92.113.6.0/24
92.113.9.0/24
92.113.15.0/24
92.113.40.0/24
95.134.114.0/23
95.134.166.0/23
95.134.184.0/24
95.134.186.0/23
95.134.193.0/24
95.134.204.0/24
95.134.206.0/24
95.134.221.0/24
95.134.223.0/24
95.135.61.0/24
95.135.72.0/24
178.92.76.0/23
178.92.180.0/22
178.92.252.0/23
178.93.192.0/22
178.94.167.0/24
178.94.191.0/24
178.94.244.0/22
178.95.60.0/22
178.95.77.0/24
178.95.82.0/24
178.95.172.0/23
178.95.230.0/24
178.95.236.0/24
178.95.251.0/24
Signature Algorithm: sha256WithRSAEncryption
02:3c:8e:df:a3:b0:98:a6:df:fd:5a:8b:b6:3c:a4:2a:1e:a1:
e6:4d:a9:0d:92:7b:00:0d:d8:37:d8:56:ae:18:2a:57:4e:a3:
43:6a:21:67:6e:10:1f:81:b2:76:23:ff:63:40:71:2a:d1:be:
fa:9f:12:76:a5:2a:a0:0d:4c:51:79:82:ed:53:08:13:a3:3e:
43:55:64:50:5f:5f:1b:2f:92:01:34:c8:0d:30:c4:63:7b:c9:
31:ed:6d:19:9b:6d:88:89:2b:c8:e7:83:79:53:62:5d:71:17:
62:66:e6:18:2c:54:e3:15:ab:e9:cc:7c:ca:61:96:06:9e:1c:
35:84:b1:1c:be:ab:4e:66:e6:85:ab:e7:ca:72:68:8c:28:c7:
87:60:0a:d6:e1:32:b7:88:e3:c1:82:fa:dd:81:e0:65:26:c7:
65:7a:42:7a:74:22:46:70:ae:af:a3:3c:2a:20:bc:b1:76:16:
ba:c9:44:8f:96:a4:21:d2:bd:1c:63:52:84:77:79:8f:1e:70:
97:2f:a6:78:77:ad:ac:43:91:88:f6:3d:c4:86:d2:73:de:ba:
cd:ca:c4:de:70:f0:bd:82:3a:07:60:7f:54:e8:01:c6:18:0a:
e0:d8:e1:b4:01:bf:55:0d:ee:92:3a:b6:25:8a:8d:e1:69:89:
09:47:b0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:07:36 2026 by rpki-client