Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402215.roa
File: AS402215.roa (raw, json)
Hash identifier: Mb8KWaslBIr6uLv4FZz5XRwwiBgbtc/3onFRO9n9dmM=
Subject key identifier: E6:78:96:68:4A:93:3D:44:B1:63:2F:FF:D6:62:BD:25:C3:5F:BE:DC
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 7CCC4B95AF3659A0D0105FC79B49AF940824863C
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402215.roa
Signing time: Tue 15 Sep 2026 02:21:55 +0000
ROA not before: Tue 15 Sep 2026 02:16:55 +0000
ROA not after: Tue 14 Sep 2027 02:21:55 +0000
asID: 402215
IP address blocks: 46.203.75.0/24 maxlen: 24
178.92.117.0/24 maxlen: 24
178.93.81.0/24 maxlen: 24
178.94.180.0/24 maxlen: 24
178.95.45.0/24 maxlen: 24
178.95.74.0/24 maxlen: 24
178.95.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:cc:4b:95:af:36:59:a0:d0:10:5f:c7:9b:49:af:94:08:24:86:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 15 02:16:55 2026 GMT
Not After : Sep 14 02:21:55 2027 GMT
Subject: CN=E67896684A933D44B1632FFFD662BD25C35FBEDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2f:73:c4:94:ce:69:39:d1:b0:f4:f4:63:16:
53:04:6b:8a:90:45:74:10:f8:28:7a:c2:62:6e:ab:
4e:bd:5b:7e:d9:c4:ff:3b:14:5b:40:e9:e6:6e:51:
cd:59:49:7c:a1:68:46:e4:2a:81:08:4f:92:5c:ba:
46:7c:53:b3:14:ce:99:a5:37:9d:79:02:2d:72:67:
93:f8:39:58:5e:0a:b3:40:1c:3f:7f:10:ab:b6:01:
da:14:52:d6:cd:80:52:ee:ed:77:ca:32:39:ac:d0:
7b:94:67:b2:b0:3c:28:9a:2b:6d:00:47:69:c8:2e:
1c:d2:87:eb:f3:43:23:ad:fa:51:08:03:3c:b9:f8:
56:ce:33:9c:08:f0:47:86:a3:00:36:f9:7b:d5:0e:
aa:90:02:88:c8:b9:e1:d5:1d:4d:80:fe:b6:28:d9:
82:1b:57:ae:c5:c5:aa:2a:68:4a:4f:19:ad:7e:4b:
aa:e9:2c:6c:63:a3:4d:70:4d:5b:fa:77:f3:7b:46:
e5:de:04:34:1c:d2:8a:d3:ae:89:8b:17:3e:fa:6e:
7b:bd:90:82:f1:74:93:96:ab:80:d8:31:e3:53:10:
a0:d7:d2:7a:dd:f0:6b:3b:3d:07:60:d9:23:86:d8:
d1:0f:ad:44:55:d8:89:27:ff:b9:a3:9e:60:29:f8:
ad:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:78:96:68:4A:93:3D:44:B1:63:2F:FF:D6:62:BD:25:C3:5F:BE:DC
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402215.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.203.75.0/24
178.92.117.0/24
178.93.81.0/24
178.94.180.0/24
178.95.45.0/24
178.95.74.0/24
178.95.93.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:09:96:48:72:90:c4:c8:45:97:7a:e1:b9:de:a5:e8:57:45:
a9:00:27:45:af:ad:6a:55:d1:8a:17:da:07:47:a9:dc:f9:2b:
00:a8:52:be:ff:c0:f8:94:e2:f1:48:f2:e0:da:f3:e3:4c:31:
ab:d4:75:43:84:7b:7d:d5:19:95:c8:1e:48:c3:ee:98:8d:63:
e7:a5:ff:83:48:d9:5c:cf:c3:3e:80:16:d0:40:3a:c0:06:6c:
74:37:55:23:d8:92:fc:25:42:f4:8f:3e:38:54:a6:72:d6:ed:
f1:89:00:10:d7:aa:2f:d5:e2:f8:85:6b:03:29:72:bd:92:86:
7a:2d:69:c4:a9:14:d7:1d:c9:e8:cd:7c:de:be:ec:01:88:ff:
c4:a6:f1:5a:14:ba:77:14:cb:b4:14:50:1d:ce:6b:2e:03:c2:
6b:f8:c6:7e:d5:a3:f0:a2:2c:e6:65:e5:0e:23:c8:02:df:80:
03:73:02:5e:bb:32:d9:4d:99:5c:52:79:72:c9:c4:20:d4:df:
b6:52:6e:7d:63:e3:7d:4d:98:70:6b:30:10:de:59:00:61:a0:
e9:9b:3c:9c:d5:4a:75:aa:8b:25:8c:54:4d:eb:ce:e1:57:11:
ba:aa:51:7a:e7:d0:d8:f7:07:1a:e3:d8:0e:64:90:70:25:b7:
d4:20:35:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:20:08 2026 by rpki-client