Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402252.roa
File: AS402252.roa (raw, json)
Hash identifier: nyJ1LzXclCOFiWYi2YY6a+O8Bl1Lv2ycdV/opK0kswQ=
Subject key identifier: 9A:F3:A5:C1:BC:20:AA:E3:98:E7:44:07:3E:7D:92:22:18:90:33:B9
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 45D0560ACEBDDC89CDC07401D2D1A89F4A83D803
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402252.roa
Signing time: Tue 14 Apr 2026 01:19:25 +0000
ROA not before: Tue 14 Apr 2026 01:14:25 +0000
ROA not after: Tue 13 Apr 2027 01:19:25 +0000
asID: 402252
IP address blocks: 92.113.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:d0:56:0a:ce:bd:dc:89:cd:c0:74:01:d2:d1:a8:9f:4a:83:d8:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Apr 14 01:14:25 2026 GMT
Not After : Apr 13 01:19:25 2027 GMT
Subject: CN=9AF3A5C1BC20AAE398E744073E7D9222189033B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e7:8f:12:50:7c:44:02:8c:ba:99:d7:5c:b4:
b2:32:a7:af:05:8f:7b:fd:22:d5:8b:bf:57:38:00:
1b:37:14:84:b2:2e:83:a7:d4:08:f4:63:dc:a6:d8:
27:3f:28:6f:2d:a3:f6:f6:1c:79:50:a4:ab:01:f2:
bc:9d:7c:fa:13:93:80:26:5a:e1:a6:8c:01:28:ea:
a9:4d:90:2a:b4:fa:02:c7:b6:52:40:78:ab:82:c7:
d7:67:af:56:d3:8e:88:1c:9f:1f:32:09:d1:61:bf:
d0:e9:b6:51:31:1f:c3:66:ab:8f:46:f9:8d:23:a6:
f8:95:87:11:24:23:0b:a0:a3:80:2e:aa:9b:23:98:
57:fe:14:c9:98:7d:5e:01:e3:e4:f5:5a:cc:9f:d2:
c1:c1:c5:0c:37:72:43:e5:bd:48:7f:8f:9a:6a:e2:
63:da:0c:79:b5:f3:26:d7:b4:3a:83:0e:b9:ec:0a:
7f:a0:72:52:2d:55:4a:c3:03:7c:9e:6b:35:f4:22:
32:9e:79:c8:cc:ac:bd:15:22:48:10:aa:5e:8a:10:
c6:04:0d:85:63:b4:bc:fd:8f:7a:0a:47:e4:d7:74:
c2:ce:fd:cb:e3:35:e4:91:3e:7f:ff:09:95:48:44:
ba:d9:70:fa:b9:80:1d:74:2e:f4:42:75:49:17:b1:
91:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F3:A5:C1:BC:20:AA:E3:98:E7:44:07:3E:7D:92:22:18:90:33:B9
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402252.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.113.210.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:7e:50:67:09:75:27:10:57:b5:2a:a6:29:b1:d2:ba:aa:0a:
b4:43:f7:2a:47:a4:25:e6:a1:d7:9d:66:9d:3c:ae:72:28:e4:
43:b6:4f:2c:a4:7b:ca:03:69:78:0d:ee:7c:1a:60:54:2c:b1:
fe:3e:a1:50:1f:d8:20:55:2f:49:6f:43:43:f9:73:68:04:94:
2d:29:97:5d:f5:c5:7a:97:d0:8d:71:7c:55:6e:45:3a:34:cf:
ef:fd:81:78:7c:35:b3:37:2f:41:2d:d4:2a:bb:46:3c:18:84:
46:18:2a:47:4e:18:73:8c:33:a0:38:62:71:6d:29:93:c5:48:
43:51:ed:0b:1a:ce:1e:8f:84:7e:a6:75:43:bb:96:44:5b:db:
eb:80:ef:d6:47:87:2a:11:98:f9:7c:96:11:ca:4e:5f:2b:76:
47:ba:c5:79:c1:c4:0d:8d:25:6b:22:d1:2e:d3:51:76:f7:cc:
a7:80:d5:3f:89:61:42:7b:b6:0b:93:9b:88:1a:37:9d:ca:6d:
de:74:c5:c3:4c:e6:60:65:29:54:6c:8f:b7:8a:a8:5a:d8:70:
95:dc:ec:96:af:98:55:ee:47:ae:3f:8e:d0:60:d6:bd:0a:99:
d4:c1:a2:ba:89:7d:92:fc:24:ba:42:c7:bc:82:d5:ae:7d:37:
dc:65:0a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:37:37 2026 by rpki-client