Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402265.roa
File: AS402265.roa (raw, json)
Hash identifier: EyxCSgOZ2Zz4IGiDPQ57fCTEFpe2AAOkBBdbBKallpk=
Subject key identifier: 84:94:CC:D8:54:77:2D:20:DD:B6:40:EC:91:A9:E3:7F:FF:2B:64:74
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 0E8E5E2EF29ADB5D313E4548CF92AF42D7C8430C
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402265.roa
Signing time: Sat 19 Sep 2026 23:52:57 +0000
ROA not before: Sat 19 Sep 2026 23:47:57 +0000
ROA not after: Sat 18 Sep 2027 23:52:57 +0000
asID: 402265
IP address blocks: 46.202.49.0/24 maxlen: 24
46.202.51.0/24 maxlen: 24
46.202.66.0/24 maxlen: 24
46.202.119.0/24 maxlen: 24
46.203.32.0/24 maxlen: 24
46.203.43.0/24 maxlen: 24
46.203.44.0/24 maxlen: 24
46.203.47.0/24 maxlen: 24
46.203.54.0/24 maxlen: 24
46.203.55.0/24 maxlen: 24
46.203.58.0/24 maxlen: 24
46.203.97.0/24 maxlen: 24
46.203.102.0/24 maxlen: 24
46.203.104.0/24 maxlen: 24
46.203.113.0/24 maxlen: 24
46.203.121.0/24 maxlen: 24
46.203.136.0/24 maxlen: 24
46.203.149.0/24 maxlen: 24
46.203.161.0/24 maxlen: 24
46.203.183.0/24 maxlen: 24
46.203.213.0/24 maxlen: 24
91.124.26.0/24 maxlen: 24
91.124.40.0/24 maxlen: 24
91.124.57.0/24 maxlen: 24
91.124.67.0/24 maxlen: 24
91.124.89.0/24 maxlen: 24
91.124.120.0/24 maxlen: 24
91.124.136.0/24 maxlen: 24
91.124.137.0/24 maxlen: 24
91.124.142.0/24 maxlen: 24
91.124.143.0/24 maxlen: 24
91.124.148.0/24 maxlen: 24
91.124.170.0/24 maxlen: 24
91.124.173.0/24 maxlen: 24
91.124.177.0/24 maxlen: 24
91.124.179.0/24 maxlen: 24
91.124.199.0/24 maxlen: 24
91.124.202.0/24 maxlen: 24
91.124.241.0/24 maxlen: 24
92.112.36.0/24 maxlen: 24
92.112.46.0/24 maxlen: 24
92.112.144.0/24 maxlen: 24
92.112.223.0/24 maxlen: 24
92.113.104.0/24 maxlen: 24
92.113.118.0/24 maxlen: 24
92.113.193.0/24 maxlen: 24
92.113.228.0/24 maxlen: 24
95.134.29.0/24 maxlen: 24
95.134.40.0/24 maxlen: 24
95.134.77.0/24 maxlen: 24
95.134.123.0/24 maxlen: 24
95.134.149.0/24 maxlen: 24
95.134.158.0/24 maxlen: 24
95.134.203.0/24 maxlen: 24
95.135.13.0/24 maxlen: 24
95.135.60.0/24 maxlen: 24
95.135.63.0/24 maxlen: 24
95.135.81.0/24 maxlen: 24
95.135.83.0/24 maxlen: 24
95.135.110.0/24 maxlen: 24
95.135.117.0/24 maxlen: 24
95.135.201.0/24 maxlen: 24
95.135.210.0/24 maxlen: 24
95.135.239.0/24 maxlen: 24
178.92.37.0/24 maxlen: 24
178.92.38.0/24 maxlen: 24
178.93.3.0/24 maxlen: 24
178.93.192.0/24 maxlen: 24
178.94.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:8e:5e:2e:f2:9a:db:5d:31:3e:45:48:cf:92:af:42:d7:c8:43:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 19 23:47:57 2026 GMT
Not After : Sep 18 23:52:57 2027 GMT
Subject: CN=8494CCD854772D20DDB640EC91A9E37FFF2B6474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:af:e4:5f:a3:b7:89:53:7d:55:f6:dd:b4:ee:
34:7c:94:82:9c:f5:a0:34:08:3d:bb:98:ca:d6:d7:
fc:df:43:86:e5:80:8c:d6:d3:fb:5f:33:f5:bb:ef:
bf:52:1e:15:f6:bd:53:56:c0:b1:37:1e:7a:19:11:
35:f0:3d:21:65:76:d2:86:00:e6:29:ab:f5:17:05:
6e:bf:e0:52:f1:db:57:b3:b0:65:70:77:48:12:b4:
bc:1e:90:59:ca:9e:41:e8:3d:7b:7b:76:d3:59:ba:
6d:2f:a3:df:2a:9b:96:b9:d7:96:d9:95:a4:22:02:
4f:1a:f0:d5:9d:64:3b:c7:86:67:c1:fa:9e:32:cb:
b5:bd:30:80:72:dc:16:4d:b0:c4:5f:11:9e:e6:aa:
5c:8a:40:42:84:4b:11:1b:e8:ee:14:64:31:e2:1a:
c8:25:fb:f0:e9:95:01:bc:c9:2c:fa:c4:52:e5:f4:
c2:9b:4f:49:71:6b:6d:43:32:59:e2:d4:6a:34:7f:
2d:bc:27:c7:af:72:ab:6f:5f:78:07:b9:ee:4a:e2:
e1:60:10:60:21:2c:b5:f9:1e:a5:c7:b3:92:e4:1b:
31:12:bc:8a:21:67:bf:21:f0:ae:47:bc:a9:db:8a:
84:71:fa:4c:5e:76:24:5d:21:d3:9e:2b:75:62:64:
47:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:94:CC:D8:54:77:2D:20:DD:B6:40:EC:91:A9:E3:7F:FF:2B:64:74
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402265.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.49.0/24
46.202.51.0/24
46.202.66.0/24
46.202.119.0/24
46.203.32.0/24
46.203.43.0-46.203.44.255
46.203.47.0/24
46.203.54.0/23
46.203.58.0/24
46.203.97.0/24
46.203.102.0/24
46.203.104.0/24
46.203.113.0/24
46.203.121.0/24
46.203.136.0/24
46.203.149.0/24
46.203.161.0/24
46.203.183.0/24
46.203.213.0/24
91.124.26.0/24
91.124.40.0/24
91.124.57.0/24
91.124.67.0/24
91.124.89.0/24
91.124.120.0/24
91.124.136.0/23
91.124.142.0/23
91.124.148.0/24
91.124.170.0/24
91.124.173.0/24
91.124.177.0/24
91.124.179.0/24
91.124.199.0/24
91.124.202.0/24
91.124.241.0/24
92.112.36.0/24
92.112.46.0/24
92.112.144.0/24
92.112.223.0/24
92.113.104.0/24
92.113.118.0/24
92.113.193.0/24
92.113.228.0/24
95.134.29.0/24
95.134.40.0/24
95.134.77.0/24
95.134.123.0/24
95.134.149.0/24
95.134.158.0/24
95.134.203.0/24
95.135.13.0/24
95.135.60.0/24
95.135.63.0/24
95.135.81.0/24
95.135.83.0/24
95.135.110.0/24
95.135.117.0/24
95.135.201.0/24
95.135.210.0/24
95.135.239.0/24
178.92.37.0-178.92.38.255
178.93.3.0/24
178.93.192.0/24
178.94.241.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:59:de:80:33:a4:08:bd:8b:dc:de:33:72:20:48:bb:37:c6:
7c:87:2a:ed:72:92:59:66:e8:34:cd:8b:55:f2:34:51:a2:91:
ff:18:6d:dd:7c:a4:d5:d6:f7:1a:46:75:b5:fa:6a:b8:ef:8e:
dc:fc:1f:99:a4:c5:49:20:c7:75:54:7c:2a:2d:c3:af:0b:1b:
fa:ed:95:ed:58:38:14:6c:d1:04:5a:91:f6:d6:ee:0a:96:18:
50:a8:f0:c7:6d:5c:60:02:ac:54:6c:a7:a2:33:ef:aa:a7:73:
a8:43:6c:f1:80:a4:9d:ad:a2:c4:19:0d:3a:b3:55:30:20:34:
80:6a:f5:54:9a:d8:17:26:ed:77:f5:19:61:1a:82:40:94:41:
db:fa:b8:1d:75:36:67:94:91:6d:0b:7b:f3:3e:0a:1c:fd:1a:
e5:21:14:c5:d8:c3:99:03:81:ed:eb:41:89:b7:2e:30:c2:f8:
54:38:a4:82:ad:8f:59:1b:4b:41:bb:95:fb:e6:aa:19:bb:0e:
5b:3b:c6:31:85:fd:13:e6:79:d4:b1:b1:eb:f6:32:4a:bc:e0:
b0:d6:f1:20:38:36:ee:e4:d8:87:b9:f5:37:b7:e4:c1:f8:50:
58:a8:6c:19:f4:16:fd:15:18:de:b9:a0:d1:63:ba:55:31:d6:
06:f6:29:f8
-----BEGIN CERTIFICATE-----
MIIGlDCCBXygAwIBAgIUDo5eLvKa210xPkVIz5KvQtfIQwwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjA5MTkyMzQ3NTdaFw0yNzA5MTgyMzUyNTdaMDMxMTAvBgNV
BAMTKDg0OTRDQ0Q4NTQ3NzJEMjBEREI2NDBFQzkxQTlFMzdGRkYyQjY0NzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBr+Rfo7eJU31V9t207jR8lIKc
9aA0CD27mMrW1/zfQ4blgIzW0/tfM/W7779SHhX2vVNWwLE3HnoZETXwPSFldtKG
AOYpq/UXBW6/4FLx21ezsGVwd0gStLwekFnKnkHoPXt7dtNZum0vo98qm5a515bZ
laQiAk8a8NWdZDvHhmfB+p4yy7W9MIBy3BZNsMRfEZ7mqlyKQEKESxEb6O4UZDHi
Gsgl+/DplQG8ySz6xFLl9MKbT0lxa21DMlni1Go0fy28J8evcqtvX3gHue5K4uFg
EGAhLLX5HqXHs5LkGzESvIohZ78h8K5HvKnbioRx+kxediRdIdOeK3ViZEelAgMB
AAGjggOeMIIDmjAdBgNVHQ4EFgQUhJTM2FR3LSDdtkDskanjf/8rZHQwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTNDAyMjY1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMIIBsQYIKwYBBQUHAQcBAf8EggGgMIIBnDCCAZgEAgAB
MIIBkAMEAC7KMQMEAC7KMwMEAC7KQgMEAC7KdwMEAC7LIDAMAwQALssrAwQALsss
AwQALssvAwQBLss2AwQALss6AwQALsthAwQALstmAwQALstoAwQALstxAwQALst5
AwQALsuIAwQALsuVAwQALsuhAwQALsu3AwQALsvVAwQAW3waAwQAW3woAwQAW3w5
AwQAW3xDAwQAW3xZAwQAW3x4AwQBW3yIAwQBW3yOAwQAW3yUAwQAW3yqAwQAW3yt
AwQAW3yxAwQAW3yzAwQAW3zHAwQAW3zKAwQAW3zxAwQAXHAkAwQAXHAuAwQAXHCQ
AwQAXHDfAwQAXHFoAwQAXHF2AwQAXHHBAwQAXHHkAwQAX4YdAwQAX4YoAwQAX4ZN
AwQAX4Z7AwQAX4aVAwQAX4aeAwQAX4bLAwQAX4cNAwQAX4c8AwQAX4c/AwQAX4dR
AwQAX4dTAwQAX4duAwQAX4d1AwQAX4fJAwQAX4fSAwQAX4fvMAwDBACyXCUDBACy
XCYDBACyXQMDBACyXcADBACyXvEwDQYJKoZIhvcNAQELBQADggEBADtZ3oAzpAi9
i9zeM3IgSLs3xnyHKu1ykllm6DTNi1XyNFGikf8Ybd18pNXW9xpGdbX6arjvjtz8
H5mkxUkgx3VUfCotw68LG/rtle1YOBRs0QRakfbW7gqWGFCo8MdtXGACrFRsp6Iz
76qnc6hDbPGApJ2tosQZDTqzVTAgNIBq9VSa2Bcm7Xf1GWEagkCUQdv6uB11NmeU
kW0Le/M+Chz9GuUhFMXYw5kDge3rQYm3LjDC+FQ4pIKtj1kbS0G7lfvmqhm7Dls7
xjGF/RPmedSxsev2Mkq84LDW8SA4Nu7k2Ie59Te35MH4UFiobBn0Fv0VGN65oNFj
ulUx1gb2Kfg=
-----END CERTIFICATE-----
Generated at Sun Sep 20 14:08:35 2026 by rpki-client