Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402288.roa
File: AS402288.roa (raw, json)
Hash identifier: lhcH+rS/H3dCUOSfNC2QsZ009jVbZSJyORLvULzuxNw=
Subject key identifier: 32:D2:E2:55:2A:47:59:E2:84:23:95:0A:20:FA:7B:1C:2C:53:F6:3E
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 079BF76412A5429C82F1872B7F10636C7A915DEE
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402288.roa
Signing time: Sun 20 Sep 2026 06:14:54 +0000
ROA not before: Sun 20 Sep 2026 06:09:54 +0000
ROA not after: Sun 19 Sep 2027 06:14:54 +0000
asID: 402288
IP address blocks: 92.112.220.0/24 maxlen: 24
92.113.105.0/24 maxlen: 24
92.113.213.0/24 maxlen: 24
95.134.48.0/24 maxlen: 24
95.134.159.0/24 maxlen: 24
95.135.84.0/24 maxlen: 24
178.92.6.0/24 maxlen: 24
178.92.14.0/24 maxlen: 24
178.95.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:9b:f7:64:12:a5:42:9c:82:f1:87:2b:7f:10:63:6c:7a:91:5d:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 20 06:09:54 2026 GMT
Not After : Sep 19 06:14:54 2027 GMT
Subject: CN=32D2E2552A4759E28423950A20FA7B1C2C53F63E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ac:96:5d:a2:81:a7:24:d4:6f:d4:0c:60:bd:
af:21:20:a0:b3:db:13:4d:8e:f8:5f:ba:02:fb:30:
ca:66:5d:28:8b:95:ad:c3:7a:62:54:ae:0a:16:0b:
4e:03:e3:92:53:a9:16:1e:80:f4:0c:c3:35:0e:1b:
ea:d2:3e:b7:26:e2:59:4d:58:2b:e5:ce:fe:4f:51:
ea:7d:eb:bd:f7:cf:23:f1:4d:29:e3:01:66:7c:de:
eb:57:fc:3e:c8:7e:01:b6:62:a3:fe:a1:b9:40:67:
08:90:a9:92:c4:81:f0:99:52:05:e5:84:af:f6:e9:
de:4c:2b:d7:c0:aa:f8:f2:99:12:c1:04:a4:75:57:
60:22:3a:62:e8:5f:dc:f7:72:ce:3e:79:d1:5f:82:
a9:72:54:cb:07:72:a2:b6:88:0c:46:34:4a:93:0c:
54:3c:28:79:e7:a4:4d:53:1c:80:6a:e4:6b:f2:cd:
36:fa:12:16:49:5c:93:c5:5e:71:d6:a2:22:59:c3:
60:6e:bf:9f:2b:5d:e6:ac:7a:c4:2d:d3:fa:de:c2:
d5:c7:f7:46:e8:37:8e:5e:0d:ba:fe:7f:02:6a:a8:
30:93:20:e0:3e:77:a9:1f:59:41:62:82:89:09:0b:
c6:07:55:bd:2e:45:96:8e:e2:ff:04:70:e2:f8:31:
3d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D2:E2:55:2A:47:59:E2:84:23:95:0A:20:FA:7B:1C:2C:53:F6:3E
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS402288.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.112.220.0/24
92.113.105.0/24
92.113.213.0/24
95.134.48.0/24
95.134.159.0/24
95.135.84.0/24
178.92.6.0/24
178.92.14.0/24
178.95.203.0/24
Signature Algorithm: sha256WithRSAEncryption
42:91:b4:5c:4e:55:03:88:3f:ad:24:9c:b3:07:c9:f3:9b:4f:
3f:a4:bc:de:ae:f3:cd:79:7c:5b:93:5c:0c:dc:99:16:70:0c:
4b:85:b2:7e:69:c0:b5:c0:d3:7e:27:97:3e:15:9f:49:37:64:
5f:26:48:5a:47:40:9f:76:25:83:31:5d:2b:d2:58:07:a3:0e:
82:30:67:74:be:df:35:79:fc:a9:2f:72:8e:d6:47:17:9a:13:
ef:b7:81:04:b2:a5:d4:ee:ea:15:cf:1e:4c:0d:aa:d2:03:43:
a8:1d:51:df:81:f0:03:cf:d9:cf:b0:e2:bb:a8:5d:82:6c:6d:
99:47:4a:92:5d:a0:d8:5e:62:8f:31:67:49:7f:58:ec:da:fe:
64:9b:01:92:4f:a8:bf:90:10:46:98:30:24:11:61:84:85:e8:
b5:92:9e:62:d9:34:15:e1:e0:f3:c6:47:75:bb:9d:76:cd:98:
2f:f3:da:e0:62:3a:c1:46:08:bb:55:77:0a:45:71:22:67:25:
51:aa:23:1f:3a:24:59:80:68:36:91:75:23:27:51:56:2b:f0:
60:82:0f:b7:be:d4:23:42:d7:f1:0d:c5:d5:79:92:82:c1:ab:
35:4b:3c:95:c0:79:06:59:cb:b9:80:9e:66:2a:76:87:89:76:
bf:0d:05:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:11:18 2026 by rpki-client