Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS47447.roa
File: AS47447.roa (raw, json)
Hash identifier: ++Mm8wpfaI6zO8imugeS5CfSakoMIFOsLLQ0ljnV7CQ=
Subject key identifier: 95:2A:A2:7F:7D:21:1A:8E:BC:B7:27:83:5B:7C:D1:2B:FE:03:D0:99
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 35EDA507FF62DA8983B3F441AF1807A5A1B21F61
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS47447.roa
Signing time: Tue 22 Sep 2026 14:45:03 +0000
ROA not before: Tue 22 Sep 2026 14:40:03 +0000
ROA not after: Tue 21 Sep 2027 14:45:03 +0000
asID: 47447
IP address blocks: 146.103.57.0/24 maxlen: 24
148.135.182.0/24 maxlen: 24
155.117.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:ed:a5:07:ff:62:da:89:83:b3:f4:41:af:18:07:a5:a1:b2:1f:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 22 14:40:03 2026 GMT
Not After : Sep 21 14:45:03 2027 GMT
Subject: CN=952AA27F7D211A8EBCB727835B7CD12BFE03D099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b3:d0:a3:fe:81:23:98:e8:eb:19:f5:b7:be:
af:33:cb:e6:a2:02:bb:b4:4e:ca:dc:7c:66:f2:75:
60:98:92:c3:4b:6d:1b:c0:81:b6:40:d4:27:b7:ef:
5c:7c:18:39:85:dd:59:89:c3:be:8c:6e:02:39:8a:
4a:2f:1a:0e:5a:33:17:d7:84:e4:d7:db:fb:df:15:
59:85:f3:e1:f0:b9:ca:60:22:ff:7f:94:37:c1:8b:
fa:e9:58:f0:f6:8f:6b:e0:03:17:03:ae:0c:c0:45:
7d:c7:9b:f4:48:80:b7:00:9c:af:5a:a1:97:b1:7c:
cd:d1:4f:5b:57:92:f9:52:b7:94:28:51:61:9e:e3:
8e:9c:d1:f3:ae:fe:37:1b:88:7e:81:ea:8c:a5:66:
24:ce:4b:44:01:aa:6b:4b:c2:f9:0c:ac:28:63:aa:
b8:f8:08:9d:6c:b7:ce:61:eb:15:4b:fa:2d:87:be:
ab:4e:ae:70:9c:5a:13:b7:25:cd:38:78:13:c7:c4:
ef:02:dd:60:c5:69:d0:f2:fd:ea:81:d7:43:6a:2c:
cc:ac:20:47:2b:6b:0b:24:63:06:70:44:cc:2f:a2:
16:52:a5:3e:1b:18:21:e2:bf:0e:fa:97:48:ce:70:
81:8b:11:bc:1e:c8:9d:7d:0c:e0:8c:81:a0:0c:41:
72:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:2A:A2:7F:7D:21:1A:8E:BC:B7:27:83:5B:7C:D1:2B:FE:03:D0:99
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS47447.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.57.0/24
148.135.182.0/24
155.117.183.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:59:19:8b:22:c6:db:a7:0f:3b:70:38:41:fa:ad:30:b1:20:
a1:a4:75:cd:6f:0d:e6:aa:8d:fe:7b:bb:21:bf:d5:a5:35:5e:
63:c3:3a:37:46:d4:ff:49:b3:95:0a:d4:64:a3:b9:ab:07:20:
34:e7:55:b1:e0:30:dd:6c:86:83:cb:0c:36:45:85:e6:c4:89:
35:8a:e0:9a:7e:26:a7:58:a5:a0:f8:85:e0:48:bd:01:08:b7:
ec:ec:c6:da:c6:31:94:d7:5e:00:41:16:67:fc:17:10:f4:c3:
13:65:82:d7:31:cf:0e:bb:19:b4:45:c6:9c:ea:41:62:04:26:
8e:1a:42:53:d0:59:9d:88:a3:cb:8a:f0:87:e7:a7:92:cd:53:
c1:7e:df:3e:02:3a:ed:7c:f6:3a:72:95:bc:33:02:91:20:95:
5b:cf:20:4f:f7:77:06:1a:9c:e3:e0:2e:d0:d5:61:81:89:b7:
7d:aa:17:90:54:e2:e3:b2:bb:7d:40:02:d2:a2:15:4a:61:b9:
0f:73:a7:56:7d:18:7f:e1:e6:7a:bf:d5:b5:0b:bf:10:1a:51:
0e:36:98:a7:2f:ab:f8:24:44:f9:dd:cd:c8:44:76:b3:95:22:
18:63:8d:bd:ec:e3:32:db:bd:36:41:02:2a:23:09:6f:bb:7a:
81:e2:70:00
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Sep 23 08:18:33 2026 by rpki-client