Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS51847.roa
File: AS51847.roa (raw, json)
Hash identifier: qBq9hBQstr9/98rTuGdLaH3YdRdFoxSSY0QNwbsi2wY=
Subject key identifier: 87:89:E8:4C:0C:EB:B4:4C:55:BA:AB:0F:7B:4F:FA:A8:15:F5:B5:FE
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 283993CB75C0EAAE5C794E60D46ED8ADA588F2E3
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS51847.roa
Signing time: Tue 22 Sep 2026 13:05:43 +0000
ROA not before: Tue 22 Sep 2026 13:00:43 +0000
ROA not after: Tue 21 Sep 2027 13:05:43 +0000
asID: 51847
IP address blocks: 140.233.191.0/24 maxlen: 24
147.79.59.0/24 maxlen: 24
148.135.253.0/24 maxlen: 24
150.241.210.0/23 maxlen: 24
155.117.188.0/24 maxlen: 24
162.141.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:44:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:39:93:cb:75:c0:ea:ae:5c:79:4e:60:d4:6e:d8:ad:a5:88:f2:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 22 13:00:43 2026 GMT
Not After : Sep 21 13:05:43 2027 GMT
Subject: CN=8789E84C0CEBB44C55BAAB0F7B4FFAA815F5B5FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a4:0c:bb:fe:a7:8d:47:cd:ac:fb:98:1a:f7:
2b:45:4b:41:56:32:e5:2b:bf:53:3e:59:0b:ef:b7:
4a:e5:63:4b:30:09:fa:cd:fb:e6:08:48:e5:f0:71:
90:ed:56:d2:94:c9:59:10:ab:18:68:12:62:5d:85:
c0:b8:e1:1a:99:42:f8:b5:ca:a3:b6:d7:5e:1b:5e:
53:60:f7:8d:3e:13:42:99:6f:d8:a0:ae:a3:33:d1:
8d:c4:b0:3c:7c:d9:af:53:d0:b3:f6:c0:1e:24:62:
b9:48:04:0a:d3:f5:72:61:1b:da:81:68:3a:94:62:
97:8d:a8:95:c8:4f:c5:1c:5d:7d:f7:03:3b:14:51:
37:8a:27:c9:23:f0:be:0b:9e:9c:89:e3:49:a0:b4:
85:d7:75:47:cf:df:aa:a1:ce:be:5d:88:e6:b9:5a:
2c:c1:0a:f1:57:bc:58:73:a0:33:fc:4f:67:a9:2c:
2c:f9:ca:26:b5:c1:4e:60:05:b1:db:37:db:30:0c:
06:ae:8e:b9:3f:98:ce:6b:60:58:94:8a:a7:1d:2b:
c9:ca:23:71:9d:72:87:3a:bb:25:48:28:21:2e:95:
6d:70:36:03:75:af:a4:3c:c8:3b:c8:74:88:48:fe:
03:28:6e:1d:24:a8:42:b4:fe:0a:27:46:bc:ca:f2:
15:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:89:E8:4C:0C:EB:B4:4C:55:BA:AB:0F:7B:4F:FA:A8:15:F5:B5:FE
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS51847.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.191.0/24
147.79.59.0/24
148.135.253.0/24
150.241.210.0/23
155.117.188.0/24
162.141.8.0/24
Signature Algorithm: sha256WithRSAEncryption
39:e3:3b:f0:04:6e:3c:f9:32:2a:fd:55:bf:2b:3c:0a:fd:44:
87:f5:89:cc:7f:78:c1:93:62:52:61:52:75:cc:6a:5e:76:54:
c2:c5:fb:fb:ae:5a:ff:12:18:f0:30:62:ba:a0:c1:3a:2b:a8:
a1:d1:20:b2:79:f6:34:05:47:0e:3f:eb:9e:40:6d:45:8d:c3:
bd:f0:a7:58:f1:25:1a:0c:23:63:b4:ba:fc:f5:b1:5d:9d:07:
cd:ed:07:8d:70:7d:15:dc:ec:fc:1c:c4:ff:cc:40:b9:cb:bf:
d0:43:82:f0:13:a7:6d:61:3c:aa:e6:aa:7c:b9:ba:c9:f0:1b:
45:38:cb:fa:24:0c:92:9f:10:80:e1:a9:09:96:fc:34:7e:06:
b0:c5:2d:a3:6a:dc:2d:59:91:cf:37:85:81:a3:3e:1f:e9:2a:
36:74:8e:02:f4:b3:ab:84:90:a6:00:52:9b:91:04:5e:a2:7e:
da:f9:73:68:d4:d8:66:60:66:6a:2e:56:de:b2:2e:1b:8e:1f:
2a:6a:b2:0d:03:c5:71:49:4c:e7:04:37:40:4d:d3:46:5d:5d:
75:e9:0f:fa:b5:3b:5d:ee:5b:3b:e1:55:5d:e2:72:c5:07:c5:
0a:74:93:15:ec:57:0c:f1:d3:70:33:a6:12:ac:10:dd:f6:c6:
ab:f7:86:a2
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgIUKDmTy3XA6q5ceU5g1G7YraWI8uMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA5MjIxMzAwNDNaFw0yNzA5MjExMzA1NDNaMDMxMTAvBgNV
BAMTKDg3ODlFODRDMENFQkI0NEM1NUJBQUIwRjdCNEZGQUE4MTVGNUI1RkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVpAy7/qeNR82s+5ga9ytFS0FW
MuUrv1M+WQvvt0rlY0swCfrN++YISOXwcZDtVtKUyVkQqxhoEmJdhcC44RqZQvi1
yqO2114bXlNg940+E0KZb9igrqMz0Y3EsDx82a9T0LP2wB4kYrlIBArT9XJhG9qB
aDqUYpeNqJXIT8UcXX33AzsUUTeKJ8kj8L4LnpyJ40mgtIXXdUfP36qhzr5diOa5
WizBCvFXvFhzoDP8T2epLCz5yia1wU5gBbHbN9swDAaujrk/mM5rYFiUiqcdK8nK
I3Gdcoc6uyVIKCEulW1wNgN1r6Q8yDvIdIhI/gMobh0kqEK0/gonRrzK8hUdAgMB
AAGjggInMIICIzAdBgNVHQ4EFgQUh4noTAzrtExVuqsPe0/6qBX1tf4wHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTNTE4NDcucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwPQYIKwYBBQUHAQcBAf8ELjAsMCoEAgABMCQDBACM6b8D
BACTTzsDBACUh/0DBAGW8dIDBACbdbwDBACijQgwDQYJKoZIhvcNAQELBQADggEB
ADnjO/AEbjz5Mir9Vb8rPAr9RIf1icx/eMGTYlJhUnXMal52VMLF+/uuWv8SGPAw
YrqgwTorqKHRILJ59jQFRw4/655AbUWNw73wp1jxJRoMI2O0uvz1sV2dB83tB41w
fRXc7PwcxP/MQLnLv9BDgvATp21hPKrmqny5usnwG0U4y/okDJKfEIDhqQmW/DR+
BrDFLaNq3C1Zkc83hYGjPh/pKjZ0jgL0s6uEkKYAUpuRBF6iftr5c2jU2GZgZmou
Vt6yLhuOHypqsg0DxXFJTOcEN0BN00ZdXXXpD/q1O13uWzvhVV3icsUHxQp0kxXs
Vwzx03AzphKsEN32xqv3hqI=
-----END CERTIFICATE-----
Generated at Wed Sep 23 18:45:52 2026 by rpki-client