Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS44547.roa
File: AS44547.roa (raw, json)
Hash identifier: BEuxPZUTfTzJLO8SsYWNKoP8Xal+MOY5lvwM4RNUWi0=
Subject key identifier: FB:FF:D3:74:62:0C:8A:A7:C9:1C:CC:CE:05:1F:A2:E7:B1:4E:45:70
Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial: 301F01CE02F59C36155DFE1377BA1F3895F2CA2F
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS44547.roa
Signing time: Sun 19 Jul 2026 11:44:17 +0000
ROA not before: Sun 19 Jul 2026 11:39:17 +0000
ROA not after: Sun 18 Jul 2027 11:44:17 +0000
asID: 44547
IP address blocks: 37.221.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:1f:01:ce:02:f5:9c:36:15:5d:fe:13:77:ba:1f:38:95:f2:ca:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Validity
Not Before: Jul 19 11:39:17 2026 GMT
Not After : Jul 18 11:44:17 2027 GMT
Subject: CN=FBFFD374620C8AA7C91CCCCE051FA2E7B14E4570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:eb:60:fe:d5:d8:7a:d4:58:48:78:e7:d6:0a:
0c:84:23:81:95:20:35:7d:d3:f8:bf:23:ca:df:7c:
8d:fc:53:53:bc:16:f9:97:f3:ed:20:76:1f:0a:ed:
02:3c:b3:96:d9:a3:83:92:77:83:e7:db:c8:0d:81:
35:76:cd:08:f4:fd:9a:06:ae:c5:da:45:7b:61:b8:
15:e4:35:13:1d:df:b4:9f:a1:09:cf:5a:3a:fd:ac:
71:94:9a:cd:05:45:c9:9b:72:eb:e6:d1:b6:3b:05:
8a:9c:0b:bb:53:f0:1c:7f:e0:b9:d8:43:59:a4:7b:
e3:d2:c3:7f:da:a3:6a:5d:69:8a:4e:ae:fc:7d:1b:
44:9f:1a:13:3e:89:d1:82:8f:22:0c:5d:10:ef:1b:
56:aa:52:3e:db:c6:f7:3d:4f:bb:37:91:76:c7:04:
1c:00:64:d2:18:f8:4c:8b:15:86:05:75:02:bc:1e:
01:60:32:2c:6d:bd:f9:d4:be:7f:19:72:85:28:f2:
78:f3:3b:66:bc:9a:12:df:81:c4:69:b1:4c:86:eb:
98:b8:34:cb:ae:90:8b:6f:35:d9:92:e1:8e:94:f7:
c3:89:44:e3:c5:eb:2e:00:bc:5d:14:36:7d:6a:04:
7e:b5:12:e6:0d:b6:97:5d:0f:97:24:c7:e2:1a:63:
1d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:FF:D3:74:62:0C:8A:A7:C9:1C:CC:CE:05:1F:A2:E7:B1:4E:45:70
X509v3 Authority Key Identifier:
keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS44547.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.77.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:a5:a0:c5:80:00:bd:84:24:19:d9:b2:f8:75:50:1b:8f:4b:
b8:a0:23:21:61:43:56:3b:e2:d7:12:b9:43:65:29:0e:fd:96:
02:98:ca:a3:f4:f6:70:92:48:11:4e:65:f7:2f:4d:e4:ea:55:
ca:c4:2c:04:e2:01:df:93:f9:0e:32:18:5f:e4:40:b1:df:b1:
18:51:f4:41:3b:13:49:71:be:92:7d:b5:95:02:02:08:6c:48:
ca:d3:b6:21:f8:0b:c2:c4:85:66:5f:da:3f:f5:67:b4:cb:21:
76:cb:4b:b1:60:df:29:93:01:7c:80:fb:8b:90:49:1b:91:87:
cd:b1:1a:10:19:46:b0:a5:bc:04:a3:fa:81:f6:fe:02:3a:61:
9e:98:5e:1a:8a:1d:bd:41:f4:17:76:7b:79:67:d2:e8:d3:32:
d2:b7:65:22:fb:21:10:3c:5e:4a:43:dc:c3:bb:04:40:a9:68:
b5:ec:1a:5b:0b:b6:b5:f2:2b:cf:6f:2f:db:2b:b6:18:b4:06:
2e:c9:3b:1f:86:89:4e:d5:18:65:29:74:46:c3:d2:bd:2e:b3:
a6:59:94:fb:03:9e:59:8c:d9:fa:81:e8:fe:b2:91:f0:b6:55:
ac:27:34:1c:dc:c3:5c:53:dd:37:d1:0a:fd:e7:53:a1:c8:7a:
fd:47:5e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:24:36 2026 by rpki-client