Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS47952.roa
File: AS47952.roa (raw, json)
Hash identifier: Atan1THQd0W6wKdQj0Uf3ZaSphElPCuLlCNtAWosGTQ=
Subject key identifier: 9E:ED:B0:0C:53:7F:89:EF:57:D2:FB:CE:3A:D0:88:7E:26:2B:3D:06
Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial: 4956E72EBE1A53871831DA63BC3B9135EFA90FE0
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS47952.roa
Signing time: Fri 17 Jul 2026 14:22:21 +0000
ROA not before: Fri 17 Jul 2026 14:17:21 +0000
ROA not after: Fri 16 Jul 2027 14:22:21 +0000
asID: 47952
IP address blocks: 212.103.36.0/22 maxlen: 24
212.103.36.0/24 maxlen: 24
212.103.37.0/24 maxlen: 24
212.103.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:56:e7:2e:be:1a:53:87:18:31:da:63:bc:3b:91:35:ef:a9:0f:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Validity
Not Before: Jul 17 14:17:21 2026 GMT
Not After : Jul 16 14:22:21 2027 GMT
Subject: CN=9EEDB00C537F89EF57D2FBCE3AD0887E262B3D06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ce:06:0e:20:23:84:f5:40:9b:85:2d:2f:5b:
ff:39:3c:35:b3:be:4a:db:18:2e:72:65:3d:15:9d:
f6:01:34:29:4a:b1:64:71:42:f9:6c:8e:ea:13:7b:
af:29:d4:26:1a:25:ea:ec:79:df:79:e8:fc:3d:f2:
ca:9f:16:92:c4:b5:ea:28:ba:ff:12:a5:24:71:d5:
96:85:1e:1d:0b:c4:75:ba:a2:8d:6b:c6:11:29:b7:
33:68:12:14:fd:32:72:71:26:48:a4:20:f3:8e:58:
a9:f2:59:51:bd:3c:a2:5d:b0:15:c4:1e:63:f1:f5:
4a:1d:63:c0:86:16:71:9f:e4:b9:5f:38:8e:a6:e4:
d2:b0:ad:b4:a6:a4:ad:76:6e:3c:9e:a2:4d:54:11:
38:10:35:85:74:af:54:31:45:8c:b2:ba:2e:01:d0:
3f:c4:52:f8:6c:4e:e9:27:3b:ab:e0:11:ce:c7:b8:
8d:f3:1b:1d:91:c8:83:13:74:3d:ca:b5:ef:20:a4:
03:e8:69:50:cb:d7:93:c7:7b:00:cb:23:38:3c:09:
c3:34:a6:b9:82:34:49:18:66:c4:a0:94:a6:42:87:
b5:78:a9:69:24:a1:49:84:f9:33:15:bd:2d:c9:62:
7a:7f:a1:cb:56:cd:d3:a5:63:e4:59:31:52:56:4d:
e3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:ED:B0:0C:53:7F:89:EF:57:D2:FB:CE:3A:D0:88:7E:26:2B:3D:06
X509v3 Authority Key Identifier:
keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS47952.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.103.36.0/22
Signature Algorithm: sha256WithRSAEncryption
93:7e:f9:e2:fa:e4:be:f0:c2:b4:f0:b7:42:41:f1:26:82:7b:
a0:6b:b3:9c:4c:13:a9:b2:12:6f:3b:94:fa:ad:e2:70:00:3e:
2b:44:6b:87:98:f1:83:07:99:3e:02:35:f5:17:3c:3b:29:59:
87:2e:a1:14:1d:03:9d:07:14:c4:eb:d7:c1:71:52:47:65:01:
e5:4e:90:94:0d:c6:40:ee:bf:d0:e4:7f:1c:f0:61:c8:d5:6b:
d4:0b:b9:0d:4b:35:62:f4:87:d6:7a:7c:32:5c:5e:0b:d0:e0:
c2:9a:27:05:72:3c:cd:80:36:04:50:e3:dc:0d:fc:bf:2f:16:
a8:89:5d:34:88:5a:cd:37:e6:7d:2b:ef:2d:2c:bd:69:52:3a:
f1:6d:85:9d:04:8d:09:11:93:5e:fc:0e:99:d8:fb:0c:cf:70:
c6:b8:66:0a:2e:1a:59:48:90:75:6f:71:52:01:83:ef:d4:35:
af:9d:dc:e4:fa:4b:d6:46:32:1d:b3:cc:bf:a1:ae:77:1f:f0:
73:18:b9:b4:69:e3:19:0b:09:6d:f8:9a:ce:3e:08:dc:2b:e2:
42:af:9a:b6:6a:9a:31:6c:48:07:ec:a5:0d:db:3e:d7:07:5b:
3c:fa:93:de:c8:fa:d9:c8:b5:57:19:07:32:60:a4:24:4e:f0:
70:b0:cc:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:59:11 2026 by rpki-client