Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS47690.roa
File: AS47690.roa (raw, json)
Hash identifier: 6cRA/kDAkHJpGO18tbVkQ/je3rOr4EpvpOq5jWyjwHM=
Subject key identifier: 4E:5F:33:FB:63:47:AA:38:64:68:E7:30:23:2E:8C:1A:8A:2C:98:42
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 3E946BCEA5F39E81B1A30E55BBEB28885F0E1CB7
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS47690.roa
Signing time: Thu 02 Oct 2025 00:18:36 +0000
ROA not before: Thu 02 Oct 2025 00:13:36 +0000
ROA not after: Thu 01 Oct 2026 00:18:36 +0000
asID: 47690
IP address blocks: 143.20.152.0/24 maxlen: 24
143.20.168.0/24 maxlen: 24
143.20.173.0/24 maxlen: 24
143.20.194.0/24 maxlen: 24
143.20.212.0/24 maxlen: 24
143.20.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:18:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:94:6b:ce:a5:f3:9e:81:b1:a3:0e:55:bb:eb:28:88:5f:0e:1c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Oct 2 00:13:36 2025 GMT
Not After : Oct 1 00:18:36 2026 GMT
Subject: CN=4E5F33FB6347AA386468E730232E8C1A8A2C9842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7a:2f:93:f5:3e:33:a4:7c:92:9f:82:a4:88:
75:c8:df:ed:eb:51:b8:ae:b5:6d:58:3c:3c:ec:8a:
5d:46:a4:ec:d7:37:d0:b5:91:05:3e:9b:de:02:14:
0d:01:98:f4:9d:e3:7a:a2:a9:53:b4:f4:ec:9e:c6:
ca:76:5e:e5:41:3d:25:ae:0d:cf:de:13:f1:15:f3:
dd:71:ef:02:01:e3:25:75:f7:3c:f6:48:37:19:dc:
74:e1:6b:a6:57:92:a0:92:10:d7:6b:ac:b7:7b:a5:
2d:3b:54:e0:d1:95:06:ac:ab:4a:82:f0:d1:0b:5c:
48:a9:91:4f:9b:26:c5:3f:38:f7:14:98:38:0f:91:
bb:62:c8:fa:7d:81:ab:9b:a7:ac:0c:50:7f:5d:92:
91:0c:5f:4a:8d:bc:1e:81:6f:8d:00:ca:eb:40:a7:
73:39:b3:85:93:1b:64:14:35:27:cb:65:11:77:51:
fe:fe:ad:39:ac:71:1e:16:45:61:f2:a5:11:0f:c9:
55:80:b1:c6:fe:db:f7:ef:e5:26:44:e4:ef:ed:bc:
4a:4e:4d:08:cc:d7:7d:a7:3a:3d:73:6c:34:d9:5c:
c1:9d:7c:6d:0c:5e:de:59:d9:26:85:25:e1:de:c0:
f5:6b:f1:14:13:a0:6f:55:f0:b3:91:ba:6e:5a:db:
df:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:5F:33:FB:63:47:AA:38:64:68:E7:30:23:2E:8C:1A:8A:2C:98:42
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS47690.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.152.0/24
143.20.168.0/24
143.20.173.0/24
143.20.194.0/24
143.20.212.0/24
143.20.220.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:fd:25:82:e7:d6:68:8d:47:6f:01:db:c4:13:8c:d4:7b:bc:
8c:90:fb:e6:5d:1c:7f:01:fd:c3:92:e1:5f:ea:ce:c7:2a:0c:
c1:b8:b6:e7:43:ba:d2:ab:f6:11:b0:eb:71:dc:c4:6f:13:f6:
64:51:41:a3:35:87:de:d4:e7:15:f3:f4:fc:ef:55:34:2f:22:
a7:56:3c:9c:a8:06:14:45:19:64:8a:c2:c7:d7:e9:98:cc:53:
34:7f:22:5f:87:8a:5f:86:73:6a:e0:4e:79:15:71:b8:e9:14:
50:e0:c7:8c:1b:5e:84:db:0e:3e:80:18:da:46:27:bf:b5:df:
b1:8b:d3:f7:64:95:cd:3f:29:f1:d2:c4:74:05:3f:dc:3e:46:
bf:d4:16:97:7f:38:8d:bd:6a:4d:e6:04:9a:0c:bb:97:4a:14:
b7:28:8b:ed:66:8b:77:b3:50:ee:25:a1:bd:a7:bd:bc:84:40:
ea:62:8f:bf:3b:a1:25:18:79:10:b8:c6:f3:78:8b:d6:5f:91:
34:2e:72:b7:c0:a0:d1:99:e3:c8:b9:56:fa:47:46:ba:8c:9e:
48:3e:56:bd:ba:b7:64:45:35:7c:0b:07:93:4f:78:8b:ba:be:
cf:57:63:5f:96:34:c0:f6:0c:ce:b4:ba:e2:37:a1:49:1b:76:
1a:93:20:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:02:28 2025 by rpki-client