Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS47583.roa
File: AS47583.roa (raw, json)
Hash identifier: IgJpMPgyP0TKGPkH9jr4bjn25O9r8XTzs3sWiqOXj1Q=
Subject key identifier: 81:21:0C:22:20:83:F5:62:E2:C3:62:67:C9:4B:1B:3D:82:84:C9:5F
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 3305FFC52BAB68767A7968BD6689ABD68004E492
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS47583.roa
Signing time: Thu 02 Oct 2025 10:55:08 +0000
ROA not before: Thu 02 Oct 2025 10:50:08 +0000
ROA not after: Thu 01 Oct 2026 10:55:08 +0000
asID: 47583
IP address blocks: 46.202.88.0/21 maxlen: 24
46.202.128.0/21 maxlen: 24
46.202.136.0/21 maxlen: 24
46.202.144.0/21 maxlen: 24
46.202.152.0/21 maxlen: 24
46.202.160.0/21 maxlen: 24
46.202.168.0/21 maxlen: 24
46.202.176.0/21 maxlen: 24
46.202.184.0/21 maxlen: 24
46.202.192.0/21 maxlen: 24
92.112.176.0/21 maxlen: 24
92.112.184.0/21 maxlen: 24
92.112.192.0/21 maxlen: 24
92.113.16.0/21 maxlen: 24
92.113.24.0/21 maxlen: 24
92.113.32.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:05:ff:c5:2b:ab:68:76:7a:79:68:bd:66:89:ab:d6:80:04:e4:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 2 10:50:08 2025 GMT
Not After : Oct 1 10:55:08 2026 GMT
Subject: CN=81210C222083F562E2C36267C94B1B3D8284C95F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a9:8d:b2:45:f2:99:c1:f3:fe:d3:12:8d:1d:
fb:60:66:51:e9:5f:f9:8f:ed:b3:e3:ac:c8:c3:16:
27:1a:1f:f2:85:0e:1d:88:6c:f0:84:38:a8:c6:d7:
cc:ee:1f:23:0f:f6:94:de:92:94:fe:e0:f0:3b:76:
37:8b:ec:46:4e:e7:83:8e:1b:3d:fa:8c:db:a9:30:
30:2f:af:c2:9c:a7:29:25:da:dc:33:bf:e4:d7:65:
37:22:cb:d4:1c:eb:8b:47:bd:32:8f:ab:81:ed:b4:
4e:f3:d3:78:02:c8:a5:37:a2:81:41:5d:db:e2:52:
60:7d:9d:98:20:ab:fe:2e:36:0b:69:d2:87:5c:8d:
83:4d:8b:52:66:34:53:98:0d:ff:d8:a5:98:97:2a:
ec:74:fc:b5:79:78:cf:86:96:cf:ec:94:91:a5:39:
2b:f1:35:31:20:44:22:74:18:b7:78:a3:76:0d:c0:
ce:ca:6e:bc:47:2f:b3:b8:70:82:18:9a:7c:15:0d:
7b:61:35:10:c7:bf:a1:e7:df:41:c6:dd:7c:1b:6c:
19:08:53:e3:42:49:18:96:11:5e:18:f0:89:e2:4a:
a0:6b:43:7e:e0:a8:c8:dc:4c:af:0d:a3:c6:e9:e5:
f8:9e:16:28:6b:f4:ee:8f:d4:2b:e2:ce:36:a0:4c:
3d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:21:0C:22:20:83:F5:62:E2:C3:62:67:C9:4B:1B:3D:82:84:C9:5F
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS47583.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.88.0/21
46.202.128.0-46.202.199.255
92.112.176.0-92.112.199.255
92.113.16.0-92.113.39.255
Signature Algorithm: sha256WithRSAEncryption
86:fe:50:44:f2:81:77:4f:a4:c7:d3:b8:97:c1:f7:8e:50:ca:
62:4c:d0:d9:23:27:1d:57:e1:83:92:fc:b7:43:8e:6a:45:b8:
98:5b:4d:a3:c9:d0:cd:06:83:81:42:59:68:0d:2e:01:f3:c8:
96:e7:70:6d:b2:48:5c:d8:56:db:ff:7d:7d:76:18:c4:03:97:
b3:6b:60:71:d8:b0:bf:15:7c:04:aa:1a:8b:f8:6c:cc:f0:62:
21:0e:e8:b1:9e:b9:74:23:92:e4:e7:89:69:88:fe:19:63:2d:
a3:27:63:92:96:08:2b:8f:97:ef:99:f9:a0:3d:74:79:09:b2:
f3:31:86:2f:7b:b5:98:63:69:fd:d3:ef:03:bd:63:bb:7e:16:
e8:c5:78:18:0b:b7:d8:a9:85:8f:c7:5f:82:38:46:6d:5d:46:
27:d1:16:9e:c5:b8:48:fa:6e:ee:8d:10:f4:31:68:3c:40:b6:
26:04:33:19:8c:1d:ed:c7:dc:69:ca:da:c0:67:2a:32:85:3d:
32:87:c6:e4:62:b5:ad:b4:2a:a4:87:2e:e7:34:fa:99:6c:fc:
7c:b4:71:35:a0:11:28:e5:14:8e:66:89:d0:f2:8e:bc:7b:1a:
0d:a5:bd:0a:f4:d9:6a:5d:bd:5f:3e:af:65:a7:b9:59:23:cf:
07:ee:b4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:31:12 2025 by rpki-client