Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS47952.roa
File: AS47952.roa (raw, json)
Hash identifier: 1Beb0axEmJuzgkakb9NxpTioDhchnRMwN9JR9I/oTVU=
Subject key identifier: 6A:FD:E3:B9:5E:B1:22:36:18:92:EB:6A:29:91:B8:76:6B:E5:1C:59
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 31A4AF63A566E949C036D0FE50E47D385B6A8353
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS47952.roa
Signing time: Thu 09 Jul 2026 06:49:05 +0000
ROA not before: Thu 09 Jul 2026 06:44:05 +0000
ROA not after: Thu 08 Jul 2027 06:49:05 +0000
asID: 47952
IP address blocks: 92.112.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:a4:af:63:a5:66:e9:49:c0:36:d0:fe:50:e4:7d:38:5b:6a:83:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jul 9 06:44:05 2026 GMT
Not After : Jul 8 06:49:05 2027 GMT
Subject: CN=6AFDE3B95EB122361892EB6A2991B8766BE51C59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:47:fe:89:99:f5:91:25:84:1f:80:a9:b9:57:
23:01:9c:5d:44:b7:d7:98:b1:f7:62:c2:b8:c3:88:
d4:fc:d6:a5:03:c0:83:b8:75:39:75:29:89:39:d1:
42:6b:94:bd:dc:6e:de:6a:a4:34:8a:bb:3d:81:6e:
20:95:fc:89:ec:ff:dc:61:69:a3:c5:dd:a5:e9:d5:
77:f5:70:01:fd:0d:fa:9b:9a:79:66:0d:42:df:87:
a3:72:db:af:72:3a:55:3e:a6:65:89:0d:e5:c1:e3:
df:ad:2d:08:ea:09:30:c2:42:54:06:d6:be:a8:b8:
ac:3d:3d:c1:d9:34:a9:90:a4:4e:01:e3:9d:cd:3d:
8a:4b:ee:b9:20:1e:9c:67:d0:34:2b:50:c5:ed:88:
e1:3c:fd:c2:e6:d1:c2:98:a7:51:29:08:e4:78:ff:
3e:f7:c2:52:db:04:b3:4d:46:6e:07:b0:03:98:03:
1a:53:78:65:c2:7e:55:a7:ae:7c:4f:ef:33:e0:6d:
41:d3:b1:37:68:16:8a:ae:36:5e:c2:08:2a:a2:58:
41:40:28:71:d4:5b:e5:42:92:38:a7:3a:a8:01:ba:
78:3a:04:53:6f:ec:15:84:21:c6:f6:40:2b:16:b2:
51:ed:d4:34:2c:ce:1f:83:c8:c8:d5:a7:8d:99:21:
d4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:FD:E3:B9:5E:B1:22:36:18:92:EB:6A:29:91:B8:76:6B:E5:1C:59
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS47952.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.112.93.0/24
Signature Algorithm: sha256WithRSAEncryption
52:a5:88:4d:97:f5:4c:0a:f1:62:8e:3e:02:44:ef:16:a9:5b:
c4:76:1a:c1:d1:59:21:6a:2a:3b:10:dd:1a:21:e1:bf:43:fb:
01:bd:70:7a:18:75:f8:50:cc:74:36:bb:4b:02:4a:90:26:31:
b1:ec:d5:0a:53:94:4a:c5:5a:26:94:2f:8c:0c:a5:62:1b:e1:
2b:83:3e:69:df:e2:52:99:46:63:da:9b:d7:ad:23:2f:81:91:
a8:cd:a1:d0:6f:8b:f2:93:5d:65:ea:3c:39:f0:ad:9b:3e:5a:
bd:19:db:0f:63:c1:8d:0d:70:6b:a7:42:56:37:6e:28:a1:f3:
5f:09:b6:55:b2:4f:8f:24:b6:b1:ea:4a:15:0c:de:e4:1b:7b:
85:fa:3a:96:57:af:37:83:07:53:26:24:d0:ed:8b:57:e6:e9:
b9:fc:01:c4:86:e4:be:a2:70:b2:dd:55:e9:fd:02:aa:b7:1d:
cc:f7:b8:e1:e9:c0:f7:68:93:a1:20:38:72:89:0a:48:00:c0:
4c:3e:a6:6b:78:22:a6:7f:0b:06:4a:31:52:f9:b2:94:73:a6:
25:13:d3:1c:a8:1f:b3:73:ab:16:83:89:7e:4e:38:47:68:ea:
16:5b:bf:14:08:53:04:9b:85:f2:02:05:a2:b6:dc:32:45:fc:
47:ab:76:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:36:26 2026 by rpki-client