Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS47583.roa
File: AS47583.roa (raw, json)
Hash identifier: 2zC6gnZqiOfczF83qiaWxLj+lgLwF8P4DiOdkgPhCMo=
Subject key identifier: 81:CF:19:BE:AC:AB:9C:C5:54:C0:B1:A1:B7:C9:FF:00:82:34:F1:BD
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 43C009773A26BF74A683B14FF223BB02C8A040F7
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS47583.roa
Signing time: Fri 24 Jul 2026 07:49:14 +0000
ROA not before: Fri 24 Jul 2026 07:44:14 +0000
ROA not after: Fri 23 Jul 2027 07:49:14 +0000
asID: 47583
IP address blocks: 145.223.16.0/21 maxlen: 24
145.223.24.0/21 maxlen: 24
145.223.32.0/21 maxlen: 24
145.223.72.0/21 maxlen: 24
145.223.80.0/21 maxlen: 24
145.223.88.0/21 maxlen: 24
145.223.96.0/21 maxlen: 24
145.223.104.0/21 maxlen: 24
145.223.112.0/21 maxlen: 24
145.223.120.0/21 maxlen: 24
147.79.64.0/21 maxlen: 24
147.79.72.0/21 maxlen: 24
147.79.80.0/21 maxlen: 24
147.79.88.0/21 maxlen: 24
147.79.96.0/21 maxlen: 24
147.79.104.0/21 maxlen: 24
147.79.112.0/21 maxlen: 24
147.79.120.0/21 maxlen: 24
148.135.128.0/21 maxlen: 24
148.135.136.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:c0:09:77:3a:26:bf:74:a6:83:b1:4f:f2:23:bb:02:c8:a0:40:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 24 07:44:14 2026 GMT
Not After : Jul 23 07:49:14 2027 GMT
Subject: CN=81CF19BEACAB9CC554C0B1A1B7C9FF008234F1BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5f:91:9c:ab:ae:3b:87:08:bc:db:f0:c7:cc:
da:d2:0b:e0:84:f8:06:2f:88:c9:c9:eb:41:d4:b5:
c7:26:c1:18:57:2b:5e:4d:42:42:38:30:b6:6f:93:
91:e7:9a:c2:2c:a6:ea:3f:2c:e0:ab:5b:84:a3:7a:
45:58:28:e7:a3:6c:71:f0:33:76:46:5f:16:1d:d3:
06:5d:77:e4:e0:99:a3:6d:0b:8c:d3:07:f1:f1:b0:
42:49:ac:a5:57:44:96:26:69:37:4b:8a:b0:55:4c:
60:2f:b8:61:a9:46:cd:70:9f:c4:e9:af:c3:22:9c:
c7:87:3a:31:9f:df:64:fd:a9:ae:09:1f:0a:2b:71:
e4:bf:a9:80:a0:ef:67:30:ee:25:e0:42:a3:7f:73:
35:78:ef:9a:7f:b4:72:f6:05:9d:66:4a:01:a2:98:
40:e8:a7:41:6c:df:75:86:f1:52:13:5e:54:c1:b6:
41:24:2c:4c:59:df:23:4d:49:dc:7f:3c:c3:5f:25:
78:a9:a5:a7:e3:ca:ec:07:fd:c4:be:55:db:df:ff:
16:32:a2:28:0a:52:83:7d:dc:f6:2c:96:61:43:37:
51:4b:eb:93:14:6e:9d:4c:50:b3:b0:bb:52:ab:61:
71:ca:bc:13:78:03:40:23:e6:54:14:90:d4:5f:7a:
a5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:CF:19:BE:AC:AB:9C:C5:54:C0:B1:A1:B7:C9:FF:00:82:34:F1:BD
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS47583.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.223.16.0-145.223.39.255
145.223.72.0-145.223.127.255
147.79.64.0/18
148.135.128.0/20
Signature Algorithm: sha256WithRSAEncryption
3a:4a:17:fe:bc:c7:f5:5a:0c:a2:0b:46:6b:57:17:b6:de:70:
be:00:ee:55:a9:e0:75:88:33:15:11:3f:1c:80:ea:88:32:d8:
2f:70:84:9a:7c:8c:57:b2:53:51:17:ab:e9:c5:54:ed:76:8e:
12:55:19:23:9f:39:e1:bb:24:20:df:9b:fe:55:ca:94:bd:91:
7c:f2:05:4b:2c:ed:ba:39:ea:c0:74:b9:76:71:24:c6:d3:fb:
77:ae:51:67:a0:cf:9e:f6:2f:c8:40:08:03:95:4f:4e:05:09:
dd:19:fd:2c:92:5c:23:10:63:f1:88:0c:97:6e:81:55:48:b4:
f0:1e:61:5e:74:f5:ff:38:5c:56:8b:71:ac:a1:72:4e:b4:38:
c6:ee:42:05:67:f3:1a:23:7f:52:93:77:9e:cd:8e:a1:9a:a1:
5d:22:5f:2d:a5:1c:b0:7c:3b:db:a7:c8:b0:d5:5c:6d:9c:a5:
8f:26:2d:84:d3:0c:65:3d:b6:ab:dc:27:f2:27:a6:4b:4d:48:
04:7e:1b:0b:1e:48:16:96:b6:e1:3a:d9:b3:72:67:6e:9d:ec:
99:09:3a:dc:fd:c4:14:7d:0f:a7:ce:5d:a6:9e:9e:11:71:22:
57:75:f9:18:c9:74:2e:c2:37:56:49:d2:92:f7:29:4f:9c:d6:
6b:1a:83:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:28:12 2026 by rpki-client