Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS51847.roa
File: AS51847.roa (raw, json)
Hash identifier: eRmaliqVT+fgAmwkqZC2Oy0OlnWL5AkKOFStyFmBabk=
Subject key identifier: 14:DD:C0:F5:8C:7D:66:57:46:C7:FD:3E:1F:7C:33:A9:92:B0:B0:9B
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 4DA152607CE0243B89B8329B6E599FDB640EA3F9
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS51847.roa
Signing time: Sun 12 Apr 2026 13:10:05 +0000
ROA not before: Sun 12 Apr 2026 13:05:05 +0000
ROA not after: Sun 11 Apr 2027 13:10:05 +0000
asID: 51847
IP address blocks: 140.233.191.0/24 maxlen: 24
147.79.59.0/24 maxlen: 24
148.135.253.0/24 maxlen: 24
150.241.210.0/23 maxlen: 24
155.117.188.0/24 maxlen: 24
168.222.36.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:a1:52:60:7c:e0:24:3b:89:b8:32:9b:6e:59:9f:db:64:0e:a3:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 12 13:05:05 2026 GMT
Not After : Apr 11 13:10:05 2027 GMT
Subject: CN=14DDC0F58C7D665746C7FD3E1F7C33A992B0B09B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:bb:16:60:e3:38:23:f2:e9:80:69:04:f0:e3:
83:de:c5:71:81:4d:f1:d2:a2:08:b4:4f:98:1e:65:
b0:f6:08:84:0a:b4:ca:f1:86:15:ab:e7:06:9d:b8:
28:56:4d:7a:00:8e:9c:3d:25:5b:6e:00:1f:e4:89:
14:c1:b8:4c:06:b5:c7:4a:e5:64:3d:00:b9:a8:0b:
c8:10:ee:93:70:b1:4a:e1:c1:cf:e1:f8:2c:5f:17:
05:42:1d:c7:ff:a1:da:d8:28:c5:d9:9f:37:90:52:
3f:44:34:e7:ad:08:fb:60:4d:c3:4c:be:03:ce:1d:
37:95:c2:a7:9d:4e:ce:8c:c0:20:32:3b:e2:4b:c1:
0c:c2:f4:67:f8:f9:a9:8f:c6:e1:6f:ef:45:a7:bf:
a8:7a:d1:05:6a:1e:53:8d:0d:14:e1:82:7f:30:79:
d8:99:c4:1e:6a:6a:e6:c0:38:5b:01:d6:92:49:c1:
3b:06:28:b6:5d:01:c7:e1:5a:b6:96:ff:d2:9e:79:
a2:7a:c6:b6:16:94:4c:cc:e0:e1:a6:8a:0d:2f:22:
96:56:b0:e3:bb:34:ae:82:2e:1c:11:8c:4e:52:49:
98:bc:c0:4a:2d:21:f1:88:dd:0d:d6:2b:0e:2d:fa:
15:49:bd:22:ee:ea:3f:10:d8:06:df:4d:84:2f:a6:
b9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:DD:C0:F5:8C:7D:66:57:46:C7:FD:3E:1F:7C:33:A9:92:B0:B0:9B
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS51847.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.191.0/24
147.79.59.0/24
148.135.253.0/24
150.241.210.0/23
155.117.188.0/24
168.222.36.0/23
Signature Algorithm: sha256WithRSAEncryption
67:bc:03:ef:87:c9:17:54:54:e5:d4:d4:1c:f2:a3:2c:cb:16:
98:2c:71:97:b1:86:cb:93:cb:c1:74:03:19:b3:13:45:26:c7:
34:d5:49:93:10:92:1f:e5:54:ee:db:c6:49:4f:f0:70:3d:56:
ee:ec:ee:8a:0b:b2:99:69:d0:11:77:c1:5d:f1:20:37:86:cc:
97:d5:8a:a1:9a:75:5f:72:8c:70:8a:50:b0:fc:e0:2e:31:ba:
5d:22:52:83:aa:24:d0:6f:c9:ea:b6:43:2b:5d:17:8a:eb:a4:
cc:cd:4f:c3:27:51:9f:74:ed:15:9a:0d:f8:9b:3c:5a:f7:00:
e1:6a:90:06:e6:ad:25:aa:5c:6d:88:bf:2e:28:af:3d:f3:e0:
3b:de:50:0d:5b:e1:08:77:5e:4a:95:b8:bd:1a:d7:24:f4:2c:
5d:05:a3:8d:a7:f5:7b:f3:e7:d0:ee:4b:c4:b9:37:b0:85:71:
e8:83:dd:e9:cc:6f:aa:e0:a5:2b:22:2e:19:57:53:bd:1f:b2:
ea:f7:1a:77:65:3e:f4:a5:94:94:a0:7a:58:b7:07:2c:58:53:
51:f3:c1:e3:da:86:78:a9:99:07:65:1d:66:9c:33:b6:8a:97:
1f:84:08:5f:89:d9:38:ed:4d:80:52:06:94:46:e9:ae:d9:0b:
6e:16:c8:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:07:08 2026 by rpki-client