Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS47377.roa
File: AS47377.roa (raw, json)
Hash identifier: 14s8D7i21nCujbmz5yivAfI8/OtJtaxfXgn5WhNi6hE=
Subject key identifier: 6E:6D:11:BC:55:34:9F:9F:03:14:06:7B:75:E7:39:2C:81:2D:11:9E
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 46E52CE3E008A3FF7C8EB64EBBA4EFDB0240E135
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS47377.roa
Signing time: Wed 16 Sep 2026 07:25:22 +0000
ROA not before: Wed 16 Sep 2026 07:20:22 +0000
ROA not after: Wed 15 Sep 2027 07:25:22 +0000
asID: 47377
IP address blocks: 212.74.44.0/24 maxlen: 24
212.74.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 21:12:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:e5:2c:e3:e0:08:a3:ff:7c:8e:b6:4e:bb:a4:ef:db:02:40:e1:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Sep 16 07:20:22 2026 GMT
Not After : Sep 15 07:25:22 2027 GMT
Subject: CN=6E6D11BC55349F9F0314067B75E7392C812D119E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6c:76:e7:42:3b:08:34:4e:73:17:28:a6:93:
77:a8:7c:a6:69:e6:67:1a:3e:94:c0:24:ec:c7:64:
6b:a4:43:05:13:c3:5f:bd:fd:d8:5b:dd:7d:6b:24:
4f:a9:c2:66:78:3c:40:be:f0:92:c2:8f:60:15:38:
37:42:0a:84:26:6e:38:a1:d7:69:9b:ae:e3:5f:59:
40:5e:b4:8a:94:69:fb:c5:d7:47:17:21:5c:1e:ad:
df:d0:3b:bc:1d:52:1b:00:c0:d0:e1:87:d4:4a:aa:
c4:1a:2a:40:c0:56:2b:e0:96:56:8c:58:5b:84:69:
e7:a6:ad:19:f4:45:4a:ee:45:38:be:24:de:09:41:
b6:25:cd:6c:a5:3b:ce:f5:9d:4f:88:a2:a0:aa:9b:
e1:19:db:8a:91:11:04:4f:21:73:f3:eb:74:17:0b:
f5:a2:70:59:e5:a9:2c:6a:62:9f:b7:83:23:b0:18:
0b:ef:ea:06:87:d1:fc:0f:d4:3e:ae:79:1c:fc:0e:
b1:28:bf:61:b5:9e:5d:9c:6e:be:f1:6e:5f:68:81:
c6:f8:62:cd:c2:ba:3b:96:89:a9:d7:1b:3c:09:69:
ae:b5:cd:0c:45:0f:d5:10:d9:fb:f7:f3:01:7b:03:
ca:7d:1b:63:0b:27:06:ff:03:61:3a:ba:3e:e1:81:
32:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:6D:11:BC:55:34:9F:9F:03:14:06:7B:75:E7:39:2C:81:2D:11:9E
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/AS47377.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.74.44.0/23
Signature Algorithm: sha256WithRSAEncryption
69:51:1c:7e:6d:7e:76:06:8a:51:76:e2:9e:09:43:ca:ca:18:
62:47:60:3f:b1:47:2b:bc:4d:65:04:a6:c6:77:41:82:4f:12:
fe:64:26:11:e2:0a:52:28:90:20:6c:be:02:67:df:01:d9:6e:
66:ff:fb:36:5f:0b:b5:1b:43:83:20:7c:84:e1:0e:87:54:8a:
7e:e9:6f:5e:11:34:4f:6b:ef:a1:7f:3d:30:dc:20:06:b7:74:
dc:44:3a:54:25:cd:21:d8:17:08:6b:1c:db:64:bb:4b:e9:4d:
10:9d:f6:15:e9:aa:65:ed:54:11:ed:2d:06:21:27:e0:49:18:
09:e2:8b:05:67:b9:df:ce:84:a2:37:27:22:19:85:fe:fc:f5:
2c:8b:94:c8:7b:d2:43:67:1b:98:72:52:5f:95:09:68:72:7f:
6c:26:d1:08:0b:03:ac:ac:52:48:16:a4:9c:9d:c5:d8:38:e2:
1c:10:03:fa:00:a2:c9:4d:f1:3e:fa:ad:60:ef:d8:32:0a:ff:
2f:a1:e8:af:1b:3b:04:aa:58:83:96:74:79:da:d8:2a:33:ee:
37:f6:ab:46:e3:30:6d:30:0a:5e:50:ac:c6:6c:6f:72:26:75:
ad:fd:e8:f8:23:6f:31:76:8d:ea:e1:b0:2e:58:6b:c1:3e:34:
53:76:71:71
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIURuUs4+AIo/98jrZOu6Tv2wJA4TUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1
NGFmZGU3NjAeFw0yNjA5MTYwNzIwMjJaFw0yNzA5MTUwNzI1MjJaMDMxMTAvBgNV
BAMTKDZFNkQxMUJDNTUzNDlGOUYwMzE0MDY3Qjc1RTczOTJDODEyRDExOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1bHbnQjsINE5zFyimk3eofKZp
5mcaPpTAJOzHZGukQwUTw1+9/dhb3X1rJE+pwmZ4PEC+8JLCj2AVODdCCoQmbjih
12mbruNfWUBetIqUafvF10cXIVwerd/QO7wdUhsAwNDhh9RKqsQaKkDAVivgllaM
WFuEaeemrRn0RUruRTi+JN4JQbYlzWylO871nU+IoqCqm+EZ24qREQRPIXPz63QX
C/WicFnlqSxqYp+3gyOwGAvv6gaH0fwP1D6ueRz8DrEov2G1nl2cbr7xbl9ogcb4
Ys3CujuWianXGzwJaa61zQxFD9UQ2fv38wF7A8p9G2MLJwb/A2E6uj7hgTKXAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUbm0RvFU0n58DFAZ7dec5LIEtEZ4wHwYDVR0j
BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh
NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT
djNuWS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzBkODU0Yzc3LWZkOGIt
NDI1YS1iZDU1LTgyZTFkN2ZhYTc4Mi8wL0FTNDczNzcucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHUSiww
DQYJKoZIhvcNAQELBQADggEBAGlRHH5tfnYGilF24p4JQ8rKGGJHYD+xRyu8TWUE
psZ3QYJPEv5kJhHiClIokCBsvgJn3wHZbmb/+zZfC7UbQ4MgfIThDodUin7pb14R
NE9r76F/PTDcIAa3dNxEOlQlzSHYFwhrHNtku0vpTRCd9hXpqmXtVBHtLQYhJ+BJ
GAniiwVnud/OhKI3JyIZhf789SyLlMh70kNnG5hyUl+VCWhyf2wm0QgLA6ysUkgW
pJydxdg44hwQA/oAoslN8T76rWDv2DIK/y+h6K8bOwSqWIOWdHna2Coz7jf2q0bj
MG0wCl5QrMZsb3Imda396PgjbzF2jerhsC5Ya8E+NFN2cXE=
-----END CERTIFICATE-----
Generated at Mon Sep 21 08:27:17 2026 by rpki-client