Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS47583.roa
File: AS47583.roa (raw, json)
Hash identifier: 2s5dLx0yvheyUTXQpSdKu3DIxWksZXr1DzEMiGzgF9Q=
Subject key identifier: B9:71:10:2E:40:3D:F1:28:94:82:DC:FB:C0:4C:8C:48:03:3B:EB:0F
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 38FF963791D7B846799F0B87943F65E8294626C6
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS47583.roa
Signing time: Wed 15 Apr 2026 09:47:05 +0000
ROA not before: Wed 15 Apr 2026 09:42:05 +0000
ROA not after: Wed 14 Apr 2027 09:47:05 +0000
asID: 47583
IP address blocks: 5.252.75.0/24 maxlen: 24
45.133.178.0/24 maxlen: 24
45.137.158.0/24 maxlen: 24
45.137.159.0/24 maxlen: 24
92.242.187.0/24 maxlen: 24
179.61.188.0/24 maxlen: 24
179.61.189.0/24 maxlen: 24
179.61.219.0/24 maxlen: 24
179.61.246.0/24 maxlen: 24
181.215.68.0/23 maxlen: 24
181.215.78.0/23 maxlen: 24
181.215.134.0/23 maxlen: 24
185.137.92.0/24 maxlen: 24
185.139.1.0/24 maxlen: 24
185.139.2.0/24 maxlen: 24
185.145.38.0/24 maxlen: 24
185.158.107.0/24 maxlen: 24
185.158.132.0/24 maxlen: 24
185.170.58.0/24 maxlen: 24
185.172.57.0/24 maxlen: 24
191.96.1.0/24 maxlen: 24
191.96.31.0/24 maxlen: 24
191.96.53.0/24 maxlen: 24
191.96.54.0/24 maxlen: 24
191.96.56.0/24 maxlen: 24
191.96.57.0/24 maxlen: 24
191.96.63.0/24 maxlen: 24
191.96.144.0/24 maxlen: 24
191.96.159.0/24 maxlen: 24
191.96.234.0/24 maxlen: 24
191.96.244.0/24 maxlen: 24
191.96.251.0/24 maxlen: 24
191.101.0.0/24 maxlen: 24
191.101.1.0/24 maxlen: 24
191.101.2.0/24 maxlen: 24
191.101.3.0/24 maxlen: 24
191.101.12.0/22 maxlen: 24
191.101.18.0/24 maxlen: 24
191.101.32.0/24 maxlen: 24
191.101.70.0/23 maxlen: 24
191.101.78.0/23 maxlen: 24
191.101.80.0/23 maxlen: 24
191.101.104.0/24 maxlen: 24
191.101.228.0/22 maxlen: 24
191.101.232.0/22 maxlen: 24
193.58.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 15:58:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:ff:96:37:91:d7:b8:46:79:9f:0b:87:94:3f:65:e8:29:46:26:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Apr 15 09:42:05 2026 GMT
Not After : Apr 14 09:47:05 2027 GMT
Subject: CN=B971102E403DF1289482DCFBC04C8C48033BEB0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:65:d4:86:47:f4:75:57:52:d9:1a:44:17:a7:
9a:6c:62:ab:e5:59:9e:1c:2a:10:b3:5b:12:7c:c5:
e8:8e:21:2e:7f:b7:6d:10:fa:4c:ab:c9:2f:f4:ba:
e2:a6:9d:63:a2:e9:01:e9:39:20:99:5e:3e:24:a1:
c1:5a:4c:eb:88:62:06:91:20:4f:8b:76:db:73:2e:
dd:4c:16:88:d0:5e:4f:6a:6b:09:a0:b6:7c:20:21:
d1:c6:32:ff:d1:1b:40:9d:2d:f4:ec:d9:06:2f:ba:
2f:84:15:21:73:7b:3d:55:55:a4:35:95:82:e2:e6:
0b:3f:69:47:cd:f4:44:95:00:a2:fd:e2:95:75:d5:
d2:cd:e4:64:a6:bb:d9:5f:b3:8e:0d:77:ff:b2:af:
6d:e2:0e:e7:08:55:06:35:be:a9:55:62:c3:58:82:
cc:71:01:f0:f8:7a:00:c9:45:5e:a0:b7:45:dc:8e:
96:6b:fe:4f:49:e5:49:4b:40:e8:d5:70:19:63:36:
4b:92:c2:34:fa:77:97:39:ab:e0:50:8d:08:92:b4:
57:75:6d:e0:fa:bf:68:a2:12:53:60:7b:d0:36:a7:
01:99:5f:bb:a5:ee:19:9b:a1:25:e3:43:7d:da:6f:
de:c6:1f:d8:a6:7a:56:74:1b:23:41:f8:96:66:b2:
3a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:71:10:2E:40:3D:F1:28:94:82:DC:FB:C0:4C:8C:48:03:3B:EB:0F
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS47583.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.75.0/24
45.133.178.0/24
45.137.158.0/23
92.242.187.0/24
179.61.188.0/23
179.61.219.0/24
179.61.246.0/24
181.215.68.0/23
181.215.78.0/23
181.215.134.0/23
185.137.92.0/24
185.139.1.0-185.139.2.255
185.145.38.0/24
185.158.107.0/24
185.158.132.0/24
185.170.58.0/24
185.172.57.0/24
191.96.1.0/24
191.96.31.0/24
191.96.53.0-191.96.54.255
191.96.56.0/23
191.96.63.0/24
191.96.144.0/24
191.96.159.0/24
191.96.234.0/24
191.96.244.0/24
191.96.251.0/24
191.101.0.0/22
191.101.12.0/22
191.101.18.0/24
191.101.32.0/24
191.101.70.0/23
191.101.78.0-191.101.81.255
191.101.104.0/24
191.101.228.0-191.101.235.255
193.58.105.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:68:f7:58:b8:00:2e:3f:8e:37:09:e6:9a:69:43:de:8b:21:
9a:2e:0e:f4:d3:82:36:7f:a1:b3:44:7d:84:e6:de:60:75:0f:
ae:8f:67:0b:1b:4e:56:60:cc:75:01:09:a8:a9:36:8b:a6:25:
50:6d:87:c7:d9:d6:89:1c:94:ce:df:38:6e:25:c5:e7:44:b7:
29:13:38:0b:e9:d8:3b:6a:bf:48:f8:fc:01:cc:f9:bd:8d:1a:
2e:82:b3:27:a9:22:35:e2:4b:13:fa:c0:39:55:57:11:17:c4:
58:01:36:06:27:46:56:b4:85:ad:b3:d8:f1:07:55:a4:44:3d:
ca:3e:dd:06:be:00:e8:b0:c7:a0:a3:06:d0:5e:36:cb:35:ce:
ed:01:4a:c6:50:40:fb:34:a0:72:fe:0a:96:5a:ec:6d:43:ba:
b1:ac:02:51:ff:5a:15:76:77:b7:d8:6a:ca:6b:b7:ea:64:7a:
86:78:37:71:09:0c:8c:ea:90:9b:ab:f4:1c:e6:77:12:5d:3e:
bb:c8:8c:52:39:3f:7d:19:e0:47:78:6f:e7:88:3f:6f:0a:1f:
e8:0f:0a:0f:51:82:53:91:70:36:a2:b7:f4:8e:e6:5f:0d:97:
7f:c0:17:06:53:4c:04:db:93:56:03:7c:99:63:5f:4e:69:b7:
f6:cb:3b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:39:42 2026 by rpki-client