Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS47810.roa
File: AS47810.roa (raw, json)
Hash identifier: 3T0iWlAx4vZQ/gGP4M7SPg4O23IABWL6s9o9IciSFJ4=
Subject key identifier: 6D:FC:A1:07:65:B9:CF:12:D4:A3:4C:CF:BB:52:76:DD:75:D5:69:B2
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 0D2F8C189BE8CB94D21D4439319AE76E9D258A77
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS47810.roa
Signing time: Wed 04 Nov 2026 09:49:39 +0000
ROA not before: Wed 04 Nov 2026 09:44:39 +0000
ROA not after: Wed 03 Nov 2027 09:49:39 +0000
asID: 47810
IP address blocks: 181.215.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:49:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:2f:8c:18:9b:e8:cb:94:d2:1d:44:39:31:9a:e7:6e:9d:25:8a:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Nov 4 09:44:39 2026 GMT
Not After : Nov 3 09:49:39 2027 GMT
Subject: CN=6DFCA10765B9CF12D4A34CCFBB5276DD75D569B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f5:d9:d3:07:c9:02:e6:3a:c0:87:ed:44:05:
2f:5b:51:2a:0a:45:88:aa:e9:0e:14:03:95:55:40:
0e:63:ef:61:f6:72:77:0d:40:21:5c:5e:5d:b1:0a:
9c:a1:c0:11:88:e6:e7:3b:d3:49:15:d3:38:c8:6a:
8d:2f:79:b9:6f:11:60:e7:e8:77:ca:cf:1c:be:27:
65:84:8a:ee:18:db:13:e5:41:7f:77:9f:2a:90:2c:
5f:c4:07:9b:72:af:02:8a:6d:68:35:74:ea:f9:5e:
bc:9f:b2:6c:69:3d:b4:d7:90:00:b4:0e:93:cd:b8:
cc:ed:e3:3e:57:ee:44:dc:18:84:50:99:73:d8:33:
0f:d6:c4:92:41:36:bf:6e:8a:d7:d2:8d:45:ed:0f:
90:a8:b1:d9:f5:8f:c0:22:47:30:38:94:6f:49:06:
0d:85:b4:05:65:e6:7c:0c:8e:90:46:0c:8d:a4:87:
2b:f5:5f:6f:a0:a0:f6:2f:29:29:de:6d:4b:6f:57:
2e:d3:04:50:3f:c8:15:b1:ea:22:9a:6f:70:d1:45:
35:b9:b5:8e:c7:f1:f6:6c:e4:e6:fa:b2:54:38:ad:
23:11:74:bc:d8:3f:18:fc:5a:b8:bd:e4:eb:28:97:
90:d6:99:06:58:de:9b:89:37:31:bb:3b:08:bd:5d:
47:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:FC:A1:07:65:B9:CF:12:D4:A3:4C:CF:BB:52:76:DD:75:D5:69:B2
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS47810.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.215.15.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:31:26:c5:db:1f:9d:2c:88:21:67:0b:11:d5:49:77:84:a1:
d8:1b:02:be:d1:81:2a:f0:86:d4:e2:37:7c:f3:b4:42:8a:91:
1b:b2:1b:a8:df:71:f8:de:6a:ea:e3:a4:9f:9e:00:cf:04:32:
ff:70:c6:76:02:26:a6:43:e4:91:de:8a:f8:91:4a:f0:99:6a:
1f:97:0d:da:b1:0c:59:45:b6:7d:24:52:32:11:87:fe:8d:af:
18:ec:a6:2c:9b:38:fe:a9:ed:fe:3b:a7:48:52:13:86:1c:32:
1e:37:a1:18:5d:4a:55:9b:57:9c:2f:84:13:45:12:d3:6d:90:
ba:9d:a7:84:c8:85:65:c1:1c:44:64:56:27:27:d4:a0:7e:81:
05:66:19:a6:bd:f7:9d:d3:d3:eb:e4:23:f1:80:8c:f4:f0:55:
52:30:fb:0d:67:f5:51:c3:0f:a8:32:6b:f8:ed:d3:4b:24:22:
26:62:8f:e6:85:64:12:da:d5:59:7e:f5:1c:ef:e2:15:b7:f3:
94:02:8f:92:95:a5:86:1f:af:2f:bd:21:a3:d8:65:a7:d5:c6:
93:f2:b8:47:e4:a2:78:fa:bf:f9:4b:f4:87:0b:c5:89:db:01:
01:53:fd:07:f8:e6:50:51:d6:4b:93:d8:14:3e:38:64:b9:68:
7f:c3:dc:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 04:28:07 2026 by rpki-client