Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS47952.roa
File: AS47952.roa (raw, json)
Hash identifier: +UEtullWaZ3mf8ySF7nb/jhRikGO4Aa1WXBu0M5+F1g=
Subject key identifier: 1F:74:CC:38:59:1D:1B:DF:33:F8:4C:2C:F0:39:32:40:64:4B:06:3D
Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial: 026558F7849E2BB120EC494EA1A71EA0E9A5C35E
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS47952.roa
Signing time: Fri 05 Jun 2026 01:10:57 +0000
ROA not before: Fri 05 Jun 2026 01:05:57 +0000
ROA not after: Fri 04 Jun 2027 01:10:57 +0000
asID: 47952
IP address blocks: 81.90.176.0/24 maxlen: 24
81.90.177.0/24 maxlen: 24
81.90.178.0/24 maxlen: 24
81.90.179.0/24 maxlen: 24
194.56.184.0/24 maxlen: 24
194.56.185.0/24 maxlen: 24
194.56.186.0/24 maxlen: 24
194.56.187.0/24 maxlen: 24
212.103.36.0/22 maxlen: 24
212.103.36.0/24 maxlen: 24
212.103.37.0/24 maxlen: 24
212.103.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:65:58:f7:84:9e:2b:b1:20:ec:49:4e:a1:a7:1e:a0:e9:a5:c3:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Validity
Not Before: Jun 5 01:05:57 2026 GMT
Not After : Jun 4 01:10:57 2027 GMT
Subject: CN=1F74CC38591D1BDF33F84C2CF0393240644B063D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:a3:b9:e3:be:80:b8:b8:e7:9a:7a:b4:30:de:
5f:2f:3e:fd:91:ef:51:9c:d2:24:44:da:4b:41:59:
e6:45:e7:14:f6:b6:ec:68:20:50:b6:61:28:5c:25:
68:a7:2d:83:6a:a2:89:0a:e8:b9:95:16:2e:3a:8c:
a1:c5:f2:d7:e1:23:b5:aa:ff:62:b3:45:5d:66:0c:
17:9f:06:29:fb:29:75:29:bd:8f:14:26:61:75:3a:
34:bf:e0:bd:85:20:fa:e6:76:92:90:e6:14:15:e9:
23:69:66:cc:82:58:d3:64:a1:c7:9d:07:68:15:64:
42:89:d6:fa:d2:45:41:fd:da:8a:6f:3f:1c:78:39:
c5:e3:d0:e2:ed:cd:5b:8c:70:f8:e4:ad:53:a1:7b:
f4:17:6e:be:1e:63:b7:d1:49:89:95:3c:e6:d7:e1:
cc:e1:23:22:95:a8:e0:cd:ca:ae:d0:e4:5e:14:53:
b4:c8:91:6f:e1:2e:0f:75:72:d0:22:4a:59:fc:af:
58:3f:5e:21:e8:ad:5d:b5:b2:5c:d8:94:51:d9:98:
03:99:1f:05:0e:fe:f1:53:e8:c3:11:a6:bd:8d:e8:
60:e3:9d:05:2d:57:f7:43:70:40:7a:cd:ec:13:2d:
05:7b:78:b0:7d:44:f7:6a:a7:20:3e:5f:86:75:55:
9b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:74:CC:38:59:1D:1B:DF:33:F8:4C:2C:F0:39:32:40:64:4B:06:3D
X509v3 Authority Key Identifier:
keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS47952.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.90.176.0/22
194.56.184.0/22
212.103.36.0/22
Signature Algorithm: sha256WithRSAEncryption
cb:ea:9d:04:d2:90:60:f5:9b:07:c3:18:82:0c:5b:f3:b2:c5:
8e:ab:6c:35:a5:bd:3d:16:f9:00:58:e7:aa:13:65:f3:db:5e:
94:70:47:98:eb:8e:fa:48:33:49:8a:93:03:11:d8:59:c8:8c:
fb:1f:b1:dc:04:57:a8:61:ae:52:78:81:4a:60:8a:92:09:ac:
9b:31:04:0f:12:24:55:2c:b0:0d:7b:96:2d:e9:14:ab:77:de:
5d:28:0e:37:93:e5:76:b5:1f:c4:f7:c1:38:62:97:93:25:5f:
6d:da:94:4e:8b:c6:61:0f:f8:20:5a:6a:1d:c4:24:d7:62:2c:
06:2e:10:8d:17:60:2b:ea:d6:c6:96:27:e7:bb:a0:30:74:15:
96:fd:29:c4:4c:67:4c:6a:11:0a:da:e6:28:10:0d:e5:0c:d3:
78:6d:ed:7c:12:3f:6d:58:ea:5b:3a:f8:81:58:66:5d:99:2b:
0a:f0:d8:88:d5:28:e8:82:fc:19:6d:8d:af:48:59:b2:48:01:
c4:7c:5d:a8:2d:ff:08:78:93:a2:20:66:9c:4c:ba:26:12:b5:
42:e0:18:7f:a1:ed:32:1c:da:14:2f:84:c7:af:92:02:57:9e:
df:42:89:8f:cf:d2:4c:2d:e4:0f:f3:b0:55:9e:20:3e:e2:ad:
1f:23:8b:69
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIUAmVY94SeK7Eg7ElOoaceoOmlw14wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWRmYmZmMjE3MTA1ZGY4ODc3ZDQ2M2Y2ZTliYWMyOGE0
MDg0ZDIwYzAeFw0yNjA2MDUwMTA1NTdaFw0yNzA2MDQwMTEwNTdaMDMxMTAvBgNV
BAMTKDFGNzRDQzM4NTkxRDFCREYzM0Y4NEMyQ0YwMzkzMjQwNjQ0QjA2M0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvo7njvoC4uOeaerQw3l8vPv2R
71Gc0iRE2ktBWeZF5xT2tuxoIFC2YShcJWinLYNqookK6LmVFi46jKHF8tfhI7Wq
/2KzRV1mDBefBin7KXUpvY8UJmF1OjS/4L2FIPrmdpKQ5hQV6SNpZsyCWNNkoced
B2gVZEKJ1vrSRUH92opvPxx4OcXj0OLtzVuMcPjkrVOhe/QXbr4eY7fRSYmVPObX
4czhIyKVqODNyq7Q5F4UU7TIkW/hLg91ctAiSln8r1g/XiHorV21slzYlFHZmAOZ
HwUO/vFT6MMRpr2N6GDjnQUtV/dDcEB6zewTLQV7eLB9RPdqpyA+X4Z1VZsvAgMB
AAGjggIVMIICETAdBgNVHQ4EFgQUH3TMOFkdG98z+Ews8DkyQGRLBj0wHwYDVR0j
BBgwFoAUnfv/IXEF34h31GP26brCikCE0gwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTViNGQ5ZTgtNDExMS00Mzk0LWEzYTYtYmQ4MjUxZTdm
YmJkLzAvOURGQkZGMjE3MTA1REY4ODc3RDQ2M0Y2RTlCQUMyOEE0MDg0RDIwQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25mdl9JWEVGMzRoMzFHUDI2YnJDaWtD
RTBndy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzU1YjRkOWU4LTQxMTEt
NDM5NC1hM2E2LWJkODI1MWU3ZmJiZC8wL0FTNDc5NTIucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBAJRWrAD
BALCOLgDBALUZyQwDQYJKoZIhvcNAQELBQADggEBAMvqnQTSkGD1mwfDGIIMW/Oy
xY6rbDWlvT0W+QBY56oTZfPbXpRwR5jrjvpIM0mKkwMR2FnIjPsfsdwEV6hhrlJ4
gUpgipIJrJsxBA8SJFUssA17li3pFKt33l0oDjeT5Xa1H8T3wThil5MlX23alE6L
xmEP+CBaah3EJNdiLAYuEI0XYCvq1saWJ+e7oDB0FZb9KcRMZ0xqEQra5igQDeUM
03ht7XwSP21Y6ls6+IFYZl2ZKwrw2IjVKOiC/Bltja9IWbJIAcR8Xagt/wh4k6Ig
ZpxMuiYStULgGH+h7TIc2hQvhMevkgJXnt9CiY/P0kwt5A/zsFWeID7irR8ji2k=
-----END CERTIFICATE-----
Generated at Sat Jun 13 11:13:03 2026 by rpki-client