Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS51847.roa
File: AS51847.roa (raw, json)
Hash identifier: lK8lNRhfZofafiXZRsnqBZ0IHKp2AdabpjhWEyTGfXs=
Subject key identifier: 23:EE:40:45:B0:FD:FF:82:BD:F1:BE:17:A9:33:53:44:75:2C:40:4D
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 75D2914716D7E6E8D476977D978E233CC95490F8
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS51847.roa
Signing time: Wed 10 Jun 2026 13:39:49 +0000
ROA not before: Wed 10 Jun 2026 13:34:49 +0000
ROA not after: Wed 09 Jun 2027 13:39:49 +0000
asID: 51847
IP address blocks: 141.11.22.0/24 maxlen: 24
141.11.212.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:d2:91:47:16:d7:e6:e8:d4:76:97:7d:97:8e:23:3c:c9:54:90:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jun 10 13:34:49 2026 GMT
Not After : Jun 9 13:39:49 2027 GMT
Subject: CN=23EE4045B0FDFF82BDF1BE17A9335344752C404D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4c:db:de:e6:84:80:7c:5f:ec:20:5e:fe:55:
36:36:21:e7:ed:c1:d8:03:5e:86:cd:d4:7d:1f:b6:
fa:2d:b0:1a:13:20:a2:f9:3d:5e:b2:2d:ac:fe:6d:
03:8a:22:a0:0b:d2:6e:dc:1c:e4:c7:07:f3:1b:29:
6b:5c:5a:2b:ff:63:ca:de:2e:38:28:8d:af:fa:50:
56:df:c3:10:cd:fd:b9:f6:c8:2f:03:24:c7:56:38:
1a:bf:2b:a9:9f:76:07:a3:dd:15:1f:59:70:df:f4:
ac:c4:90:74:6d:2d:ec:9e:58:53:92:d9:87:dc:a6:
2b:a9:a3:cc:42:fb:ec:f6:fb:72:65:a3:68:a3:74:
c9:b1:4c:cf:3d:00:9d:7a:a5:00:1a:65:7a:a3:3b:
62:7a:d0:b3:ea:18:8f:ee:d6:85:58:2b:98:f0:54:
22:48:40:4b:52:c9:e2:2b:59:13:ef:97:95:22:f8:
42:2f:ad:30:87:52:5a:9a:c7:01:9d:e8:69:27:57:
b5:20:21:01:aa:ed:fc:9c:15:1a:77:8a:75:e2:a3:
68:f0:46:8c:87:fc:6f:93:b6:a5:ac:ca:ee:a9:9d:
cb:43:20:49:25:d1:06:07:ff:74:60:85:f0:1e:46:
f3:c9:a0:cf:aa:6f:3a:7a:37:53:36:0e:11:10:86:
8a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:EE:40:45:B0:FD:FF:82:BD:F1:BE:17:A9:33:53:44:75:2C:40:4D
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS51847.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.22.0/24
141.11.212.0/23
Signature Algorithm: sha256WithRSAEncryption
d2:2f:b1:4e:9f:15:19:2b:da:1f:76:07:bb:50:28:10:d5:c3:
64:02:45:b0:95:94:e2:5b:4c:34:e3:c4:7b:80:81:1c:4c:d0:
34:92:79:f3:d7:8d:35:0f:94:33:87:a6:cb:1f:e7:66:81:1c:
43:67:a1:c8:9a:f3:ea:6b:04:16:d8:af:e5:a2:68:04:86:49:
69:48:3d:02:ed:74:7a:b7:80:7d:c1:55:54:18:5d:b3:50:94:
2c:84:fd:17:49:10:d0:69:4e:a1:98:3e:c5:c4:f5:2d:9c:b0:
b8:13:29:17:6d:d8:ef:2d:f8:a4:53:dd:32:b7:85:f5:39:2f:
83:0b:eb:74:e6:54:ec:a5:fe:fe:9a:80:38:cb:b3:b4:53:4b:
ff:15:0d:a3:69:78:74:2b:0e:6c:32:b3:e1:04:e1:23:ad:6f:
29:da:8f:90:1e:17:b9:a3:e6:9f:03:02:7d:45:03:2b:b5:f6:
f8:1a:c3:b5:92:72:65:95:c8:a4:1f:0b:48:ec:37:fe:70:b3:
28:21:90:7f:84:f0:25:c2:3b:ab:53:65:1e:93:ed:15:09:77:
fd:91:20:e7:b9:2e:e6:dc:ba:3c:e0:1f:c6:c2:da:30:b0:c1:
d2:8d:fb:76:83:03:8c:e8:a3:de:49:f7:ac:f1:01:b2:d5:c3:
0d:e3:18:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:40:50 2026 by rpki-client