Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS47272.roa
File: AS47272.roa (raw, json)
Hash identifier: 9oKUDa4lbLVZTadnBZ0ryazyjajGwXUb196cpgBMuGM=
Subject key identifier: C5:45:8C:F8:59:0B:0D:17:4F:AC:4D:C7:7B:8C:5F:3F:E0:B3:08:69
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 25B650F1897AF4C77B24D723D1885559D586413F
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS47272.roa
Signing time: Mon 07 Sep 2026 08:33:23 +0000
ROA not before: Mon 07 Sep 2026 08:28:23 +0000
ROA not after: Mon 06 Sep 2027 08:33:23 +0000
asID: 47272
IP address blocks: 143.20.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:b6:50:f1:89:7a:f4:c7:7b:24:d7:23:d1:88:55:59:d5:86:41:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 7 08:28:23 2026 GMT
Not After : Sep 6 08:33:23 2027 GMT
Subject: CN=C5458CF8590B0D174FAC4DC77B8C5F3FE0B30869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:10:26:54:22:c1:b4:7b:28:53:d2:2e:5f:af:
48:dc:ec:20:7e:65:1d:14:e6:04:1a:78:84:f4:0a:
63:4f:e3:c5:68:d5:83:14:dd:3e:7c:78:d0:fb:fd:
d5:98:b0:2e:93:17:85:b9:18:44:0d:24:44:c7:52:
a2:c7:6a:a8:11:b1:08:7a:f8:9d:af:45:ba:1c:0f:
de:1f:fb:d0:27:cd:65:46:0b:9f:c3:a5:4d:59:6c:
c7:48:8a:08:fc:3c:6f:6f:80:1d:18:81:e5:27:26:
d2:c2:9f:99:09:d4:07:45:ce:da:13:18:d7:fc:cf:
50:bd:46:ce:01:03:0e:57:71:16:70:8f:23:bc:2c:
a2:77:61:19:be:61:77:67:bb:13:e2:b5:57:05:00:
ea:b8:8f:3c:03:f0:3b:f1:66:c8:34:a4:17:43:a7:
cf:5b:a1:e2:1d:1d:bb:48:b6:68:36:e3:de:5e:93:
a2:77:91:8d:5e:bd:1c:10:14:54:e3:4d:fa:7e:45:
c8:85:d0:c8:97:b0:08:08:7b:43:4d:c1:a2:c8:62:
6b:d7:6e:34:33:ba:a9:0a:f2:81:82:e7:b2:de:6e:
03:ab:b7:6b:d2:59:4b:e5:43:64:1d:13:aa:2a:e8:
1d:e0:e6:fb:65:1a:32:21:68:72:67:f1:f9:26:9c:
a7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:45:8C:F8:59:0B:0D:17:4F:AC:4D:C7:7B:8C:5F:3F:E0:B3:08:69
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS47272.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.194.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:9e:91:ee:1e:73:dd:44:e5:85:7c:ea:4f:77:03:ce:54:e2:
9d:75:02:02:2c:ed:d5:2d:b9:89:9e:c7:49:bc:66:f9:13:2a:
7b:8e:a7:9a:ff:90:3c:db:c8:43:18:99:53:84:81:af:05:ca:
d3:1a:0b:d4:11:93:35:dc:25:88:78:8b:f7:05:5f:2e:ad:fe:
a2:1a:0f:15:e1:16:5a:94:c9:1c:19:0f:89:2e:a1:0a:a7:84:
bb:54:a4:57:e6:b8:22:34:d6:66:3f:13:d0:8a:28:7c:95:06:
0a:4d:a3:99:86:58:43:6b:c1:4b:f8:0e:1f:d1:49:e7:af:78:
c7:40:ca:45:0d:dc:f0:58:24:56:20:c0:8a:d9:89:e4:5e:fe:
b4:4c:49:dd:71:3e:93:35:ab:ea:37:8f:96:42:9a:8c:4a:7d:
97:a8:81:8f:00:a4:99:c8:c1:aa:ba:88:ad:39:98:ea:a7:f0:
75:f6:a7:64:01:ad:b0:dc:33:16:69:cf:e6:bd:07:98:b5:7c:
f8:90:a4:5d:7c:2f:15:a8:17:50:19:e5:7b:d3:d5:08:e5:b9:
43:61:93:98:fe:1e:ca:54:b2:a7:76:50:76:b3:50:e7:75:4a:
a5:c2:35:3b:bf:da:4a:56:99:08:8e:77:45:ce:38:10:94:9c:
77:1f:91:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 09:21:26 2026 by rpki-client