Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS47583.roa
File: AS47583.roa (raw, json)
Hash identifier: ZwZCR+oAv9L6Q4yNBHxUD3Gwa6cCjoLI1gFzpVkMb30=
Subject key identifier: 7D:32:85:BD:3E:E9:D6:46:FD:A1:A6:65:36:BD:CA:F7:29:78:71:34
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 585CB1DFE655084E40EDD1770B219DE4EBB7D354
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS47583.roa
Signing time: Thu 03 Sep 2026 11:49:32 +0000
ROA not before: Thu 03 Sep 2026 11:44:32 +0000
ROA not after: Thu 02 Sep 2027 11:49:32 +0000
asID: 47583
IP address blocks: 46.202.88.0/21 maxlen: 24
46.202.128.0/21 maxlen: 24
46.202.136.0/21 maxlen: 24
46.202.144.0/21 maxlen: 24
46.202.152.0/21 maxlen: 24
46.202.160.0/21 maxlen: 24
46.202.168.0/21 maxlen: 24
46.202.176.0/21 maxlen: 24
46.202.184.0/21 maxlen: 24
46.202.192.0/21 maxlen: 24
92.112.176.0/21 maxlen: 24
92.112.184.0/21 maxlen: 24
92.112.192.0/21 maxlen: 24
92.113.16.0/21 maxlen: 24
92.113.24.0/21 maxlen: 24
92.113.32.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:52:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:5c:b1:df:e6:55:08:4e:40:ed:d1:77:0b:21:9d:e4:eb:b7:d3:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 3 11:44:32 2026 GMT
Not After : Sep 2 11:49:32 2027 GMT
Subject: CN=7D3285BD3EE9D646FDA1A66536BDCAF729787134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:38:6b:fd:54:1f:4d:eb:a3:89:d5:21:69:f3:
1c:ad:6c:13:c4:00:b6:fb:d9:ad:c4:64:81:72:02:
a3:e4:6e:08:34:57:80:88:cb:5d:7b:e4:aa:e1:88:
74:ee:f4:81:74:f0:c5:66:a1:ca:6f:7f:32:37:7a:
89:10:6c:ea:99:e2:08:1c:76:b3:22:ce:c4:11:b6:
59:53:be:8e:bc:23:b2:fb:2b:87:e7:59:92:8d:ff:
c6:27:e7:d1:c8:34:dd:3e:86:a3:c5:d7:75:64:35:
f2:43:7f:c3:e8:fd:99:12:11:d1:fa:8e:5b:c1:91:
0f:0f:09:2c:e9:af:ae:4d:33:4f:29:ad:2c:48:a2:
94:bc:87:51:1f:7f:24:5a:5c:56:50:1b:e8:0e:82:
43:a2:a4:95:d9:cf:6c:a0:7a:cc:61:25:02:8b:2e:
88:29:4d:7a:15:e8:de:d3:4e:8d:96:4f:ca:42:e5:
8b:ae:8e:22:f0:45:0b:a0:cf:10:60:01:5f:69:3c:
58:e7:0b:a1:f1:d0:a4:e4:eb:35:5d:67:bd:a9:6f:
2a:47:29:36:83:d2:e0:7f:11:fb:99:61:1e:37:3f:
78:a6:0e:8f:fb:69:c6:c4:e6:8a:4c:a5:ee:31:6f:
c2:cc:c7:90:df:26:2f:53:4c:5c:2f:05:4a:db:ef:
d2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:32:85:BD:3E:E9:D6:46:FD:A1:A6:65:36:BD:CA:F7:29:78:71:34
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS47583.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.88.0/21
46.202.128.0-46.202.199.255
92.112.176.0-92.112.199.255
92.113.16.0-92.113.39.255
Signature Algorithm: sha256WithRSAEncryption
7e:85:4d:92:bc:4e:10:47:ec:76:51:34:92:8a:9f:50:12:85:
51:24:38:00:cd:14:7e:01:97:9b:5a:ab:96:10:cf:75:da:a3:
96:9b:de:74:96:6a:96:89:bf:9e:02:c6:e8:02:59:9c:78:1d:
62:e3:d5:8f:75:ed:ec:a6:32:98:fa:e9:c4:f7:cc:8c:54:cd:
54:0f:87:e9:57:8b:2d:63:89:3c:50:89:cf:81:d8:9d:75:42:
d0:6b:8e:97:ae:a7:e5:1b:f1:3c:18:b7:30:a0:c7:a9:a4:5c:
5e:5b:22:2a:6c:16:36:7e:52:71:74:74:32:2b:94:6f:ba:ea:
57:f0:70:9c:93:d6:f8:4a:78:31:e6:3e:e8:ce:c9:45:14:94:
18:82:fb:9c:d2:a6:e0:c9:17:43:a5:27:db:dc:03:48:60:ef:
b6:b1:cb:fb:e0:e7:1c:fb:22:5d:28:36:27:45:5e:37:b5:98:
6e:d4:1f:fe:c3:9e:2b:34:23:df:ee:3a:2a:ae:55:a6:f7:c5:
36:45:3a:fc:ff:30:ca:f3:e6:47:7f:5a:4a:c0:d6:6b:83:75:
02:48:35:f8:aa:7c:e5:40:aa:00:4c:de:79:d5:dd:ea:13:21:
ba:6f:af:58:33:43:78:cb:34:83:3b:fc:3e:01:8f:98:87:48:
32:a3:11:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:44:54 2026 by rpki-client