Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS47692.roa
File: AS47692.roa (raw, json)
Hash identifier: smfRrMm2VOwHce5KwpZ1EsZlZJAAPgcy4BTtjdYZYbY=
Subject key identifier: 35:CD:2A:A8:F1:48:50:57:42:A5:23:32:0B:59:C3:3E:74:B0:C2:1C
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 722EE8F5C3201B456CD650F78FEB436105F13226
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS47692.roa
Signing time: Tue 08 Sep 2026 14:49:33 +0000
ROA not before: Tue 08 Sep 2026 14:44:33 +0000
ROA not after: Tue 07 Sep 2027 14:49:33 +0000
asID: 47692
IP address blocks: 46.202.252.0/24 maxlen: 24
46.203.19.0/24 maxlen: 24
46.203.59.0/24 maxlen: 24
46.203.88.0/24 maxlen: 24
46.203.96.0/24 maxlen: 24
46.203.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:2e:e8:f5:c3:20:1b:45:6c:d6:50:f7:8f:eb:43:61:05:f1:32:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 8 14:44:33 2026 GMT
Not After : Sep 7 14:49:33 2027 GMT
Subject: CN=35CD2AA8F148505742A523320B59C33E74B0C21C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f2:c1:5e:5f:e4:5c:f1:51:23:69:ef:ef:09:
d4:9a:aa:a4:cb:da:50:25:16:0c:56:9a:53:4a:4a:
13:4e:1c:fe:fe:0d:b5:16:12:d1:f2:a6:27:b9:b3:
81:4c:37:d9:ad:d6:7b:41:52:0c:91:83:5e:fa:30:
4a:fc:0a:83:c0:5f:c5:67:02:f6:5e:f2:8d:bc:e1:
4e:c3:5a:3d:37:76:1c:3d:1f:0a:f0:49:9b:32:38:
72:78:fe:48:d1:92:99:84:35:f0:f9:b3:5f:ad:8b:
78:a6:88:2d:1b:9f:fe:40:b3:04:b0:85:3a:e3:a1:
9c:4e:55:87:f1:b6:4d:9f:7c:cb:62:73:8d:e6:28:
16:59:6f:f6:23:73:a7:6a:c0:4c:f5:46:86:4d:88:
da:88:a9:72:4f:ff:0d:87:c9:d0:4a:18:46:7a:d1:
cc:6f:17:5d:81:3c:ca:3c:ed:d4:48:50:45:4c:af:
3a:62:cd:07:e9:58:b1:e9:f8:13:01:ef:7e:eb:fe:
86:48:21:a6:05:5e:97:9e:51:1b:75:8d:24:52:64:
0c:77:5c:7c:d9:d0:b5:69:9d:fa:72:10:b0:5a:2d:
af:67:df:32:d2:14:71:4f:df:41:69:18:3a:6a:2c:
21:d2:38:4a:d6:e2:43:e4:c5:ff:1a:db:2c:1a:a6:
e9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:CD:2A:A8:F1:48:50:57:42:A5:23:32:0B:59:C3:3E:74:B0:C2:1C
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS47692.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.252.0/24
46.203.19.0/24
46.203.59.0/24
46.203.88.0/24
46.203.96.0/24
46.203.134.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:35:6e:dd:e7:c7:86:3d:78:bb:12:ec:18:1d:3e:e0:22:97:
8d:c3:54:cf:a1:8c:15:94:77:16:eb:b7:75:3f:95:63:b3:c3:
ea:50:58:ea:b9:9a:09:a5:0c:c9:a7:03:4a:32:e0:82:47:9d:
38:42:19:ff:0c:dd:2d:62:c7:67:e0:07:3d:20:cd:e4:06:c3:
23:bf:cd:a4:39:05:92:63:ad:33:22:96:53:17:ce:1c:06:7a:
ab:ca:4c:c0:b1:a2:e5:f4:5f:02:f9:8b:7b:04:82:3f:92:59:
ef:88:70:d6:f1:b0:f4:34:1e:38:34:06:5a:06:31:17:e9:ca:
54:fa:fe:b2:0e:58:6b:0a:d8:9c:8f:24:01:b8:35:f0:b6:d3:
59:81:91:fb:46:06:6f:14:c6:7b:19:33:0d:48:2b:05:8a:4f:
d3:01:d4:3e:eb:06:0d:36:27:94:fb:4c:8a:d5:f1:b9:1c:2a:
a0:c7:a7:cd:77:ac:78:3d:9b:9e:de:86:75:44:78:90:6d:26:
6c:2f:33:75:ed:0a:80:df:ec:59:3f:57:92:d1:b6:1f:b1:a6:
25:12:4b:b7:8b:8f:8b:07:86:65:ee:2e:0e:e8:6d:8d:88:66:
97:ea:c5:73:ae:a7:1b:3c:b9:46:dc:9d:be:a6:9c:7f:5f:57:
d7:3e:44:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:35:12 2026 by rpki-client