Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS44547.roa
File: AS44547.roa (raw, json)
Hash identifier: QjEwaN+bBFQAj8UrZuu3lDBNB3jc9blvYTSG29ytxI4=
Subject key identifier: B1:61:DD:0D:91:B3:2B:59:96:E8:E1:D8:13:75:52:1C:B2:49:CC:D9
Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial: 23CBE6D658D2C2311E0C14DAFCFAB4AEBD65676E
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS44547.roa
Signing time: Wed 29 Apr 2026 09:58:45 +0000
ROA not before: Wed 29 Apr 2026 09:53:45 +0000
ROA not after: Wed 28 Apr 2027 09:58:45 +0000
asID: 44547
IP address blocks: 37.221.76.0/24 maxlen: 24
37.221.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:cb:e6:d6:58:d2:c2:31:1e:0c:14:da:fc:fa:b4:ae:bd:65:67:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Validity
Not Before: Apr 29 09:53:45 2026 GMT
Not After : Apr 28 09:58:45 2027 GMT
Subject: CN=B161DD0D91B32B5996E8E1D81375521CB249CCD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:05:63:2d:95:9b:0c:4f:59:7a:02:55:dd:0a:
cb:78:0c:29:35:77:e6:55:60:31:d3:09:e7:85:37:
78:df:f7:a4:e8:f6:46:0c:74:82:9d:61:ae:76:74:
03:ce:2a:bb:24:ac:7f:03:b3:dd:66:5b:47:4c:9f:
52:7f:64:87:0b:97:7d:f0:e7:13:59:c3:34:84:11:
25:d4:5b:45:1e:77:21:21:68:81:26:6b:f6:5e:d6:
1c:19:46:41:89:9b:c4:b4:70:78:66:c0:ca:8f:67:
fc:75:b1:84:31:c9:ce:93:d5:26:42:6d:48:27:41:
d7:d8:d7:57:09:e6:9a:dc:d6:0c:8c:d4:49:8f:6f:
6d:36:e7:fb:6c:27:bb:58:c5:17:79:58:a6:ec:44:
a1:3a:2f:b0:2c:76:cb:94:dd:f9:03:4b:f5:e5:b1:
b2:e5:51:ab:a4:2f:7d:f8:fd:5d:50:7d:a2:cc:f2:
ec:e5:d4:8e:04:d9:84:45:16:ed:3e:4d:71:3c:c6:
ac:8b:af:21:fb:4e:a8:f1:20:95:dc:89:de:28:08:
df:2b:c9:ee:f2:cd:0b:c0:6f:c7:f9:a1:39:42:ff:
27:78:06:6c:ee:20:ac:a5:32:71:01:31:e7:2a:99:
0a:1e:88:65:af:81:8b:3e:ac:50:3e:a1:f4:be:f0:
d9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:61:DD:0D:91:B3:2B:59:96:E8:E1:D8:13:75:52:1C:B2:49:CC:D9
X509v3 Authority Key Identifier:
keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS44547.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.76.0/23
Signature Algorithm: sha256WithRSAEncryption
83:6d:29:9b:cb:8d:43:8b:1c:d2:73:2f:07:3e:49:52:a9:15:
77:cd:bf:ea:41:a8:08:df:fb:e8:7a:06:50:d5:96:35:29:66:
75:55:03:94:ce:b3:99:b8:04:93:70:2d:45:ed:23:c8:90:97:
5f:b8:36:a5:61:4b:3e:89:70:e9:2a:08:4c:cc:55:16:bf:2a:
36:de:0c:13:69:53:11:5d:35:2d:1f:e2:55:5b:f6:a1:9f:0f:
6c:7d:c5:3e:d2:52:3b:0d:ce:47:bb:fc:4d:53:42:b1:32:94:
e8:2d:6a:82:75:1e:ff:bf:1a:11:c0:f2:13:81:08:0a:62:ad:
c8:3f:ef:36:9a:ff:9e:a4:ff:9c:de:11:6b:04:17:d2:3a:39:
cd:72:cf:a4:01:cd:87:56:f1:86:c6:cc:77:d7:eb:d3:f6:97:
ba:88:ed:c3:3b:05:af:28:03:c6:c3:4f:29:5b:7a:ac:ed:e7:
9f:be:81:58:af:68:59:4d:8f:5a:a6:2f:00:85:f7:8e:33:56:
a3:58:fb:dc:66:a8:04:6c:63:1d:da:5c:ab:90:25:76:26:2f:
02:35:bb:34:eb:5d:b8:94:e1:24:7f:3e:cb:94:2f:fb:78:14:
1d:04:62:0a:89:f5:04:b6:af:ac:79:e1:db:6a:38:dc:10:2a:
7d:84:c1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:25:23 2026 by rpki-client