Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS47585.roa
File: AS47585.roa (raw, json)
Hash identifier: TOf7Feo7UsrZPyOXNkSqWFtWR2ZLkyR5yt8vejM+jug=
Subject key identifier: C9:11:39:27:F0:74:77:1B:A9:87:10:AD:A9:4B:38:3F:9D:73:C8:CB
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 7F4DA09FFEFAD6A52760255FB816C88DC9669A10
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS47585.roa
Signing time: Tue 02 Jun 2026 18:47:24 +0000
ROA not before: Tue 02 Jun 2026 18:42:24 +0000
ROA not after: Tue 01 Jun 2027 18:47:24 +0000
asID: 47585
IP address blocks: 2a13:9500:a2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 12:50:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:4d:a0:9f:fe:fa:d6:a5:27:60:25:5f:b8:16:c8:8d:c9:66:9a:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 2 18:42:24 2026 GMT
Not After : Jun 1 18:47:24 2027 GMT
Subject: CN=C9113927F074771BA98710ADA94B383F9D73C8CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:06:50:ba:4d:e2:24:49:23:a8:4a:5b:83:20:
e9:c7:95:c4:38:0e:0d:cf:00:99:3c:ba:c0:80:cc:
97:11:67:c2:98:d5:82:a4:29:d7:3e:32:ce:00:11:
58:63:ca:07:c3:43:e4:59:73:e9:b3:45:a9:a7:48:
f2:0e:0f:d7:04:88:5c:bf:96:6e:54:2b:11:50:2a:
fe:85:24:22:1a:23:eb:31:c0:9e:10:c0:3a:54:5a:
c5:8b:3a:81:57:48:ef:99:7a:66:63:01:07:66:58:
38:36:c2:2f:d3:b4:40:54:23:45:99:b4:47:6a:7b:
de:5b:11:aa:70:f7:96:c7:44:9c:ce:d8:39:92:a8:
70:4a:1c:ff:9e:a0:3f:de:40:3a:35:9d:96:3c:9f:
4c:8b:7c:9a:aa:e8:d1:56:63:6b:cc:6f:78:0e:b7:
ea:30:87:d2:cf:8b:7f:4f:35:83:25:c9:bd:23:b5:
d3:03:70:e6:50:1d:04:e0:53:4d:95:39:58:89:9c:
7a:20:45:da:8f:9e:0f:b8:eb:ad:11:33:08:59:a2:
4b:10:40:ee:3a:fe:10:83:17:79:87:65:6d:d5:04:
96:47:91:15:d7:f7:04:1e:7c:6e:9f:56:14:b9:54:
54:f0:81:3c:3a:2a:72:bb:74:af:67:2a:b6:c9:95:
c2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:11:39:27:F0:74:77:1B:A9:87:10:AD:A9:4B:38:3F:9D:73:C8:CB
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS47585.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:a2::/48
Signature Algorithm: sha256WithRSAEncryption
9e:67:60:d5:ce:41:a0:52:71:6d:46:32:31:93:08:2a:8b:37:
7a:17:57:34:d9:57:75:3f:74:e7:3a:b0:93:61:34:77:18:fa:
20:e8:4f:db:3b:92:27:bb:a2:88:13:04:31:98:00:76:b5:35:
ee:7b:9e:ef:4c:b4:3b:e3:99:10:d0:1f:58:b2:f1:bb:8b:8d:
f5:06:16:8c:fa:aa:08:65:9e:d4:24:43:46:43:b1:9d:7b:3c:
8a:ed:42:9d:a6:50:d4:f9:b7:ec:cb:7f:17:b8:1d:2b:e1:94:
d1:12:8d:58:2d:7e:33:46:3f:78:27:bb:a2:69:8f:e2:d9:03:
9d:98:d6:7d:63:8b:c0:fe:e8:c4:d6:8b:87:31:cf:7a:83:0c:
a5:ee:f2:63:a9:35:dc:bd:a2:78:e3:99:11:ec:c5:5d:cc:6d:
02:16:20:2e:38:1e:ba:06:54:9a:a9:7e:eb:61:4a:08:b6:a1:
ad:7e:d8:8a:1e:aa:56:0a:bb:e0:26:cd:68:df:9b:16:fd:c9:
92:a6:36:99:46:6e:03:55:cc:42:69:f1:6e:32:6e:ed:7b:12:
52:29:c6:19:88:70:0c:3a:d8:6b:6b:be:ad:ff:2c:6e:e6:11:
c4:6f:cf:82:d3:61:e3:4d:e5:2b:56:56:a4:85:64:74:9f:0f:
5d:a6:25:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 16:50:49 2026 by rpki-client