Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS47690.roa
File: AS47690.roa (raw, json)
Hash identifier: wYQrhGG3AhTmI8hty0uigxMEBUzernFrnQL4SAOOrlY=
Subject key identifier: 50:09:8E:73:E0:D4:C9:C8:31:B2:C2:36:BA:37:D4:FA:C8:B5:74:F6
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 533E0473FAB1A33935B2711D4045A230439B54BD
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS47690.roa
Signing time: Thu 25 Jun 2026 09:31:25 +0000
ROA not before: Thu 25 Jun 2026 09:26:25 +0000
ROA not after: Thu 24 Jun 2027 09:31:25 +0000
asID: 47690
IP address blocks: 94.193.104.0/22 maxlen: 24
94.193.156.0/22 maxlen: 24
94.193.180.0/22 maxlen: 24
94.193.204.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:3e:04:73:fa:b1:a3:39:35:b2:71:1d:40:45:a2:30:43:9b:54:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 25 09:26:25 2026 GMT
Not After : Jun 24 09:31:25 2027 GMT
Subject: CN=50098E73E0D4C9C831B2C236BA37D4FAC8B574F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:28:30:5c:31:11:7f:e6:2c:f6:98:12:09:9a:
74:9a:10:fb:ee:05:19:48:d5:08:b8:52:c4:e1:5d:
b0:ac:4f:a5:4c:49:bf:ce:09:04:2f:c4:5d:4e:0b:
07:06:f6:b1:5e:d9:8f:9e:18:1e:e9:13:4e:64:f5:
e5:c8:dd:e7:b4:6c:3c:ca:3c:a9:48:41:9c:90:d8:
be:80:1d:4e:d4:85:0d:22:81:6b:41:87:ab:cf:62:
62:d9:71:fc:2d:67:d1:9e:75:65:32:2f:d2:c5:66:
7b:83:7a:01:d9:be:c3:e2:af:5d:11:cf:23:0d:bb:
81:73:8a:3f:cb:58:bd:9f:70:37:e4:a6:35:d4:c3:
56:92:b6:c7:78:fd:98:1e:33:24:bb:75:af:39:09:
28:b0:5a:53:36:f5:ad:57:44:46:33:82:03:3d:d7:
1a:da:0e:d6:f2:e3:f6:da:33:22:1d:31:1c:d3:35:
93:37:3c:10:64:6e:30:12:4c:19:a0:21:04:63:7d:
9b:ee:17:0c:d1:8e:cf:c4:da:79:9b:15:20:2f:1e:
55:79:41:59:49:1c:df:81:08:ab:ac:30:fb:92:b5:
75:2c:0a:3d:b2:2c:92:fd:18:83:55:f9:bc:6d:ee:
5d:5b:0f:09:d3:37:72:9f:7e:d8:ea:49:57:aa:96:
b1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:09:8E:73:E0:D4:C9:C8:31:B2:C2:36:BA:37:D4:FA:C8:B5:74:F6
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS47690.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.193.104.0/22
94.193.156.0/22
94.193.180.0/22
94.193.204.0/22
Signature Algorithm: sha256WithRSAEncryption
81:60:bb:80:9a:1c:0d:6a:ce:65:f4:51:a1:a6:c9:7e:34:c3:
71:ee:1f:5f:84:ab:5c:97:36:90:88:dc:50:f9:41:50:00:ba:
5d:ac:2b:7f:d4:dc:1d:cd:1d:94:16:c1:3d:fa:59:31:90:4f:
fe:2d:6a:eb:c3:18:fd:72:d1:e5:91:15:21:4e:a5:9a:b0:b7:
c2:68:ef:86:a5:92:cf:dd:73:bf:b8:e2:d9:14:44:fe:1e:e3:
af:c5:72:b1:0b:e4:77:6a:61:26:f6:2b:06:5a:1e:ca:90:71:
52:8f:03:13:75:48:b2:f2:e2:d5:d9:d2:25:b3:09:cc:e7:6c:
91:f3:67:ac:4d:4a:a5:c9:4b:80:4c:96:c8:6d:80:2f:93:65:
45:5a:11:c2:51:7c:8d:a5:a8:46:59:3d:b7:b3:15:ba:76:bf:
f6:af:b9:4d:87:ca:c1:db:2a:05:fa:c0:c1:d0:d3:21:fb:75:
44:9c:56:9b:83:89:a5:ed:ad:92:32:94:a5:c7:09:38:b6:cb:
7f:39:24:29:72:72:60:21:39:e2:d6:93:e9:54:d3:39:7d:a3:
0a:c6:d0:e3:ca:8b:70:7f:5e:09:7e:3e:f5:06:be:bf:94:91:
84:10:c0:c7:a9:60:e9:22:ed:aa:ca:81:c8:af:3b:cc:c3:36:
45:31:bb:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 15:30:24 2026 by rpki-client