Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS44947.roa
File: AS44947.roa (raw, json)
Hash identifier: 6VSr0tewm94aYdvDGctWPIElS/vsrO/Vbbr5QZERd0I=
Subject key identifier: 58:D6:1E:0B:C0:AB:15:8B:FD:9C:05:5A:E3:C5:22:5F:E6:73:39:57
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 455D45DE41123466294E11B9C7DE4E0CAA28DDAD
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS44947.roa
Signing time: Wed 02 Sep 2026 11:49:32 +0000
ROA not before: Wed 02 Sep 2026 11:44:32 +0000
ROA not after: Wed 01 Sep 2027 11:49:32 +0000
asID: 44947
IP address blocks: 143.20.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:20:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:5d:45:de:41:12:34:66:29:4e:11:b9:c7:de:4e:0c:aa:28:dd:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 2 11:44:32 2026 GMT
Not After : Sep 1 11:49:32 2027 GMT
Subject: CN=58D61E0BC0AB158BFD9C055AE3C5225FE6733957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9b:9e:5c:15:72:cd:37:cd:7e:55:20:af:bf:
17:71:12:b5:92:45:70:d5:fc:45:a9:14:c2:b5:f2:
11:86:dc:86:5b:57:84:c0:23:b7:61:dc:eb:cf:46:
c1:59:21:24:ce:8c:e5:89:8c:bf:94:6c:69:68:82:
8e:a7:1b:f7:5d:55:ef:f9:cc:a7:c6:e0:72:a4:ed:
27:20:5d:ee:78:af:59:0c:0c:ab:a8:eb:f8:8a:35:
69:76:55:2c:d0:59:50:f9:c0:ca:78:ae:cc:c9:27:
0a:05:bc:b7:71:5b:00:5c:97:34:e8:0e:7d:90:6f:
26:a9:2c:12:e8:96:82:61:e4:25:28:92:44:a0:c4:
5c:db:64:ef:cb:3d:94:de:3f:2a:2e:de:5a:ed:64:
da:4e:8f:c9:4d:ad:31:5f:4d:2e:8c:34:37:87:96:
83:6d:c7:57:1c:78:c9:e9:d8:a1:96:26:50:6e:38:
3e:86:62:3e:56:14:2b:de:ac:e7:26:9e:ed:d1:8f:
83:3e:1a:f1:63:d4:0b:ec:3b:b9:67:12:7c:d6:d2:
6c:50:79:a4:ad:80:a9:63:54:22:f4:94:62:32:6c:
79:5f:51:67:6c:20:27:1b:c0:34:21:51:9e:40:b6:
77:0d:83:fc:4c:8d:93:ca:79:a6:d5:04:14:24:59:
79:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D6:1E:0B:C0:AB:15:8B:FD:9C:05:5A:E3:C5:22:5F:E6:73:39:57
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS44947.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.100.0/24
Signature Algorithm: sha256WithRSAEncryption
06:df:fb:65:ce:69:61:54:9f:3f:f2:48:ce:9a:44:98:8d:ae:
1d:40:41:78:ab:b1:fa:bd:9e:5b:97:68:7c:f7:c8:3e:6c:5d:
1d:d6:f5:40:34:9e:c9:91:8f:7a:e5:00:30:7c:a2:f5:7d:5b:
e0:7f:b9:99:f1:6c:04:ba:fa:92:27:e3:1e:70:a7:7a:a8:be:
70:44:99:8e:ef:18:5d:c2:ca:0a:6e:25:65:5b:f9:b5:b9:b2:
09:9a:e6:18:58:77:79:a2:94:c5:45:8a:b5:dc:8c:0c:b6:5c:
19:68:4c:8e:c3:2a:88:f9:76:69:8d:06:19:6f:22:51:81:05:
5d:51:78:25:53:34:f5:1f:96:4c:f2:a3:5d:90:af:80:c9:28:
ae:0a:a1:df:fd:7a:8a:a2:60:72:1a:0b:bf:ad:80:53:55:2b:
ad:77:63:bb:1f:06:13:3f:d7:21:5a:2c:07:6c:3d:2c:e6:42:
bc:dd:e3:51:98:8c:fb:72:e3:70:aa:55:d9:88:1c:b2:89:6f:
06:12:8c:e9:b1:5e:6e:e3:f7:63:bb:ca:a3:d0:2b:20:38:f4:
b1:a0:a5:b4:99:87:5b:16:3f:43:a5:ea:2a:08:54:bd:27:a5:
ca:de:24:43:9c:50:90:2b:7f:61:0f:1e:f8:f2:bf:8c:2f:e2:
70:14:ae:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:19:07 2026 by rpki-client