Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS147206.roa
File: AS147206.roa (raw, json)
Hash identifier: D0GE2JIxaqUzMr5vZAaXo9Lpn6K9Z0mWOjWrU2qYSDw=
Subject key identifier: CC:7E:A5:FD:87:50:0A:75:23:72:88:CD:08:10:B3:10:78:CB:42:BF
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 11B24B72AAC582FAFC5AB032791EAFFF664465FF
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS147206.roa
Signing time: Sun 05 Jul 2026 07:10:34 +0000
ROA not before: Sun 05 Jul 2026 07:05:34 +0000
ROA not after: Sun 04 Jul 2027 07:10:34 +0000
asID: 147206
IP address blocks: 46.202.98.0/24 maxlen: 24
92.112.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 Jul 2026 07:10:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:b2:4b:72:aa:c5:82:fa:fc:5a:b0:32:79:1e:af:ff:66:44:65:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jul 5 07:05:34 2026 GMT
Not After : Jul 4 07:10:34 2027 GMT
Subject: CN=CC7EA5FD87500A75237288CD0810B31078CB42BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d1:30:36:6f:aa:0e:48:a4:b4:f8:af:b0:d9:
d5:23:bb:39:5b:64:d6:33:96:6a:cb:95:94:37:f2:
b0:1d:0e:53:59:b9:80:4c:7b:8b:41:e6:df:c6:33:
4c:52:75:0c:77:82:e2:71:51:c7:38:bb:15:66:23:
7a:72:14:ed:1b:8b:b4:45:2e:14:1a:70:5a:47:48:
d2:0c:8f:fe:2d:92:69:fd:84:7e:d9:e9:9a:03:60:
dc:6d:e9:60:32:8f:b8:77:35:67:8f:7c:09:69:90:
29:52:e6:f8:e8:be:b0:86:62:67:a7:8f:b4:7a:20:
ea:9b:3d:2f:1c:1d:1d:e6:1a:d2:f9:f0:48:bc:bb:
3c:ae:4d:3c:bc:05:73:91:db:3d:67:09:1f:81:d5:
4d:e4:89:ee:3b:bb:e0:71:0c:99:57:2e:d8:f7:b1:
ae:14:0e:84:b8:f2:c8:be:8b:61:c2:83:68:5f:c4:
fa:b8:67:5e:dc:8d:cd:36:e1:36:c2:de:bb:a9:06:
75:85:a7:76:a4:82:e0:e9:9a:6d:47:8e:4f:a5:e1:
14:27:c4:88:ed:29:0d:b6:05:f9:1d:14:bd:70:a5:
b4:b2:d6:bf:8d:3d:c6:f4:bf:12:71:92:7e:30:33:
45:98:1b:b3:f0:cc:bc:5d:cc:77:86:6f:19:7d:5b:
7b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:7E:A5:FD:87:50:0A:75:23:72:88:CD:08:10:B3:10:78:CB:42:BF
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS147206.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.98.0/24
92.112.47.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:8a:99:b0:9c:9c:8f:d2:fa:2a:2b:6a:4a:8c:4d:42:26:c9:
ea:ed:6b:58:33:f2:c7:e6:f0:2f:6b:dc:39:cd:42:82:49:36:
d2:22:39:12:b9:cb:85:cc:59:23:b7:9e:03:be:8c:6c:0a:b2:
26:7c:c3:b9:5e:3b:e7:e7:73:21:e2:58:83:e7:a0:40:0d:33:
a4:54:b9:a0:42:2b:de:e4:71:06:b8:a9:3a:0e:54:0d:76:d7:
44:41:90:6e:a8:f6:c9:21:86:b4:86:f7:5c:be:5d:26:6e:8f:
1b:2b:9b:bc:4d:90:99:7f:29:30:e9:86:d6:cd:73:c9:9c:35:
4f:88:72:35:0c:67:3f:d0:59:12:05:e4:29:77:81:87:b6:d0:
ae:39:16:78:a2:af:83:7c:6f:28:2b:01:bb:ae:5f:2c:c4:31:
98:6c:03:12:e3:3c:49:6c:8e:12:10:02:94:ea:c7:00:d5:5e:
58:75:d7:94:08:f6:85:aa:5a:fc:ef:68:23:fc:a8:9e:d0:7d:
a6:3d:3f:b0:95:7c:6b:f5:cb:4e:6e:de:0e:c5:f8:e0:d0:26:
cf:41:00:90:59:5d:5a:69:84:9f:d4:ac:db:07:a0:33:97:f3:
b5:e9:69:32:57:f4:49:8c:4a:c3:5c:ab:41:5f:44:54:62:17:
d1:83:08:44
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUEbJLcqrFgvr8WrAyeR6v/2ZEZf8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjA3MDUwNzA1MzRaFw0yNzA3MDQwNzEwMzRaMDMxMTAvBgNV
BAMTKENDN0VBNUZEODc1MDBBNzUyMzcyODhDRDA4MTBCMzEwNzhDQjQyQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV0TA2b6oOSKS0+K+w2dUjuzlb
ZNYzlmrLlZQ38rAdDlNZuYBMe4tB5t/GM0xSdQx3guJxUcc4uxVmI3pyFO0bi7RF
LhQacFpHSNIMj/4tkmn9hH7Z6ZoDYNxt6WAyj7h3NWePfAlpkClS5vjovrCGYmen
j7R6IOqbPS8cHR3mGtL58Ei8uzyuTTy8BXOR2z1nCR+B1U3kie47u+BxDJlXLtj3
sa4UDoS48si+i2HCg2hfxPq4Z17cjc024TbC3rupBnWFp3akguDpmm1Hjk+l4RQn
xIjtKQ22BfkdFL1wpbSy1r+NPcb0vxJxkn4wM0WYG7PwzLxdzHeGbxl9W3uJAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUzH6l/YdQCnUjcojNCBCzEHjLQr8wHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMTQ3MjA2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALspi
AwQAXHAvMA0GCSqGSIb3DQEBCwUAA4IBAQA7ipmwnJyP0voqK2pKjE1CJsnq7WtY
M/LH5vAva9w5zUKCSTbSIjkSucuFzFkjt54DvoxsCrImfMO5Xjvn53Mh4liD56BA
DTOkVLmgQive5HEGuKk6DlQNdtdEQZBuqPbJIYa0hvdcvl0mbo8bK5u8TZCZfykw
6YbWzXPJnDVPiHI1DGc/0FkSBeQpd4GHttCuORZ4oq+DfG8oKwG7rl8sxDGYbAMS
4zxJbI4SEAKU6scA1V5YddeUCPaFqlr872gj/Kie0H2mPT+wlXxr9ctObt4Oxfjg
0CbPQQCQWV1aaYSf1KzbB6Azl/O16WkyV/RJjErDXKtBX0RUYhfRgwhE
-----END CERTIFICATE-----
Generated at Sun Jul 5 16:26:03 2026 by rpki-client