Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS59642.roa
File: AS59642.roa (raw, json)
Hash identifier: A5Ae7cTFDYEApaqKCbSg8vHusA8foJtX2DvVIwh4yZA=
Subject key identifier: 2C:12:CE:29:98:BB:F8:32:71:89:F6:45:3E:93:D1:72:F3:43:89:BA
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 4BB4D2B9BD9A02F024EA5D3B3C007774672CF660
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS59642.roa
Signing time: Sat 25 Oct 2025 03:37:50 +0000
ROA not before: Sat 25 Oct 2025 03:32:50 +0000
ROA not after: Sat 24 Oct 2026 03:37:50 +0000
asID: 59642
IP address blocks: 155.117.8.0/22 maxlen: 24
162.141.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:b4:d2:b9:bd:9a:02:f0:24:ea:5d:3b:3c:00:77:74:67:2c:f6:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 25 03:32:50 2025 GMT
Not After : Oct 24 03:37:50 2026 GMT
Subject: CN=2C12CE2998BBF8327189F6453E93D172F34389BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:45:11:4d:8f:64:18:3c:6c:0e:95:0a:93:54:
7d:4e:0e:8e:b8:5a:64:f9:3e:63:d4:e8:a4:5b:d0:
7d:86:f4:97:78:3d:3b:79:bf:93:f2:4c:bb:96:f8:
15:4a:46:5a:00:2d:52:72:7f:13:94:dd:6e:91:48:
6b:b6:33:b9:6d:36:21:4f:d4:be:9f:0a:03:1c:e7:
ef:80:68:99:df:1e:9d:44:72:dd:28:7a:a8:6e:5e:
a3:bc:28:79:87:c8:d0:e9:4f:39:60:17:31:e9:9c:
7d:50:88:85:c6:0c:d5:2c:f9:a2:90:f9:3a:4c:4c:
b4:8e:ab:66:f4:73:57:f5:5e:d7:db:c1:25:6e:21:
51:f1:ed:d2:df:e8:4d:70:21:2f:80:b5:14:fe:38:
00:e4:fc:c5:cc:b5:a4:be:a4:b1:2a:d1:f1:cf:de:
bf:82:3e:c2:3f:88:38:ab:e3:34:0d:7d:c7:3e:96:
0d:94:f5:6b:ab:7e:d4:eb:7f:d0:1d:5e:f6:1f:df:
f8:3e:81:a6:43:d6:5f:04:70:f5:80:f9:53:94:d0:
b3:d0:b2:74:43:c3:b7:9f:0c:dd:2b:cd:16:3d:33:
d8:0b:12:12:9e:9a:30:0a:a2:e3:b8:ee:30:5e:d6:
03:87:32:46:c6:48:d4:45:85:d0:85:ba:23:97:dd:
51:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:12:CE:29:98:BB:F8:32:71:89:F6:45:3E:93:D1:72:F3:43:89:BA
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS59642.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.8.0/22
162.141.11.0/24
Signature Algorithm: sha256WithRSAEncryption
03:31:8e:58:cb:54:b1:5d:00:ae:5d:12:10:08:f7:3b:79:b1:
7a:26:6c:e3:8b:37:54:aa:41:cf:27:ff:0b:ec:1a:1a:10:34:
70:44:c2:ca:3d:4a:bf:c7:7e:eb:28:9b:1d:37:4a:20:a6:f1:
70:8f:db:d5:9a:d6:9e:5d:85:dd:da:54:72:9e:fa:7c:a4:20:
dc:86:47:b2:c7:45:ea:a1:6e:0d:87:68:97:59:e5:f3:ae:3e:
89:06:81:c8:7d:ef:91:87:e0:4e:f4:38:3c:c0:9e:d1:22:1a:
79:43:60:7c:10:f5:df:8e:fa:4e:1e:75:07:77:4b:00:12:ba:
54:af:f5:3c:3c:1e:e6:33:31:0d:84:b9:bc:de:72:9b:bd:3f:
01:44:72:6a:6a:ee:9a:cd:ba:8f:0b:c4:42:40:0d:2a:0f:f1:
73:43:bb:74:e0:a0:52:6b:bb:ff:e9:7b:a9:97:e0:ad:80:3c:
d3:be:f1:41:22:99:23:69:0b:67:9d:d2:9e:20:08:13:28:69:
55:ff:ed:f2:5e:ad:21:d3:16:c1:4e:2a:e6:26:fc:2a:99:41:
0b:cc:39:10:8e:79:ce:42:ab:4c:2b:3c:91:3b:ec:3f:f3:02:
14:20:6e:b4:65:2c:b9:e6:a6:73:d9:ec:cd:b0:14:29:05:f2:
16:12:89:44
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUS7TSub2aAvAk6l07PAB3dGcs9mAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNTEwMjUwMzMyNTBaFw0yNjEwMjQwMzM3NTBaMDMxMTAvBgNV
BAMTKDJDMTJDRTI5OThCQkY4MzI3MTg5RjY0NTNFOTNEMTcyRjM0Mzg5QkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcRRFNj2QYPGwOlQqTVH1ODo64
WmT5PmPU6KRb0H2G9Jd4PTt5v5PyTLuW+BVKRloALVJyfxOU3W6RSGu2M7ltNiFP
1L6fCgMc5++AaJnfHp1Ect0oeqhuXqO8KHmHyNDpTzlgFzHpnH1QiIXGDNUs+aKQ
+TpMTLSOq2b0c1f1XtfbwSVuIVHx7dLf6E1wIS+AtRT+OADk/MXMtaS+pLEq0fHP
3r+CPsI/iDir4zQNfcc+lg2U9WurftTrf9AdXvYf3/g+gaZD1l8EcPWA+VOU0LPQ
snRDw7efDN0rzRY9M9gLEhKemjAKouO47jBe1gOHMkbGSNRFhdCFuiOX3VGzAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQULBLOKZi7+DJxifZFPpPRcvNDibowHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTNTk2NDIucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAKbdQgD
BACijQswDQYJKoZIhvcNAQELBQADggEBAAMxjljLVLFdAK5dEhAI9zt5sXombOOL
N1SqQc8n/wvsGhoQNHBEwso9Sr/Hfusomx03SiCm8XCP29Wa1p5dhd3aVHKe+nyk
INyGR7LHReqhbg2HaJdZ5fOuPokGgch975GH4E70ODzAntEiGnlDYHwQ9d+O+k4e
dQd3SwASulSv9Tw8HuYzMQ2Eubzecpu9PwFEcmpq7prNuo8LxEJADSoP8XNDu3Tg
oFJru//pe6mX4K2APNO+8UEimSNpC2ed0p4gCBMoaVX/7fJerSHTFsFOKuYm/CqZ
QQvMORCOec5Cq0wrPJE77D/zAhQgbrRlLLnmpnPZ7M2wFCkF8hYSiUQ=
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:54:27 2025 by rpki-client