Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS58212.roa
File: AS58212.roa (raw, json)
Hash identifier: VYzNX+HPCO4pYh0qMD5I65kje4ALsleOFDT3tG8ESDw=
Subject key identifier: 42:9E:EE:DB:1C:C5:38:E4:78:71:C4:6E:1F:39:E0:9C:63:3B:B2:F1
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 7B5B9CCEDA37A9D6EFF020741F419BD895B70E3F
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS58212.roa
Signing time: Tue 22 Jul 2025 00:00:07 +0000
ROA not before: Mon 21 Jul 2025 23:55:07 +0000
ROA not after: Tue 21 Jul 2026 00:00:07 +0000
asID: 58212
IP address blocks: 45.93.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:5b:9c:ce:da:37:a9:d6:ef:f0:20:74:1f:41:9b:d8:95:b7:0e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jul 21 23:55:07 2025 GMT
Not After : Jul 21 00:00:07 2026 GMT
Subject: CN=429EEEDB1CC538E47871C46E1F39E09C633BB2F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:10:30:87:aa:de:9e:3b:77:aa:75:24:1d:62:
41:82:eb:37:15:b6:43:f9:ee:41:08:77:94:38:ce:
77:09:8b:7d:6f:aa:a0:72:48:66:fb:9a:1a:71:50:
af:71:3b:bf:b9:93:55:70:e3:cb:2a:27:a7:f3:1c:
37:f2:9f:1b:3e:af:4f:97:94:e1:fe:62:82:99:99:
c7:8d:3a:6a:a6:23:5f:e3:dd:ef:8d:2c:00:9d:56:
b2:e9:12:ea:b9:f1:f1:e7:76:00:0c:2c:ab:87:dd:
54:fd:04:a0:55:0c:bf:96:24:9d:74:0d:1c:71:d6:
fd:42:f4:07:7c:f8:c3:3b:9d:1e:36:f1:e2:36:07:
86:8f:db:6f:16:fd:a4:54:4b:1b:64:d5:67:78:b2:
ba:9f:dd:7c:71:43:53:bf:c3:44:69:26:00:57:7b:
5b:b9:86:c0:ee:95:0f:17:78:87:7d:95:3f:80:b9:
9b:63:61:3b:00:86:df:2b:43:73:f2:07:ad:8b:e2:
b1:e5:c2:40:24:1b:81:eb:42:5f:f0:e3:77:28:93:
98:33:3d:c3:76:65:8f:28:2c:f1:e5:ef:9f:f9:e2:
6a:b0:3f:e5:33:85:3c:78:58:2b:70:86:33:e2:5e:
15:6c:7f:0b:6d:ff:bc:45:03:63:60:ea:c1:93:0b:
95:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:9E:EE:DB:1C:C5:38:E4:78:71:C4:6E:1F:39:E0:9C:63:3B:B2:F1
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS58212.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.44.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:cb:55:f9:db:0d:58:1a:91:1b:b4:ca:ff:47:9e:da:bf:a2:
7d:ec:56:32:67:97:a0:69:00:67:10:65:1c:08:e5:87:00:45:
05:78:67:0a:b4:df:90:7f:04:ee:96:6f:bd:98:4d:22:65:47:
75:d0:99:9d:29:1d:49:d6:78:3a:bf:fe:66:47:52:6a:f9:ba:
37:84:8d:b4:8b:cd:a3:d7:c3:0d:68:06:83:51:ca:21:04:99:
ff:68:1c:10:56:5d:96:f2:17:ba:6a:4a:05:63:34:4c:4f:6c:
3d:d3:94:76:4e:81:83:d6:fb:6e:c9:a2:92:61:80:07:9b:4d:
3e:f1:3f:02:3b:33:16:83:4c:ad:fa:45:8a:9c:92:8d:f4:5e:
0d:66:10:08:30:54:ea:de:a2:45:74:6c:24:45:d4:c0:8a:37:
a5:ed:eb:bc:f1:af:43:b5:cd:0a:8c:bd:1a:0d:2b:26:b6:0c:
28:85:b8:6c:f3:f4:18:ec:45:86:11:d1:cc:8f:d7:22:51:cd:
20:b6:d7:99:b2:3c:2f:6b:4a:46:42:07:17:11:40:aa:76:11:
e7:65:b6:60:d8:8b:4e:b5:fb:78:7a:b8:d5:42:ae:e3:52:3e:
0a:93:84:c5:86:62:45:5e:30:e5:fd:62:9b:6e:1f:e0:73:fc:
8b:d3:99:42
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUe1uczto3qdbv8CB0H0Gb2JW3Dj8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNTA3MjEyMzU1MDdaFw0yNjA3MjEwMDAwMDdaMDMxMTAvBgNV
BAMTKDQyOUVFRURCMUNDNTM4RTQ3ODcxQzQ2RTFGMzlFMDlDNjMzQkIyRjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkEDCHqt6eO3eqdSQdYkGC6zcV
tkP57kEId5Q4zncJi31vqqBySGb7mhpxUK9xO7+5k1Vw48sqJ6fzHDfynxs+r0+X
lOH+YoKZmceNOmqmI1/j3e+NLACdVrLpEuq58fHndgAMLKuH3VT9BKBVDL+WJJ10
DRxx1v1C9Ad8+MM7nR428eI2B4aP228W/aRUSxtk1Wd4srqf3XxxQ1O/w0RpJgBX
e1u5hsDulQ8XeId9lT+AuZtjYTsAht8rQ3PyB62L4rHlwkAkG4HrQl/w43cok5gz
PcN2ZY8oLPHl75/54mqwP+UzhTx4WCtwhjPiXhVsfwtt/7xFA2Ng6sGTC5VzAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUQp7u2xzFOOR4ccRuHzngnGM7svEwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTNTgyMTIucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtXSww
DQYJKoZIhvcNAQELBQADggEBAHvLVfnbDVgakRu0yv9Hntq/on3sVjJnl6BpAGcQ
ZRwI5YcARQV4Zwq035B/BO6Wb72YTSJlR3XQmZ0pHUnWeDq//mZHUmr5ujeEjbSL
zaPXww1oBoNRyiEEmf9oHBBWXZbyF7pqSgVjNExPbD3TlHZOgYPW+27JopJhgAeb
TT7xPwI7MxaDTK36RYqcko30Xg1mEAgwVOreokV0bCRF1MCKN6Xt67zxr0O1zQqM
vRoNKya2DCiFuGzz9BjsRYYR0cyP1yJRzSC215myPC9rSkZCBxcRQKp2EedltmDY
i061+3h6uNVCruNSPgqThMWGYkVeMOX9YptuH+Bz/IvTmUI=
-----END CERTIFICATE-----
Generated at Mon Aug 4 07:39:38 2025 by rpki-client