Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS58299.roa
File: AS58299.roa (raw, json)
Hash identifier: w9x+epGCC/13Y4eJbATbk1CydXMmaPgNdSG2S+BxBYg=
Subject key identifier: AF:9D:49:66:64:D5:D2:15:83:18:53:E5:5D:97:33:38:E6:2C:9B:42
Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial: 47291561152416D0DE3225A831068B8CA32FF8F4
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS58299.roa
Signing time: Wed 04 Nov 2026 20:32:47 +0000
ROA not before: Wed 04 Nov 2026 20:27:47 +0000
ROA not after: Wed 03 Nov 2027 20:32:47 +0000
asID: 58299
IP address blocks: 5.226.144.0/21 maxlen: 21
5.226.146.0/24 maxlen: 24
45.11.248.0/22 maxlen: 24
185.86.228.0/23 maxlen: 24
2a00:6340::/32 maxlen: 48
2a00:6340:4000::/48 maxlen: 48
2a0e:8f04::/32 maxlen: 48
2a0e:8f05::/32 maxlen: 48
2a0e:8f06::/32 maxlen: 48
2a0e:8f07::/32 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:52:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:29:15:61:15:24:16:d0:de:32:25:a8:31:06:8b:8c:a3:2f:f8:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Validity
Not Before: Nov 4 20:27:47 2026 GMT
Not After : Nov 3 20:32:47 2027 GMT
Subject: CN=AF9D496664D5D215831853E55D973338E62C9B42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9e:66:b4:54:e9:a9:e2:1b:1f:6c:f0:96:84:
5b:8d:91:a7:24:3b:cf:c4:0c:22:bf:fc:23:df:ff:
d0:bf:bc:f0:8a:28:35:49:8f:ac:5d:8e:09:c1:d3:
3b:a3:d9:cc:fc:04:07:05:5f:52:39:cd:2d:e2:be:
c0:01:49:8e:21:25:79:75:9f:05:a9:7d:77:51:93:
e3:3b:52:c9:99:c5:24:54:be:f4:ad:01:5d:17:b9:
14:86:60:4f:d5:d7:99:7c:d8:e2:5e:8e:ad:ef:3d:
00:1e:ef:01:c3:38:b2:81:00:84:28:11:a2:b9:32:
f8:4e:1f:16:68:de:45:11:c6:c5:29:35:f7:34:f5:
94:94:2c:1b:9f:0b:05:81:63:c7:18:d0:8f:06:52:
bc:d9:34:b8:b0:eb:76:b9:19:50:0a:67:e7:be:da:
47:55:ab:08:5c:7f:70:2e:1e:93:40:bc:ce:33:b5:
ce:2b:5f:e3:e8:21:d1:2f:2c:d6:32:65:2a:e0:65:
25:22:86:ad:a2:c9:ea:38:d6:ae:47:cb:2f:00:45:
9f:d3:2d:60:77:32:d1:33:65:b7:07:14:76:d2:af:
a4:68:36:e6:a9:ae:67:a2:a8:a6:66:0a:d7:6e:13:
ae:64:ef:32:26:a0:08:83:3b:5d:5f:c2:5c:11:77:
dd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:9D:49:66:64:D5:D2:15:83:18:53:E5:5D:97:33:38:E6:2C:9B:42
X509v3 Authority Key Identifier:
keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS58299.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.144.0/21
45.11.248.0/22
185.86.228.0/23
IPv6:
2a00:6340::/32
2a0e:8f04::/30
Signature Algorithm: sha256WithRSAEncryption
51:11:77:12:08:92:e2:58:b8:3e:c6:0e:50:79:10:12:2a:05:
c0:8e:ea:d3:12:d5:8f:70:2f:f5:85:89:4a:00:fb:69:2a:c4:
83:93:33:4a:0d:b7:bf:33:b8:c2:5b:32:60:7b:be:5f:e8:29:
ed:54:ee:03:5e:1c:16:65:ef:33:f4:47:5d:11:b6:39:fd:a4:
fd:99:b7:8c:aa:3b:28:8a:c3:86:d8:c9:b3:13:4f:b7:60:4a:
88:b6:dd:c3:4a:9b:5a:78:7b:99:95:d2:d8:84:48:85:41:bf:
f3:b3:50:8b:54:8a:b1:2c:d4:3c:5d:2a:65:da:a1:4f:03:66:
d4:a6:a0:73:19:e4:27:fa:cd:b6:81:d6:d9:9a:b1:64:3e:a8:
80:7b:e2:83:59:3a:52:d6:fe:ce:a7:3a:63:94:a9:47:95:53:
13:bf:fa:6f:49:72:ea:f9:bf:a3:5f:89:08:cc:4b:b9:87:f9:
46:e6:87:db:a6:34:c3:f0:cd:7b:a3:e3:e4:fe:0c:bd:1c:6c:
b8:3a:91:e8:8a:c3:10:70:2f:1b:97:d0:24:71:ea:e1:74:91:
67:3e:d0:3a:02:6a:c8:c0:e7:aa:79:b9:24:44:a2:30:32:ba:
c2:8b:a5:51:31:3c:d6:cf:93:cb:56:0b:5d:27:c9:88:e7:a3:
9b:16:df:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:17:11 2026 by rpki-client