Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS59432.roa
File: AS59432.roa (raw, json)
Hash identifier: fHKKcNgLXQZ0puTeP2P5/RfMFgL4D2KTG7QC7Mjbt+M=
Subject key identifier: 0E:2C:29:A0:12:F6:A0:15:82:F2:52:F0:66:69:45:DA:38:BB:B9:EA
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 626CBB0E4981122681312CF107379471BB1F2555
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS59432.roa
Signing time: Wed 21 Jan 2026 16:37:02 +0000
ROA not before: Wed 21 Jan 2026 16:32:02 +0000
ROA not after: Wed 20 Jan 2027 16:37:02 +0000
asID: 59432
IP address blocks: 82.23.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:6c:bb:0e:49:81:12:26:81:31:2c:f1:07:37:94:71:bb:1f:25:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jan 21 16:32:02 2026 GMT
Not After : Jan 20 16:37:02 2027 GMT
Subject: CN=0E2C29A012F6A01582F252F0666945DA38BBB9EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f9:45:67:75:7b:8a:a7:a0:74:f0:d2:be:3e:
2b:00:23:32:86:69:22:d6:89:8b:0a:a9:04:13:01:
a6:7a:32:c8:53:47:0d:0f:46:ec:02:91:01:72:dc:
6b:d6:84:67:3e:e0:e2:dd:a0:af:e7:0b:a3:6b:7f:
dc:e5:4b:14:c8:3d:53:79:84:4d:96:21:f9:16:6c:
57:1d:cf:86:c5:67:92:e1:0a:c1:d9:62:41:2f:ed:
fe:92:09:71:3a:54:6d:31:0d:ea:04:57:81:f0:83:
cc:fd:8d:87:22:68:92:35:39:0b:a7:b3:a4:67:58:
c9:31:0d:8b:48:45:d9:59:bc:29:98:26:44:7f:64:
36:c6:22:9e:cf:c6:d3:49:47:98:d7:15:07:ce:3c:
cc:b0:51:77:bd:65:3e:0c:ab:9c:7c:35:01:ad:f8:
75:df:35:86:bc:4e:44:8b:2e:0b:21:e3:cc:bc:a6:
bd:61:d0:17:26:75:52:aa:08:77:09:91:c0:4b:aa:
1f:27:9a:f6:d7:e1:db:f6:f2:57:af:7d:e6:e1:5c:
f7:70:37:15:37:0b:a9:19:34:40:92:ce:0d:7e:88:
e9:20:30:d0:db:4e:fc:5e:d8:8a:62:84:ae:98:af:
3e:da:ed:f6:ae:18:d3:22:a3:4d:6b:bd:79:4b:d3:
3c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:2C:29:A0:12:F6:A0:15:82:F2:52:F0:66:69:45:DA:38:BB:B9:EA
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS59432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.23.181.0/24
Signature Algorithm: sha256WithRSAEncryption
01:b8:c7:f6:00:fa:e2:4b:f6:15:21:ff:94:15:f8:97:32:2b:
fd:a9:c5:df:df:f2:d4:73:5d:29:07:94:42:c1:e7:c5:3d:63:
13:f8:5f:40:82:08:94:e0:ae:39:1d:cc:ec:a5:a2:55:c4:6c:
d5:30:e6:4a:ef:23:58:49:f1:c1:4d:1d:ca:c2:87:d2:13:c9:
49:83:ee:13:35:d6:61:ab:e8:75:90:9c:13:10:71:2a:7d:da:
c6:59:2d:92:14:ac:1b:a0:de:62:02:40:d7:ad:ad:97:5d:28:
92:93:51:c7:3b:fc:f7:55:b2:c7:c5:ac:e1:3c:ad:23:6b:3c:
af:57:8f:9a:5d:29:ce:7c:02:25:b6:1c:9e:7a:42:e6:12:40:
71:02:de:ef:b3:a3:6f:b2:ec:38:85:e7:42:d3:f6:c2:e3:32:
0a:53:7e:3d:26:09:59:75:2a:4d:ee:7e:bc:ae:7e:1b:f6:4f:
5e:78:8c:48:66:1a:52:e2:7f:2d:3c:7b:bb:09:31:4f:2e:23:
84:8d:11:b0:fc:f7:72:2d:c7:79:9e:73:4b:82:25:1b:8d:87:
54:f6:fb:aa:44:f8:4e:2d:b8:4a:61:33:61:3d:60:60:5d:6f:
60:2b:98:51:9f:56:e4:1d:a7:08:92:51:9d:2a:d3:b5:dc:3e:
69:2b:d8:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:35:02 2026 by rpki-client