Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS58821.roa
File: AS58821.roa (raw, json)
Hash identifier: hOn4BvGZrNYSxLFLJEyRrfVF0O1X6cxS+CRcLEHA/TU=
Subject key identifier: CF:7A:8E:9C:4C:A5:5F:34:45:5D:4D:93:5B:D5:15:29:BF:B6:A2:6D
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 2C809D1E557B6FA00F71A77CAD438954CBB051FA
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS58821.roa
Signing time: Sat 21 Feb 2026 02:19:03 +0000
ROA not before: Sat 21 Feb 2026 02:14:03 +0000
ROA not after: Sat 20 Feb 2027 02:19:03 +0000
asID: 58821
IP address blocks: 193.5.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:80:9d:1e:55:7b:6f:a0:0f:71:a7:7c:ad:43:89:54:cb:b0:51:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Feb 21 02:14:03 2026 GMT
Not After : Feb 20 02:19:03 2027 GMT
Subject: CN=CF7A8E9C4CA55F34455D4D935BD51529BFB6A26D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f3:52:f0:23:8c:99:43:2d:3f:32:86:f6:7e:
90:e9:93:ec:50:4c:37:90:86:8b:13:6c:eb:5b:31:
f6:d5:29:af:a8:b5:cb:6c:e3:68:ac:22:c0:58:a8:
a3:33:99:67:a1:68:5e:c4:39:90:91:2e:06:0a:ed:
e1:42:19:18:e4:77:0f:23:bf:8b:12:4a:fa:c8:f8:
90:06:81:22:ca:b7:eb:69:c3:35:36:3b:d2:0f:29:
94:3a:d9:c0:a5:1d:c0:fc:de:cf:b2:3a:b9:99:dc:
28:87:49:6a:23:be:44:e5:58:b4:55:62:9f:ba:52:
eb:9c:af:fe:ef:3a:fb:10:39:8d:86:26:15:2d:da:
93:50:45:4c:2c:8d:de:e1:77:dc:8c:76:c9:35:00:
3d:6b:bf:e3:8a:e9:45:24:0c:27:8a:f5:b8:2d:ac:
16:3d:47:1b:ad:4f:76:5d:0d:a9:d6:c4:4d:a1:f2:
0e:2e:a4:b5:e7:9b:d2:32:32:73:a7:02:bc:21:94:
4b:ff:37:d2:26:4f:49:27:d8:c3:c5:5c:c6:7a:6a:
51:9a:6f:ec:cd:90:08:93:f6:59:b5:a7:c0:fe:3b:
e5:3a:ae:0c:c8:8d:1d:f7:57:81:a8:ce:bd:7c:c1:
35:9c:59:77:37:4f:90:fc:d7:4e:7f:c7:7c:2c:4f:
65:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:7A:8E:9C:4C:A5:5F:34:45:5D:4D:93:5B:D5:15:29:BF:B6:A2:6D
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS58821.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.11.0/24
Signature Algorithm: sha256WithRSAEncryption
13:15:b7:be:6e:55:12:41:99:ed:79:d2:e9:87:c5:59:20:49:
51:b4:9e:1f:92:ab:f8:04:8c:4e:da:19:94:64:90:ec:e9:60:
be:ff:8c:9a:72:c5:ce:21:ac:4d:06:24:90:9a:39:88:ec:e0:
aa:9d:60:b4:60:72:13:16:aa:51:88:d6:08:fd:94:2d:7a:25:
1d:54:f0:ca:75:e6:9c:c8:b5:d9:d1:22:3e:72:2f:59:bb:ad:
4b:89:47:65:70:76:4f:de:c5:80:9a:fd:e7:64:1d:8e:be:f0:
80:d6:5c:6f:ad:4f:c6:c5:90:82:35:c8:97:01:21:6b:e2:8a:
83:66:88:fa:99:24:30:d2:76:8f:8d:41:76:54:f7:b6:02:95:
c6:77:f3:62:73:09:3e:08:bb:df:e7:b4:d8:a4:40:e6:9d:cf:
3a:61:07:c3:81:97:57:77:9b:d3:e8:43:51:54:a9:fa:1b:de:
07:75:cf:e2:de:19:ef:83:e7:cf:a8:b2:b9:65:53:2d:23:e9:
93:2a:24:52:85:0e:e8:ec:7c:b4:fe:0c:b4:61:e8:9c:a5:a7:
f0:75:25:62:4e:c9:ca:8b:2c:ac:e5:43:9e:c5:30:df:e5:ed:
e5:19:91:59:9a:64:f7:5e:e6:8a:2c:88:1e:ed:0e:12:66:cb:
25:07:ad:ad
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIULICdHlV7b6APcad8rUOJVMuwUfowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi
MmQ2ZWQ5ZDAeFw0yNjAyMjEwMjE0MDNaFw0yNzAyMjAwMjE5MDNaMDMxMTAvBgNV
BAMTKENGN0E4RTlDNENBNTVGMzQ0NTVENEQ5MzVCRDUxNTI5QkZCNkEyNkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI81LwI4yZQy0/Mob2fpDpk+xQ
TDeQhosTbOtbMfbVKa+otcts42isIsBYqKMzmWehaF7EOZCRLgYK7eFCGRjkdw8j
v4sSSvrI+JAGgSLKt+tpwzU2O9IPKZQ62cClHcD83s+yOrmZ3CiHSWojvkTlWLRV
Yp+6Uuucr/7vOvsQOY2GJhUt2pNQRUwsjd7hd9yMdsk1AD1rv+OK6UUkDCeK9bgt
rBY9RxutT3ZdDanWxE2h8g4upLXnm9IyMnOnArwhlEv/N9ImT0kn2MPFXMZ6alGa
b+zNkAiT9lm1p8D+O+U6rgzIjR33V4Gozr18wTWcWXc3T5D8105/x3wsT2XbAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUz3qOnEylXzRFXU2TW9UVKb+2om0wHwYDVR0j
BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi
ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM
VzdaMC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct
NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTNTg4MjEucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADBBQsw
DQYJKoZIhvcNAQELBQADggEBABMVt75uVRJBme150umHxVkgSVG0nh+Sq/gEjE7a
GZRkkOzpYL7/jJpyxc4hrE0GJJCaOYjs4KqdYLRgchMWqlGI1gj9lC16JR1U8Mp1
5pzItdnRIj5yL1m7rUuJR2Vwdk/exYCa/edkHY6+8IDWXG+tT8bFkII1yJcBIWvi
ioNmiPqZJDDSdo+NQXZU97YClcZ382JzCT4Iu9/ntNikQOadzzphB8OBl1d3m9Po
Q1FUqfob3gd1z+LeGe+D58+osrllUy0j6ZMqJFKFDujsfLT+DLRh6Jylp/B1JWJO
ycqLLKzlQ57FMN/l7eUZkVmaZPde5oosiB7tDhJmyyUHra0=
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:07:01 2026 by rpki-client