Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/AS58062.roa
File: AS58062.roa (raw, json)
Hash identifier: N1fL/NE9MwcJJ01zCSpkEULLPZmEL7nG5a1+GFqJYkU=
Subject key identifier: 84:0B:38:24:B3:18:CB:CD:A6:44:1D:4E:A2:66:81:55:47:0A:3D:40
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 6F1F29981A4808BC041A9A81792F1374373D59B0
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/AS58062.roa
Signing time: Thu 12 Nov 2026 08:25:21 +0000
ROA not before: Thu 12 Nov 2026 08:20:21 +0000
ROA not after: Thu 11 Nov 2027 08:25:21 +0000
asID: 58062
IP address blocks: 2a0f:1cc5:4100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:1f:29:98:1a:48:08:bc:04:1a:9a:81:79:2f:13:74:37:3d:59:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Nov 12 08:20:21 2026 GMT
Not After : Nov 11 08:25:21 2027 GMT
Subject: CN=840B3824B318CBCDA6441D4EA2668155470A3D40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f4:ff:61:3e:49:2b:c1:90:0f:65:67:d3:17:
e7:97:63:60:11:a8:8c:e8:8d:4b:28:f1:0f:a6:3d:
e9:e6:09:1f:dd:0a:ef:4b:a4:7b:d4:47:7e:03:30:
56:d4:81:e1:20:59:75:7a:3a:c8:2b:21:38:3f:95:
fb:cd:cf:bb:db:1e:ac:03:16:88:40:5c:35:10:2a:
38:80:d3:17:80:0c:35:f7:8e:d3:66:29:5c:00:cc:
af:08:89:4f:a4:ec:b6:10:73:97:8b:3a:5d:71:ad:
e2:66:4a:c3:1c:16:2b:88:81:13:7d:e6:65:1d:2f:
21:7b:ac:d7:a2:42:ef:1f:58:24:51:57:4b:29:a5:
b6:df:2a:0e:dc:b6:44:30:ea:5e:16:67:3c:9b:a3:
c9:ea:07:79:cc:f6:5b:e1:2b:ff:c4:96:40:71:34:
b5:b3:b6:5a:33:d8:83:7c:b9:4d:f1:33:56:2f:7f:
4f:b2:0a:57:e3:c2:19:0e:98:47:06:64:ec:f5:b8:
f8:fe:55:f2:57:4f:f7:1b:dd:ff:b4:f5:74:52:31:
33:64:3e:82:9d:0e:54:b4:cf:ab:1c:57:bf:25:9c:
87:1b:80:dc:54:1d:73:33:c9:92:df:67:1b:a8:71:
d0:01:18:53:76:00:36:4d:09:4f:85:d3:de:bc:23:
d7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:0B:38:24:B3:18:CB:CD:A6:44:1D:4E:A2:66:81:55:47:0A:3D:40
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/AS58062.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:4100::/40
Signature Algorithm: sha256WithRSAEncryption
6e:47:65:01:f3:4c:6f:32:43:f6:ac:4e:7f:68:b3:67:8a:df:
2f:e5:43:4b:9a:bb:5d:de:d0:f4:59:db:5c:53:89:59:53:8e:
b3:b3:11:ae:51:1f:9b:76:64:92:fc:1d:30:6c:71:25:22:de:
5d:64:a5:f7:d4:30:61:a3:10:f8:7f:75:06:0a:5d:5c:60:5b:
51:24:da:2a:b9:ca:42:36:ce:6f:f3:8b:de:fb:50:77:83:5f:
01:89:1a:0b:7b:9d:e4:84:df:64:28:8b:52:e4:b2:61:63:8c:
35:aa:84:af:dd:f8:49:b6:85:5a:21:c7:cf:40:e2:54:62:29:
a3:4a:55:a2:02:62:7d:36:d5:74:63:69:a2:e1:27:d0:fb:dc:
4f:ab:4c:1a:ad:24:1b:3f:f6:56:5a:e8:0f:cb:dc:fd:15:97:
ea:de:04:20:b4:04:9e:fe:2a:74:40:5f:ba:66:8c:b4:a7:ef:
58:c3:dd:eb:50:57:78:5a:9f:ff:a4:d0:15:e9:3f:c0:0a:07:
39:97:fb:0e:6a:0e:4d:d0:f1:cf:91:b0:1d:8e:33:6a:19:6f:
eb:71:e1:ef:57:34:ed:42:54:6c:73:ae:ef:91:22:df:f8:ef:
c6:8c:d7:9d:ae:1e:4a:a3:7f:f4:6d:48:6b:bc:83:3a:22:24:
1c:a7:23:be
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIUbx8pmBpICLwEGpqBeS8TdDc9WbAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMWJlMjQwMDIxYTI4N2YyOTg5NzNkOWVhMjhkZmM4MDcz
NWZkNTgwMDAeFw0yNjExMTIwODIwMjFaFw0yNzExMTEwODI1MjFaMDMxMTAvBgNV
BAMTKDg0MEIzODI0QjMxOENCQ0RBNjQ0MUQ0RUEyNjY4MTU1NDcwQTNENDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX9P9hPkkrwZAPZWfTF+eXY2AR
qIzojUso8Q+mPenmCR/dCu9LpHvUR34DMFbUgeEgWXV6OsgrITg/lfvNz7vbHqwD
FohAXDUQKjiA0xeADDX3jtNmKVwAzK8IiU+k7LYQc5eLOl1xreJmSsMcFiuIgRN9
5mUdLyF7rNeiQu8fWCRRV0sppbbfKg7ctkQw6l4WZzybo8nqB3nM9lvhK//ElkBx
NLWztloz2IN8uU3xM1Yvf0+yClfjwhkOmEcGZOz1uPj+VfJXT/cb3f+09XRSMTNk
PoKdDlS0z6scV78lnIcbgNxUHXMzyZLfZxuocdABGFN2ADZNCU+F0968I9e9AgMB
AAGjggILMIICBzAdBgNVHQ4EFgQUhAs4JLMYy82mRB1OomaBVUcKPUAwHwYDVR0j
BBgwFoAUG+JAAhoofymJc9nqKN/IBzX9WAAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOGFmYjVmZTItM2MyYS00OTM5LTk1ZTktMDA3N2I4MGI0
ZjBlLzAvMUJFMjQwMDIxQTI4N0YyOTg5NzNEOUVBMjhERkM4MDczNUZENTgwMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0ctSkFBaG9vZnltSmM5bnFLTl9JQnpY
OVdBQS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzhhZmI1ZmUyLTNjMmEt
NDkzOS05NWU5LTAwNzdiODBiNGYwZS8wL0FTNTgwNjIucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqDxzF
QTANBgkqhkiG9w0BAQsFAAOCAQEAbkdlAfNMbzJD9qxOf2izZ4rfL+VDS5q7Xd7Q
9FnbXFOJWVOOs7MRrlEfm3ZkkvwdMGxxJSLeXWSl99QwYaMQ+H91BgpdXGBbUSTa
KrnKQjbOb/OL3vtQd4NfAYkaC3ud5ITfZCiLUuSyYWOMNaqEr934SbaFWiHHz0Di
VGIpo0pVogJifTbVdGNpouEn0PvcT6tMGq0kGz/2VlroD8vc/RWX6t4EILQEnv4q
dEBfumaMtKfvWMPd61BXeFqf/6TQFek/wAoHOZf7DmoOTdDxz5GwHY4zahlv63Hh
71c07UJUbHOu75Ei3/jvxozXna4eSqN/9G1Ia7yDOiIkHKcjvg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 17:21:50 2026 by rpki-client