Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS59642.roa
File: AS59642.roa (raw, json)
Hash identifier: hP1Kp2NDJv+/pHDEYVOg5639gtm4QuiLySrM20hRaeM=
Subject key identifier: 3E:B9:EC:DB:24:EA:AF:A5:4D:7E:85:49:D3:26:FC:81:24:C4:F7:7A
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 1731B6D7DA87868DBB3B922A32E28B993E00006E
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS59642.roa
Signing time: Thu 30 Oct 2025 10:18:20 +0000
ROA not before: Thu 30 Oct 2025 10:13:20 +0000
ROA not after: Thu 29 Oct 2026 10:18:20 +0000
asID: 59642
IP address blocks: 143.20.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:31:b6:d7:da:87:86:8d:bb:3b:92:2a:32:e2:8b:99:3e:00:00:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Oct 30 10:13:20 2025 GMT
Not After : Oct 29 10:18:20 2026 GMT
Subject: CN=3EB9ECDB24EAAFA54D7E8549D326FC8124C4F77A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:32:5c:32:bb:8f:01:a1:e3:c1:5b:79:b9:d2:
60:bd:e4:93:76:5d:83:96:01:ca:cb:ae:d5:91:fb:
5b:25:f1:0b:40:6c:7a:dd:cb:88:23:a9:b3:89:f2:
f9:dc:8e:97:18:89:ff:2d:15:9f:b3:37:0e:a6:83:
1e:e6:37:be:bb:19:37:b5:ee:b6:7b:ed:85:8c:51:
1b:2e:ce:14:42:98:d0:7c:c3:cc:90:28:ef:2a:b8:
2b:c0:2b:ec:c3:a2:c8:4a:9e:6b:00:95:74:b0:88:
40:7b:a0:30:eb:27:34:43:c6:22:5c:30:41:7a:f8:
a5:7e:e9:37:21:53:27:e9:c2:61:d4:fe:a4:97:13:
48:3b:18:a5:c1:f0:58:55:e3:57:23:dd:ea:a1:00:
8e:27:31:e2:08:b7:fe:be:d0:86:7e:4c:90:0a:4c:
9f:b7:87:68:3a:79:ee:f4:2e:a6:08:78:c9:bb:ff:
d6:3a:f2:c9:e7:ca:5f:6f:98:4f:e9:67:25:e0:26:
b6:22:7d:c3:bd:ad:07:01:46:d0:b9:02:53:fc:a6:
f9:f0:3d:28:5e:c4:be:4b:a1:f5:8c:b5:9e:34:4c:
3a:f5:41:36:ab:a0:4a:b9:41:c8:78:01:f5:8d:cc:
69:71:85:2d:8d:d6:6a:1e:9e:d9:0e:90:f1:2c:01:
b5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B9:EC:DB:24:EA:AF:A5:4D:7E:85:49:D3:26:FC:81:24:C4:F7:7A
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS59642.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.102.0/24
Signature Algorithm: sha256WithRSAEncryption
30:79:7e:0a:af:f7:12:04:25:15:4e:77:97:ca:64:c2:68:3f:
d8:7f:8c:50:16:ab:ad:44:39:81:78:a5:c6:3d:69:7d:04:cd:
b8:ca:66:15:b9:71:e1:d0:f2:5e:23:1d:96:a3:86:13:ee:26:
77:bd:9b:ea:fe:fc:7a:62:14:fe:69:bc:2f:62:b6:4b:0f:b6:
06:0d:70:f8:a1:16:c2:4a:16:41:b7:ab:77:b1:b5:0f:05:e1:
bb:5d:58:96:5a:58:41:13:a6:d7:60:c4:c0:a2:aa:d2:6d:45:
9b:29:86:a7:a2:fb:b5:50:b9:53:4d:bd:4e:7c:44:5a:1b:ce:
67:78:a7:e0:80:88:03:73:1e:88:b8:c0:96:92:23:85:38:56:
f0:e2:69:75:d5:f5:7c:e5:fd:0d:eb:35:97:ab:76:6c:5b:c6:
fe:46:cc:15:16:60:75:e6:53:8b:1e:9c:8c:f1:62:e5:9c:70:
e5:25:67:c4:b5:1f:d7:25:99:53:dc:16:69:a8:8d:76:d2:1d:
ad:2a:6c:91:99:ff:d6:59:23:e0:b3:a2:56:49:1a:72:18:77:
16:73:38:58:44:39:95:3e:ae:65:1a:5e:ed:91:df:20:48:9f:
35:43:36:8b:34:51:cf:2c:83:19:9b:fc:b7:fb:d8:c3:58:dc:
ff:fc:00:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:29:56 2025 by rpki-client