Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS59642.roa
File: AS59642.roa (raw, json)
Hash identifier: P9QsHU5oknlb/xu/QPVSHJANqnCfv/UmW4OddtyVehI=
Subject key identifier: 71:5D:80:9D:B4:EB:1B:D1:60:6D:28:9A:4B:D8:85:DD:EE:12:C1:1F
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 5AB3F0D6DF03A3D73FC338958B448BCB4F4C6156
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS59642.roa
Signing time: Mon 25 Aug 2025 09:18:09 +0000
ROA not before: Mon 25 Aug 2025 09:13:09 +0000
ROA not after: Mon 24 Aug 2026 09:18:09 +0000
asID: 59642
IP address blocks: 155.117.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 10:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:b3:f0:d6:df:03:a3:d7:3f:c3:38:95:8b:44:8b:cb:4f:4c:61:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 25 09:13:09 2025 GMT
Not After : Aug 24 09:18:09 2026 GMT
Subject: CN=715D809DB4EB1BD1606D289A4BD885DDEE12C11F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ea:e2:f8:95:71:dc:72:83:c6:52:95:d3:98:
15:9d:75:5a:03:aa:59:9f:44:f5:92:e8:a1:47:25:
ce:9d:41:24:eb:f4:57:93:31:9d:d7:e2:e4:bd:c0:
f0:03:68:5b:76:70:aa:24:1b:2d:8f:27:0f:05:f2:
8b:52:e0:84:57:3f:46:27:24:71:e3:11:44:c1:b6:
76:cb:fe:a7:4a:80:5e:5d:1c:65:47:e0:2e:be:e8:
fa:65:13:db:be:0b:9a:2e:26:ad:64:ae:5d:fb:9d:
1b:03:f6:eb:7a:ac:06:7e:d8:d3:29:df:02:0f:fb:
93:27:86:0f:4e:fe:f3:60:f5:4b:ed:02:c1:e3:0e:
ca:dd:a2:37:a0:e6:e2:7e:f9:a9:b0:a5:24:e9:b5:
84:79:a0:6b:d3:48:2b:e3:7d:08:f5:ef:1e:dc:e7:
57:ba:86:c4:52:23:ff:05:57:f3:4e:9f:0c:45:d7:
7d:87:35:ea:e8:36:b6:31:77:a8:06:b7:df:e0:89:
6b:86:3c:71:8f:73:34:0c:f4:e9:16:2a:0b:a7:7c:
37:8e:70:6b:f3:60:10:a7:99:cd:ea:84:e2:cf:02:
8a:b7:ac:93:46:ca:9d:7b:1c:02:71:b0:e0:b5:75:
f4:14:b8:ae:a5:0d:8e:f2:2e:b8:1f:f6:e8:68:05:
6f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:5D:80:9D:B4:EB:1B:D1:60:6D:28:9A:4B:D8:85:DD:EE:12:C1:1F
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS59642.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.8.0/22
Signature Algorithm: sha256WithRSAEncryption
af:24:eb:e4:b6:6f:da:6a:0d:17:1e:f3:f3:d0:00:66:ef:86:
5f:56:10:97:09:f0:95:92:99:fd:64:9c:03:87:7a:3f:7a:00:
5d:99:06:e0:05:30:79:26:31:ab:68:45:96:44:de:98:be:8b:
b5:ef:a8:fc:7a:73:37:b7:1a:c4:ce:a6:67:c8:e6:16:61:4a:
4b:3b:82:5c:d0:a1:76:7a:95:45:1d:66:a7:19:62:73:a8:26:
df:bc:9e:5e:15:a3:a0:32:9a:c6:80:c9:13:8c:da:86:5d:eb:
d0:50:09:48:fb:da:54:78:fd:67:ec:b7:27:1b:a1:c5:1c:be:
b6:5a:72:ac:7a:87:1c:f1:e4:bc:08:88:74:d9:79:9c:21:15:
81:4d:25:5a:d2:b0:54:03:e9:9f:54:db:b6:85:54:88:52:e3:
27:44:a5:ed:fa:c4:f0:60:a8:c3:a8:d2:6e:19:df:0c:a9:49:
ba:36:3b:54:62:43:9c:2e:78:5a:2f:df:5c:9d:84:74:9f:05:
93:4f:14:d3:b8:93:8f:d6:a6:7c:7a:06:d3:94:da:c3:fb:78:
5a:47:f9:cb:fe:eb:65:a8:18:6d:84:bc:c2:96:d1:df:43:fd:
42:04:5c:56:62:08:6a:eb:14:f0:5f:32:a8:20:13:50:71:ed:
e6:3d:13:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 19:46:57 2025 by rpki-client