Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS59642.roa
File: AS59642.roa (raw, json)
Hash identifier: 6gzKlVfifQtOxCC7NvZabdMpmUgc2JATn6CmOV37Fsg=
Subject key identifier: 6F:CC:BE:65:3A:5F:BE:78:9B:5A:16:9E:BD:86:67:CF:C5:3B:D5:15
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 65EF495242804786E80E7EA76E937DB24314BA24
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS59642.roa
Signing time: Mon 03 Aug 2026 20:36:33 +0000
ROA not before: Mon 03 Aug 2026 20:31:33 +0000
ROA not after: Mon 02 Aug 2027 20:36:33 +0000
asID: 59642
IP address blocks: 212.60.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:ef:49:52:42:80:47:86:e8:0e:7e:a7:6e:93:7d:b2:43:14:ba:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Aug 3 20:31:33 2026 GMT
Not After : Aug 2 20:36:33 2027 GMT
Subject: CN=6FCCBE653A5FBE789B5A169EBD8667CFC53BD515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:af:73:78:a8:5f:c0:aa:cd:63:0f:87:a8:26:
9e:31:96:39:e2:bb:01:84:6a:48:41:88:23:73:fd:
e5:f6:3e:5d:31:52:89:1f:cb:29:6b:5a:af:82:84:
b4:49:b5:bd:99:5f:58:e5:93:db:95:1c:31:f6:2a:
b8:3a:68:e4:ce:ae:5f:63:fe:bd:10:ee:aa:53:0b:
89:0d:77:1d:80:45:1b:ef:90:ae:92:95:d2:8b:4a:
3f:f8:99:34:f3:7a:1e:fb:e7:c0:36:3b:27:7e:ac:
7d:ba:37:23:bf:3a:aa:7d:cb:92:26:f2:e6:33:d2:
fd:0e:ec:70:83:f5:4f:67:a5:54:17:6b:d7:9c:7e:
6e:47:1c:bc:73:16:46:3b:a5:e0:a9:c0:fd:70:81:
b7:35:8b:71:80:67:74:56:51:bd:e2:f6:8c:eb:c9:
f7:68:9d:39:06:2b:4b:5a:e2:63:26:3d:5a:ac:8d:
5a:ad:bd:fc:cb:ff:03:e2:65:db:17:9b:42:9e:75:
ce:10:70:8f:a4:03:5d:cf:2a:1b:2c:3b:6f:66:8e:
1a:93:67:c6:a4:e6:e7:87:9b:a5:69:73:fd:33:6d:
ff:c3:42:67:35:53:f8:f7:7a:d8:7e:6b:32:b4:ec:
b0:9d:c5:65:21:78:ab:b9:a3:da:d3:16:6b:f7:29:
a6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:CC:BE:65:3A:5F:BE:78:9B:5A:16:9E:BD:86:67:CF:C5:3B:D5:15
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS59642.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.60.152.0/24
Signature Algorithm: sha256WithRSAEncryption
16:56:8f:f3:aa:b9:35:55:3f:e4:cc:af:f6:51:8b:10:29:ae:
f3:44:be:d3:b4:91:19:5a:18:ec:8b:6f:07:fc:a5:f4:e2:71:
f1:44:ad:3e:28:09:d0:e7:8e:42:49:7d:78:4c:44:f9:10:9d:
b4:5f:51:2d:cb:1f:b7:b4:a5:9e:f7:5e:b0:43:d1:13:33:9f:
80:61:4c:b8:db:36:29:d5:cf:5b:7b:82:37:8d:b7:c6:f0:3a:
e1:07:76:72:e2:c4:e6:40:8a:da:cd:c8:77:e4:df:ab:24:e7:
f7:c9:f6:c8:b2:ab:54:85:cc:4f:74:be:dd:52:9c:48:05:86:
84:fa:b8:0a:d2:4c:b7:0b:2f:4e:be:5b:2f:3f:0c:3c:de:27:
f3:e1:8c:5d:10:0f:6f:22:42:69:26:3a:7f:5e:b5:9f:37:cc:
83:79:08:36:6a:94:ce:3c:dd:0b:bf:2a:a1:f1:66:f4:6e:e8:
92:db:ff:d5:81:6a:d7:f7:cc:7d:2d:38:d5:72:67:75:ce:22:
8c:53:ce:03:ad:b2:36:76:44:7a:40:44:e8:27:16:9f:90:18:
a1:f8:ef:a7:73:08:4b:20:13:23:be:58:6c:a4:53:24:f9:88:
38:83:73:52:d7:1b:45:91:92:58:ee:ae:8e:a9:99:a6:0a:6e:
4e:f1:2a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 09:19:04 2026 by rpki-client