Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS44589.roa
File: AS44589.roa (raw, json)
Hash identifier: 5MhWAFFtJH4C9hmNNZA+WM5nmt0Gnj0LH1eEA1McPjc=
Subject key identifier: 59:1C:5C:41:0D:36:4B:4D:B5:89:4F:FB:9B:76:F4:26:92:BC:32:9A
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 3D359AC513DEB14F1653FB76320153DD1F9376A3
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS44589.roa
Signing time: Wed 10 Jun 2026 09:54:07 +0000
ROA not before: Wed 10 Jun 2026 09:49:07 +0000
ROA not after: Wed 09 Jun 2027 09:54:07 +0000
asID: 44589
IP address blocks: 181.215.62.0/24 maxlen: 24
191.101.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:35:9a:c5:13:de:b1:4f:16:53:fb:76:32:01:53:dd:1f:93:76:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jun 10 09:49:07 2026 GMT
Not After : Jun 9 09:54:07 2027 GMT
Subject: CN=591C5C410D364B4DB5894FFB9B76F42692BC329A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cd:d2:75:ab:c8:96:ec:6d:46:2a:fc:cb:de:
8e:c1:4a:71:01:64:df:f2:e3:05:46:14:4f:aa:f1:
94:af:3d:da:5b:6a:ed:8f:55:6c:fc:8e:13:98:29:
dc:59:4d:36:c6:e1:a9:e0:ed:a2:e2:40:0e:ba:c7:
32:53:a8:e6:b2:60:71:61:b3:09:27:5c:c7:59:6a:
b1:09:36:3f:ef:3f:83:25:d7:15:d2:64:36:d8:11:
26:8a:fe:48:7f:7b:1c:31:8a:83:38:c5:df:41:2b:
a1:6d:ce:bc:e2:63:28:14:9d:1c:30:cc:ef:c7:b0:
c7:fe:29:6a:9c:06:0c:b2:87:74:ed:06:29:b7:a1:
bb:06:bb:76:4e:c1:be:43:ab:03:0c:c0:3c:63:1d:
6d:91:6e:c8:8f:bd:f4:b6:b8:5b:58:6d:5c:49:1c:
65:5b:64:66:7f:28:4b:10:6b:b3:29:9c:86:9d:ab:
1e:6d:31:d4:5b:60:9a:49:f8:f2:2f:53:2b:c4:8d:
25:c4:23:40:d6:0e:f2:9d:66:49:40:68:2c:ab:75:
4a:cd:8b:17:0c:27:ac:e2:fd:58:2d:f5:94:63:fb:
e0:54:ae:de:6d:84:2f:ce:3a:46:50:17:82:e5:02:
c7:01:64:b5:48:cc:d1:cb:27:e5:b4:78:d9:07:03:
4b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:1C:5C:41:0D:36:4B:4D:B5:89:4F:FB:9B:76:F4:26:92:BC:32:9A
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS44589.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.215.62.0/24
191.101.39.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:1f:dc:62:b1:5a:10:27:53:88:64:12:9f:ce:d8:42:5a:9b:
89:6d:49:99:90:c6:02:fa:f1:2e:de:ff:40:64:0e:d5:cd:ee:
f0:83:af:fd:d7:d2:86:d0:9a:62:fb:e0:7b:3e:2a:f2:6d:fc:
44:93:b7:b3:16:45:6e:d8:c1:a5:c0:9a:11:7d:cb:56:6f:87:
1c:09:a0:80:30:9f:e1:25:d9:ef:e9:c5:57:27:04:b2:5d:d0:
1a:91:c1:ed:b1:d4:a2:cc:a7:b4:e2:2b:51:6b:bd:f6:9f:98:
b2:9d:85:67:3e:7b:e1:cb:6f:c2:33:82:48:4b:1f:c1:23:fd:
cf:68:16:a5:5b:45:a8:c6:af:10:85:3c:25:ec:61:4a:de:67:
5f:b8:d1:fa:b5:ce:f7:e3:19:bd:af:01:4a:47:60:f5:1a:5e:
17:8a:05:4e:a4:66:66:c0:92:2d:3e:2a:7c:d5:b4:0f:35:8d:
de:bc:34:95:c0:79:e0:22:b0:3c:33:fc:03:15:bc:11:77:24:
12:53:01:e9:b7:af:0f:31:b1:88:35:15:22:10:5e:e6:a3:33:
40:e9:e7:94:cf:84:a8:46:6b:7a:cf:e4:5d:af:fc:89:90:27:
52:6c:44:dd:41:b0:8a:73:57:4f:0d:da:0d:29:92:78:c0:db:
8a:0d:e7:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 11:54:07 2026 by rpki-client