Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS51559.roa
File: AS51559.roa (raw, json)
Hash identifier: geGhMvtWAbAA8lZk9Y4g57bbGGDnFiQCIpB98W4t8iQ=
Subject key identifier: 29:F2:7D:61:AB:D8:CA:3F:C6:BA:89:AE:DA:CE:86:C5:A9:9B:E7:74
Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial: 1F8FA01C14B34CB4120B2EE296A1BB7DA327FA9A
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS51559.roa
Signing time: Wed 29 Jul 2026 19:34:09 +0000
ROA not before: Wed 29 Jul 2026 19:29:09 +0000
ROA not after: Wed 28 Jul 2027 19:34:09 +0000
asID: 51559
IP address blocks: 85.235.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:8f:a0:1c:14:b3:4c:b4:12:0b:2e:e2:96:a1:bb:7d:a3:27:fa:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Validity
Not Before: Jul 29 19:29:09 2026 GMT
Not After : Jul 28 19:34:09 2027 GMT
Subject: CN=29F27D61ABD8CA3FC6BA89AEDACE86C5A99BE774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:67:f9:10:88:c4:c1:53:1f:f7:ab:56:c5:5a:
45:01:3d:78:27:27:64:e8:a6:85:b2:19:9e:33:15:
94:37:24:bd:c8:5b:01:4b:64:b8:5a:76:ca:41:58:
51:e2:43:87:c7:d1:05:80:dd:ff:f5:ce:ec:48:93:
fb:96:c9:f6:37:8a:cc:3e:79:34:60:31:e6:9c:dc:
b1:cc:49:9f:33:2d:5b:86:d9:e7:f4:01:8f:ed:2d:
4f:46:31:15:db:3c:7d:d7:72:b8:f0:49:fe:63:62:
99:a1:78:13:c8:24:5a:b6:b7:bf:6c:f1:31:4f:36:
04:3b:23:18:cb:01:77:52:98:56:74:c3:b5:c3:f7:
f9:21:16:0d:f0:43:63:d3:1f:e4:3b:4d:8c:14:50:
10:b1:35:65:18:f3:de:a3:a0:fa:60:23:37:43:e0:
07:8a:6d:51:fb:51:e5:b0:f0:57:83:c4:b6:55:04:
22:bd:90:c6:fe:56:a7:84:94:e5:5f:6a:ad:1a:c6:
2c:8e:f9:f8:93:78:ae:d6:e4:98:bb:af:ca:78:34:
83:64:cb:65:9c:48:ff:fd:d1:f9:0e:5d:9a:c0:8c:
9c:25:4e:41:d9:d9:5f:06:bb:b6:73:83:5f:91:c7:
0b:57:32:2f:ec:c0:d4:b1:ff:ae:12:56:77:51:e4:
f6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F2:7D:61:AB:D8:CA:3F:C6:BA:89:AE:DA:CE:86:C5:A9:9B:E7:74
X509v3 Authority Key Identifier:
keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS51559.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.235.72.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:d2:5a:73:3a:67:f1:37:36:3e:88:83:71:4e:6d:27:24:a5:
6a:13:c8:c2:ee:e0:79:f7:43:89:30:e5:ab:6a:0a:94:a0:bf:
e1:4f:a1:15:e0:a1:78:dc:92:a6:1b:56:22:d8:15:79:df:75:
53:1c:bf:0a:c9:8e:0e:ee:97:3e:0d:af:f9:09:ef:71:ae:ef:
7e:59:3e:1d:12:11:0b:94:07:93:cd:17:2d:fc:a0:2c:d6:02:
12:31:2c:3b:e3:ae:bc:85:9f:1d:3f:63:22:41:8e:56:fe:b7:
08:f0:f7:74:d2:e1:48:bd:cd:f9:6a:b9:fc:b6:ee:41:76:83:
5e:49:0c:6c:16:22:8e:b0:6c:11:a0:ef:78:6a:7c:2b:50:24:
4d:64:f8:9a:49:08:d0:08:72:50:b7:e6:b4:20:df:23:bc:3c:
4b:fc:1d:72:1a:4f:b5:1b:3f:e9:50:e1:78:c8:da:53:e0:75:
e9:ac:cd:10:52:f5:7e:ab:5b:a6:d3:4d:da:7c:a9:6e:91:8b:
84:d0:eb:28:c0:c0:d5:c5:6e:91:93:7b:20:8d:1c:74:e8:e8:
ce:0e:b7:f1:7f:1b:0c:d3:6f:da:2b:bd:d0:6a:57:17:e2:3d:
84:39:01:98:76:0d:98:44:4f:8b:13:ba:48:fe:93:0e:f2:43:
de:76:ba:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 21:25:28 2026 by rpki-client