Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS58643.roa
File: AS58643.roa (raw, json)
Hash identifier: 9ioo/f2CrZA37nK+FMVWfRecEKgJvJ4SKVdDVGrzeoY=
Subject key identifier: 82:19:B1:33:A2:25:18:C2:0D:7D:79:C3:76:6C:CB:C5:45:47:37:A0
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 3616D92BCB6DA7BAC2022BA5FF4FBB7F11314893
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS58643.roa
Signing time: Mon 29 Jun 2026 09:48:46 +0000
ROA not before: Mon 29 Jun 2026 09:43:46 +0000
ROA not after: Mon 28 Jun 2027 09:48:46 +0000
asID: 58643
IP address blocks: 82.29.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:16:d9:2b:cb:6d:a7:ba:c2:02:2b:a5:ff:4f:bb:7f:11:31:48:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 29 09:43:46 2026 GMT
Not After : Jun 28 09:48:46 2027 GMT
Subject: CN=8219B133A22518C20D7D79C3766CCBC5454737A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:99:e5:8e:ef:30:d5:e3:51:a7:39:df:44:48:
e4:5c:a1:be:5c:4e:c8:42:68:2e:6e:3b:c5:ae:c9:
ec:49:1f:4e:05:7b:cf:cd:b9:fa:80:5c:cf:56:d7:
41:15:94:6f:e5:a5:41:d1:e7:96:1b:12:19:11:92:
37:66:37:d0:70:50:09:79:08:62:55:c1:40:f9:71:
5a:74:9b:44:1f:85:94:9b:62:9a:ae:e3:18:ca:3b:
69:df:ff:c0:17:e9:5a:f7:c1:4a:43:29:e6:5e:e9:
ff:b1:aa:20:77:9d:64:26:8b:b7:45:fb:0a:a4:90:
a1:94:e5:54:2d:82:fe:fb:cd:b6:6e:3c:15:ac:15:
c3:b7:c9:e5:ae:ca:1b:18:1a:ad:28:38:29:96:fe:
b5:a4:45:e5:12:77:38:42:9b:c8:42:fd:93:96:91:
fe:56:62:ca:42:b2:cb:09:b8:c3:53:21:84:d1:f3:
25:94:57:09:ad:9c:0a:a1:e7:95:4f:b0:18:11:a9:
bf:ec:79:17:9f:50:1a:b5:cc:f7:15:4a:d3:bd:da:
a4:f1:d4:2c:fa:5c:6f:b7:cc:84:51:04:ed:c8:7f:
19:09:71:3e:24:95:a5:c5:0d:59:5a:46:57:38:11:
8e:dd:c4:ed:d9:c1:de:e8:e0:42:41:6d:24:79:bf:
6e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:19:B1:33:A2:25:18:C2:0D:7D:79:C3:76:6C:CB:C5:45:47:37:A0
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS58643.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.29.52.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:63:ef:eb:ad:69:00:21:5c:91:22:cc:64:2d:9a:19:25:82:
24:3d:d1:e5:92:69:3b:a2:ae:d8:8a:ac:6d:50:85:5f:18:87:
70:4a:c5:ac:ac:ee:8e:99:26:b5:42:b1:8c:1c:bd:5c:a3:1f:
83:ae:18:31:05:7c:db:9c:3f:0e:69:ea:d0:94:0c:df:f6:2d:
73:44:a5:02:78:e1:94:5b:00:16:f0:e7:29:93:19:c5:fb:9c:
a8:1b:8a:af:cc:93:85:43:3b:a1:a7:be:1b:ab:a7:df:9d:df:
aa:f7:7a:68:02:4c:4b:b8:29:a9:82:d2:36:41:94:d6:9a:fb:
ff:3d:17:5c:1e:bb:96:66:1f:ce:8b:60:fd:90:71:eb:bb:e7:
f0:d3:d4:1a:17:fb:c7:36:d3:3a:c1:91:dd:c6:4e:30:b4:d8:
1d:b2:c1:e5:44:97:65:ff:dd:58:d2:7f:31:26:40:5c:56:5f:
77:e8:eb:ed:d3:f6:46:41:f9:c6:22:ae:ea:83:7a:fe:a8:d8:
a4:25:ef:b3:d9:ba:ae:2d:33:a3:2e:fb:f0:4d:dd:a8:26:7c:
8a:47:d1:52:26:6b:7a:8c:56:fc:b4:fb:65:f4:4d:6a:50:a3:
b8:ef:4d:8d:f5:c2:09:2d:f9:81:7e:96:da:aa:57:ec:d7:e8:
80:ba:1b:9d
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUNhbZK8ttp7rCAiul/0+7fxExSJMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA2MjkwOTQzNDZaFw0yNzA2MjgwOTQ4NDZaMDMxMTAvBgNV
BAMTKDgyMTlCMTMzQTIyNTE4QzIwRDdENzlDMzc2NkNDQkM1NDU0NzM3QTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2meWO7zDV41GnOd9ESORcob5c
TshCaC5uO8WuyexJH04Fe8/NufqAXM9W10EVlG/lpUHR55YbEhkRkjdmN9BwUAl5
CGJVwUD5cVp0m0QfhZSbYpqu4xjKO2nf/8AX6Vr3wUpDKeZe6f+xqiB3nWQmi7dF
+wqkkKGU5VQtgv77zbZuPBWsFcO3yeWuyhsYGq0oOCmW/rWkReUSdzhCm8hC/ZOW
kf5WYspCsssJuMNTIYTR8yWUVwmtnAqh55VPsBgRqb/seRefUBq1zPcVStO92qTx
1Cz6XG+3zIRRBO3IfxkJcT4klaXFDVlaRlc4EY7dxO3Zwd7o4EJBbSR5v257AgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUghmxM6IlGMINfXnDdmzLxUVHN6AwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNTg2NDMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABSHTQw
DQYJKoZIhvcNAQELBQADggEBAD1j7+utaQAhXJEizGQtmhklgiQ90eWSaTuirtiK
rG1QhV8Yh3BKxays7o6ZJrVCsYwcvVyjH4OuGDEFfNucPw5p6tCUDN/2LXNEpQJ4
4ZRbABbw5ymTGcX7nKgbiq/Mk4VDO6Gnvhurp9+d36r3emgCTEu4KamC0jZBlNaa
+/89F1weu5ZmH86LYP2Qceu75/DT1BoX+8c20zrBkd3GTjC02B2yweVEl2X/3VjS
fzEmQFxWX3fo6+3T9kZB+cYiruqDev6o2KQl77PZuq4tM6Mu+/BN3agmfIpH0VIm
a3qMVvy0+2X0TWpQo7jvTY31wgkt+YF+ltqqV+zX6IC6G50=
-----END CERTIFICATE-----
Generated at Fri Jul 17 23:05:59 2026 by rpki-client