Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS59447.roa
File: AS59447.roa (raw, json)
Hash identifier: Iha5sF/rsFzt4LRfQHdMFVcdABw2PN8hLN4j1FRBXd0=
Subject key identifier: F9:3C:9B:9A:CA:47:C7:3C:A9:F8:CB:4A:76:BD:0D:1F:6E:28:D4:75
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 178737867236415E53591A5287AC1A6D26DD9F9F
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS59447.roa
Signing time: Sat 11 Jul 2026 12:06:06 +0000
ROA not before: Sat 11 Jul 2026 12:01:06 +0000
ROA not after: Sat 10 Jul 2027 12:06:06 +0000
asID: 59447
IP address blocks: 178.83.40.0/24 maxlen: 24
178.83.65.0/24 maxlen: 24
178.83.128.0/24 maxlen: 24
178.83.129.0/24 maxlen: 24
178.83.131.0/24 maxlen: 24
178.83.143.0/24 maxlen: 24
178.83.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:87:37:86:72:36:41:5e:53:59:1a:52:87:ac:1a:6d:26:dd:9f:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 11 12:01:06 2026 GMT
Not After : Jul 10 12:06:06 2027 GMT
Subject: CN=F93C9B9ACA47C73CA9F8CB4A76BD0D1F6E28D475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b3:35:1e:68:e6:ad:76:09:81:66:53:45:f4:
56:1c:3a:54:9e:e6:a9:dc:18:96:e7:e4:94:25:97:
4d:2c:d9:20:59:81:aa:4e:82:05:41:fd:7a:f2:41:
f5:5b:c4:1c:db:9c:46:4f:50:04:77:a2:96:98:25:
1a:3c:ce:ae:1d:03:01:62:00:5b:72:27:e0:55:62:
79:cc:6b:0d:51:46:74:a6:1e:d3:b1:21:64:3d:1c:
60:c9:34:bf:46:80:b7:a1:48:7f:70:56:ab:95:32:
a7:7b:32:17:a0:59:48:cb:b2:e5:82:81:ae:af:d8:
31:7e:81:c2:b2:c6:fe:23:c2:b7:4a:e7:3a:bf:2f:
87:4a:4b:2f:e6:85:63:57:36:8f:3b:91:ce:ed:fe:
91:3f:38:35:df:59:e0:e9:4b:e9:13:13:0a:93:00:
4a:4c:fd:54:a2:2c:82:9e:09:ce:37:7b:82:cf:64:
28:ea:3a:31:5f:47:d4:54:fa:ae:70:41:eb:59:72:
d6:9f:65:17:0a:9e:22:80:1c:8e:b9:00:11:ed:a2:
29:d7:47:a2:0d:69:ef:89:47:93:13:e6:49:61:05:
a3:2b:54:25:e5:cc:72:73:73:79:97:d3:7e:59:86:
3e:03:92:a1:51:98:af:36:32:3a:32:24:2a:a5:ba:
b5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:3C:9B:9A:CA:47:C7:3C:A9:F8:CB:4A:76:BD:0D:1F:6E:28:D4:75
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS59447.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.40.0/24
178.83.65.0/24
178.83.128.0/23
178.83.131.0/24
178.83.143.0/24
178.83.172.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:c7:f9:01:e4:83:70:6f:8a:a7:c3:f9:89:e8:6a:ed:d5:9d:
90:c9:e1:3d:62:65:3d:56:81:f8:95:44:3e:55:86:93:01:f4:
4d:35:19:9c:62:43:d3:b1:60:03:38:dd:49:a4:a2:96:9a:d8:
5a:1a:eb:07:de:25:43:32:2d:44:4c:e3:34:8e:42:ff:7b:98:
50:82:9f:75:5e:83:85:77:b3:f9:67:7d:67:d8:5d:db:79:9b:
57:6f:ab:82:ac:8e:48:b3:72:f9:b8:1b:e0:db:e5:b7:80:eb:
c0:92:74:9e:19:61:a3:37:4d:8e:ef:1a:b7:37:a2:22:87:c8:
88:9e:00:16:d7:4a:65:97:79:b5:17:20:a6:f0:30:67:e7:13:
bd:35:fa:96:e9:bb:b8:f2:53:31:90:bf:a2:63:6b:2c:97:5c:
c9:29:42:4f:a4:84:6f:91:41:18:a3:7f:c4:da:2d:a5:74:f3:
fd:a2:74:f1:98:7d:89:d9:e8:39:35:a4:cd:74:6d:df:1f:e1:
6c:dc:23:37:8d:0a:07:5e:72:15:8f:82:c6:c8:de:1f:55:9b:
1f:66:c9:57:a5:75:0c:79:a0:cb:64:ad:e2:54:d3:21:24:a3:
04:f2:cd:c6:d4:c2:a4:29:81:8b:ea:51:f9:82:9f:c6:9e:db:
80:eb:8e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:04:54 2026 by rpki-client