Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS59455.roa
File: AS59455.roa (raw, json)
Hash identifier: jDi5lGDn1BOExOgg7V640MY+lO0qpCurf8sy3rUrC6w=
Subject key identifier: FC:E7:4F:C5:6C:C0:16:38:5D:81:69:93:62:36:E4:12:8E:94:41:AB
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 171E54659D2FDC02C4328D3AC5680AF712E206AA
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS59455.roa
Signing time: Mon 01 Jun 2026 14:10:09 +0000
ROA not before: Mon 01 Jun 2026 14:05:09 +0000
ROA not after: Mon 31 May 2027 14:10:09 +0000
asID: 59455
IP address blocks: 2a13:9500:18a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:1e:54:65:9d:2f:dc:02:c4:32:8d:3a:c5:68:0a:f7:12:e2:06:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 1 14:05:09 2026 GMT
Not After : May 31 14:10:09 2027 GMT
Subject: CN=FCE74FC56CC016385D8169936236E4128E9441AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d9:b1:4a:4c:4c:b8:27:07:1b:45:38:45:ff:
32:ae:44:3c:26:2a:57:33:e0:94:85:36:75:f7:58:
2b:30:5e:f3:90:06:14:a6:58:7f:fe:55:db:5c:65:
12:67:72:fa:4e:6f:5c:e0:6f:ed:68:be:e0:98:5e:
ef:f5:17:79:52:b4:28:3d:d3:e0:ae:19:99:9d:32:
76:ee:f8:2d:5f:72:5b:c6:c9:e7:97:27:8b:d4:bf:
9a:4d:de:96:6b:4d:88:da:73:fa:dd:4f:54:fc:a7:
f4:67:08:c1:47:18:f5:88:b4:e8:d0:70:53:7f:b8:
be:3b:a0:5c:58:7b:b0:a6:be:c9:8a:ff:f6:65:0f:
cf:a0:2f:8f:ce:94:48:1f:e2:52:5d:bd:af:99:35:
3f:a3:dc:70:dc:3c:93:3f:f1:34:2f:84:bb:3d:0d:
0d:77:c9:d4:89:48:15:11:10:82:9a:10:0b:3c:b4:
f8:47:2e:05:d4:b4:e6:b0:3a:0f:51:e7:71:47:dd:
b9:99:00:cc:a6:9f:ce:64:93:ca:e5:fe:5e:94:49:
0f:fe:18:e1:0d:23:d7:dd:be:a8:f9:cd:65:ec:d6:
fa:57:32:04:f2:80:ec:93:cc:f0:f1:bd:65:59:97:
1a:59:4b:d4:90:92:0e:56:01:7f:89:24:60:64:9b:
46:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E7:4F:C5:6C:C0:16:38:5D:81:69:93:62:36:E4:12:8E:94:41:AB
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS59455.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:18a::/48
Signature Algorithm: sha256WithRSAEncryption
6c:e1:df:5f:ca:fd:a6:b3:63:c7:4e:65:28:d7:71:52:20:43:
b3:1a:9b:79:dc:ad:6a:2c:e4:6c:96:b5:65:aa:b3:73:af:dd:
8d:97:86:14:52:d6:50:e8:e6:e1:42:e8:23:33:33:4e:14:43:
d4:b5:80:1c:43:43:ed:45:f2:b4:1d:94:6a:c1:e6:09:c2:36:
13:d6:12:de:7f:c0:1e:14:50:10:7e:28:09:83:17:48:fa:8c:
4c:3d:89:e2:65:7c:6f:b1:76:c3:9b:62:fe:13:a0:cb:7e:8c:
3a:01:f7:9f:f2:78:2f:87:9a:db:30:df:36:3f:53:76:dc:31:
70:a0:a9:40:3e:5c:6c:5e:07:dd:1a:3d:f5:e4:e1:bc:af:f8:
45:7c:ac:7b:be:c9:ae:1a:94:87:9b:88:66:b8:35:b6:e9:c3:
4f:c6:f5:f9:a4:6e:74:cc:a8:fd:05:19:e5:c9:9c:25:5a:73:
01:b6:cb:7d:2f:27:41:e4:83:5e:6a:40:f2:84:74:c2:9e:ae:
fa:14:6c:09:c0:76:4a:6d:63:d0:02:86:ed:1d:ad:a9:50:64:
75:70:4b:fe:ac:bd:cd:ee:e8:5c:0e:09:7a:dc:7d:60:96:d8:
7f:d5:51:95:87:87:96:b6:45:6a:87:1c:89:b9:bd:d1:aa:68:
e0:1e:99:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:10:36 2026 by rpki-client