Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/AS58342.roa
File: AS58342.roa (raw, json)
Hash identifier: kLObi2M4FqaCxHa9FXrlvz+TC7zs50Fa3mgP0Z10T1U=
Subject key identifier: 6E:8B:42:9A:60:55:8A:13:24:D8:B0:44:80:50:54:04:88:5C:BB:BE
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 56CD1E6885F8A23E74337078EBD33922D4636604
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/AS58342.roa
Signing time: Tue 11 Aug 2026 14:50:14 +0000
ROA not before: Tue 11 Aug 2026 14:45:14 +0000
ROA not after: Tue 10 Aug 2027 14:50:14 +0000
asID: 58342
IP address blocks: 177.177.19.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 13:54:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:cd:1e:68:85:f8:a2:3e:74:33:70:78:eb:d3:39:22:d4:63:66:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Aug 11 14:45:14 2026 GMT
Not After : Aug 10 14:50:14 2027 GMT
Subject: CN=6E8B429A60558A1324D8B04480505404885CBBBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fb:86:f5:a7:17:1c:65:c7:66:ca:1c:58:b2:
f6:ef:c6:c0:e9:75:06:2c:5a:b1:85:c3:ec:bb:f3:
0d:19:19:42:d0:5f:99:45:03:47:a6:cf:b4:a8:94:
30:5e:d7:79:81:f6:6e:bf:ba:56:e0:4c:54:53:e2:
35:6b:24:cc:3b:e7:03:d6:de:58:14:e9:93:2d:ed:
ca:5f:bb:b5:99:73:00:d0:8d:b6:65:b7:39:9e:e8:
a6:ba:29:5a:2d:62:22:bd:8b:d1:09:a5:32:be:d1:
e5:36:e7:36:ac:b4:26:8a:59:76:82:d4:2b:a7:de:
7c:ce:e8:f4:28:29:d2:59:33:94:d9:34:dd:5c:df:
61:e7:70:29:30:00:27:b1:1d:ab:21:06:39:5b:6d:
2b:0a:87:f9:79:c9:55:3a:cd:ab:3b:ac:14:3c:d5:
c2:2d:81:2c:cd:6d:a9:b4:8f:8e:ab:92:16:7c:28:
4f:3b:6d:6a:b8:b0:16:38:60:25:4a:45:ea:6f:2d:
67:0a:f6:33:54:33:b5:e5:8b:c9:bd:45:01:a5:d5:
05:84:47:ac:db:49:69:bb:eb:c9:7a:17:41:e2:ae:
cb:51:ec:88:1c:2f:1b:d4:71:ef:64:91:a7:3a:84:
ba:31:7a:c0:0b:45:1b:95:a1:e4:77:78:91:b4:64:
db:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:8B:42:9A:60:55:8A:13:24:D8:B0:44:80:50:54:04:88:5C:BB:BE
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/AS58342.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.177.19.0/24
Signature Algorithm: sha256WithRSAEncryption
29:7d:18:9c:68:9a:be:94:fc:17:86:38:49:5d:37:33:b1:fd:
1e:3d:be:b2:46:06:48:e3:c4:d2:ad:52:f8:ea:c4:9a:4b:17:
cf:81:a4:1f:a7:b6:93:b2:b0:21:e7:09:47:a4:e1:71:3c:f6:
10:90:6b:12:22:b8:34:6f:72:56:b6:8d:dd:2b:a7:d3:47:f1:
94:84:25:2f:a9:97:83:84:a3:a0:fa:e2:b9:9a:af:fe:15:5b:
5a:c3:b9:15:5c:39:19:e6:6e:85:07:42:99:9e:63:cf:f4:c0:
b8:eb:ba:b7:5f:f1:89:42:46:9d:60:4b:a7:7c:64:c3:ee:8b:
74:6a:b1:73:4c:65:78:09:f0:d1:41:44:87:c7:3b:e9:de:56:
36:7d:7c:16:ce:ee:26:ea:fd:f1:a0:9d:88:89:63:dc:86:4c:
fc:54:4f:20:06:1d:01:6b:57:2b:fa:5a:7f:83:1c:1b:43:7b:
c5:62:cf:a7:67:0e:66:59:09:9c:26:89:98:1e:bf:15:08:d7:
fa:31:89:74:ba:75:51:81:40:ab:27:84:8e:6c:8c:49:c8:1a:
87:47:ba:aa:2e:85:67:2a:bd:26:8c:e1:dd:8b:d6:e9:a4:25:
5a:ac:2e:dd:fe:9b:b5:7d:e4:9e:fb:b7:f9:90:67:24:f7:72:
b7:7e:87:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 20:33:16 2026 by rpki-client