Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS58339.roa
File: AS58339.roa (raw, json)
Hash identifier: 69n2uA6sqTxYqDDAtyfTw0pQaJqcMlBUfHmilO3FmL0=
Subject key identifier: 77:16:78:17:A5:F6:E0:2F:6D:95:F4:A3:7E:C1:36:33:2D:83:00:52
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 2E08F292A2A526A354EE3356EF65E8E2F6BCCB34
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS58339.roa
Signing time: Wed 01 Apr 2026 17:08:45 +0000
ROA not before: Wed 01 Apr 2026 17:03:45 +0000
ROA not after: Wed 31 Mar 2027 17:08:45 +0000
asID: 58339
IP address blocks: 2a14:7583:ec00::/40 maxlen: 48
2a14:7583:ed00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:08:f2:92:a2:a5:26:a3:54:ee:33:56:ef:65:e8:e2:f6:bc:cb:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Apr 1 17:03:45 2026 GMT
Not After : Mar 31 17:08:45 2027 GMT
Subject: CN=77167817A5F6E02F6D95F4A37EC136332D830052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b5:10:b0:94:5e:6f:53:73:0d:5a:ca:f5:1b:
a9:43:85:b3:92:31:c9:06:bd:61:3e:36:e8:87:2a:
2e:48:85:5e:0f:eb:7f:db:bd:f9:7b:b7:a8:34:b8:
2f:4b:af:c6:82:f9:7a:a5:fd:73:10:4d:2c:07:05:
c6:3b:34:9c:27:38:e5:b1:ed:c5:02:53:f9:03:a2:
8d:a6:d3:8b:8c:de:ea:fb:81:51:89:99:3a:02:fa:
a6:4e:a8:9a:32:97:48:4e:bd:ff:a5:1d:5f:89:97:
84:44:56:df:9e:e3:76:60:d9:5c:23:1a:54:b3:5c:
3f:dd:1f:60:3f:7c:20:44:5d:86:40:6f:9e:23:0a:
ef:b2:d4:b1:d9:e5:31:cd:8e:91:11:de:12:bc:2c:
9c:d0:17:e7:55:d4:a9:b3:02:77:b8:38:3f:e9:fb:
c8:3f:02:14:97:76:8b:64:ce:46:c7:1e:b2:57:d8:
6d:0b:6d:ed:13:6c:99:4b:4f:4b:1a:7c:6e:ba:ae:
c4:dd:27:c1:7e:fb:cf:7b:cd:6d:db:6b:0f:1f:ad:
f2:9c:bb:b8:aa:8c:39:e8:a4:7d:91:3e:cc:36:93:
b2:5c:b0:07:53:22:ee:d8:c5:3c:1b:07:b8:4c:6d:
70:5b:28:d6:a7:1f:51:65:02:d0:b5:1c:72:c1:92:
81:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:16:78:17:A5:F6:E0:2F:6D:95:F4:A3:7E:C1:36:33:2D:83:00:52
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS58339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:ec00::/39
Signature Algorithm: sha256WithRSAEncryption
36:4d:cd:fa:56:12:34:63:51:6f:98:33:7a:8e:62:d1:01:dc:
27:87:c4:e1:71:da:f8:d5:ce:1e:c1:81:b3:75:d2:88:ee:b0:
63:88:0e:b8:2e:f3:8c:d5:2f:90:48:de:11:4d:15:b2:6b:d7:
a2:eb:27:67:49:7c:2d:56:95:65:f1:77:aa:4c:b5:c8:2b:91:
09:8b:e5:e6:51:ab:33:a1:a9:a9:dc:7f:56:7e:b5:37:a8:de:
69:96:24:3c:50:82:c3:64:02:ba:f8:aa:06:14:64:7b:b3:18:
13:2a:87:b8:d4:44:1c:b8:9e:4b:49:fe:d7:65:5c:05:0e:0d:
b7:89:72:8d:48:1e:c0:aa:94:d2:28:1a:5b:6b:5d:f1:26:50:
9c:0f:d0:f1:3e:e5:7d:79:ab:71:f8:2b:fb:d2:12:2f:fa:52:
b5:57:f6:be:f8:c0:b6:f6:fc:68:7a:e9:38:7b:fb:b0:ea:50:
2a:81:70:ba:37:99:58:ee:10:3d:17:ae:2d:22:5e:55:0f:e0:
d0:ee:fc:b5:25:82:fd:61:37:49:28:2e:27:ea:b8:64:7f:95:
cb:73:d4:65:71:e5:18:52:70:d1:4e:87:0e:87:26:da:66:4f:
09:6d:2e:a4:64:ba:e9:d7:9e:ac:3a:e4:2f:31:0b:2c:e7:5b:
63:8c:c5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 11:43:39 2026 by rpki-client