Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS58339.roa
File: AS58339.roa (raw, json)
Hash identifier: TJBpAscXGxPAaU2DpOwmUgcMgm+krCH3k/kxGxsd++w=
Subject key identifier: 47:5A:88:03:07:EC:A0:47:B3:CA:8E:E5:A4:54:75:84:8B:31:09:91
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 6EAEA641A92235E63174E35061E68C42C747E7B5
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS58339.roa
Signing time: Mon 03 Aug 2026 18:25:34 +0000
ROA not before: Mon 03 Aug 2026 18:20:34 +0000
ROA not after: Mon 02 Aug 2027 18:25:34 +0000
asID: 58339
IP address blocks: 2a14:7581:5c00::/40 maxlen: 48
2a14:7581:5d00::/40 maxlen: 48
2a14:7581:5e00::/40 maxlen: 48
2a14:7583:ec00::/40 maxlen: 48
2a14:7583:ed00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:ae:a6:41:a9:22:35:e6:31:74:e3:50:61:e6:8c:42:c7:47:e7:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Aug 3 18:20:34 2026 GMT
Not After : Aug 2 18:25:34 2027 GMT
Subject: CN=475A880307ECA047B3CA8EE5A45475848B310991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8e:14:2e:56:cb:4c:03:49:aa:75:28:0f:f8:
81:0c:1b:8d:5f:fa:99:21:63:63:39:9b:2c:7c:f6:
b5:34:52:c5:85:14:79:7b:59:ce:1a:a9:60:05:cb:
46:63:6d:37:84:24:6b:5b:89:14:a3:8e:5e:62:3d:
b8:ec:d9:59:03:ed:18:29:1d:da:32:a6:b1:d0:21:
8b:dd:56:ba:74:b3:b0:0e:13:ee:47:8c:f6:3c:72:
ea:ca:ae:2c:90:fa:45:1d:a2:cf:2f:71:a9:37:c0:
ae:f8:6e:ed:57:06:39:b1:fa:7e:19:60:6e:3d:bf:
c1:2b:d6:30:d1:5f:dc:ae:f5:bd:a5:06:62:ce:38:
29:90:f8:5e:6f:10:86:06:54:af:79:7b:6e:5a:7b:
b8:6b:c2:c2:6e:8b:b6:76:7d:d2:40:f6:2c:f7:85:
e3:30:ce:91:35:60:d5:9d:ac:1a:e6:31:d8:7f:63:
7b:5f:6a:f6:8f:81:3f:28:6a:d1:10:7b:4f:35:f7:
3f:69:99:4d:78:44:d8:99:0d:d9:2b:5c:d2:14:77:
44:ba:ff:0c:44:6b:3b:ed:7a:04:1f:04:e8:84:e4:
6d:71:88:a1:ba:0e:99:8a:b1:a9:96:05:86:24:43:
c4:05:08:07:48:3e:e5:b1:1d:58:e0:a4:6a:51:da:
45:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:5A:88:03:07:EC:A0:47:B3:CA:8E:E5:A4:54:75:84:8B:31:09:91
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS58339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:5c00::-2a14:7581:5eff:ffff:ffff:ffff:ffff:ffff
2a14:7583:ec00::/39
Signature Algorithm: sha256WithRSAEncryption
99:c0:18:6f:8e:8b:2d:57:31:59:f1:a1:6a:79:46:7a:8b:97:
07:4e:1a:31:4d:45:61:3b:50:01:c1:a8:09:54:68:2a:b6:2a:
6c:c0:b5:d4:c8:d7:cc:63:88:0b:d9:78:d2:6d:35:96:06:af:
fb:b1:c0:5c:96:0a:f4:55:ac:fa:10:06:4e:c8:cb:7c:5d:64:
a8:2e:1b:bc:5c:82:06:18:5a:14:26:3c:91:10:a1:59:f1:14:
b3:89:77:4c:c1:38:f3:9b:87:b0:63:92:28:c7:d3:ed:2e:0b:
17:25:be:89:87:16:c3:bc:1b:6a:a2:11:a8:ee:89:71:2b:53:
19:ad:1b:17:79:3c:5e:ee:00:90:43:fc:f6:01:bf:85:fe:61:
9d:0a:67:81:bf:dc:d1:f6:63:2d:ba:0b:d3:e6:7e:f1:ae:97:
28:65:4f:4e:8a:30:f2:49:df:0f:73:be:4a:12:10:dd:ff:39:
b1:e7:99:43:d6:98:3a:9d:73:5f:97:21:b0:10:03:47:b0:ac:
92:c2:4f:79:96:aa:82:9e:45:2e:04:6a:c9:f5:90:d5:f4:75:
e6:ad:4d:88:54:a8:fd:e9:6d:a1:33:4a:03:23:40:46:fd:61:
d2:9c:99:6c:7c:af:c7:7a:06:d3:05:15:6c:13:ee:97:7c:fd:
0a:fe:46:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:00:38 2026 by rpki-client