Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS58325.roa
File: AS58325.roa (raw, json)
Hash identifier: /7WlzlCm+XftIEmviL0rEflhoEPUK2pFUczenphfneE=
Subject key identifier: F2:80:39:C7:96:61:E3:61:8B:F5:5C:0A:A5:86:38:81:B3:55:B4:B7
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 1F378E55F2A697AFBE09526FE85DD5EC7ACD6DFE
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS58325.roa
Signing time: Fri 26 Jun 2026 12:34:25 +0000
ROA not before: Fri 26 Jun 2026 12:29:25 +0000
ROA not after: Fri 25 Jun 2027 12:34:25 +0000
asID: 58325
IP address blocks: 94.192.56.0/22 maxlen: 24
94.192.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:37:8e:55:f2:a6:97:af:be:09:52:6f:e8:5d:d5:ec:7a:cd:6d:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 26 12:29:25 2026 GMT
Not After : Jun 25 12:34:25 2027 GMT
Subject: CN=F28039C79661E3618BF55C0AA5863881B355B4B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ee:a2:db:66:25:e8:94:42:34:fe:b8:38:fe:
8e:de:2b:9d:51:c3:d2:3f:a6:70:9c:73:4b:4a:47:
77:53:3b:15:58:0d:a2:c7:e7:c6:72:9e:6c:ae:03:
14:7b:4f:31:f9:a9:32:43:79:59:da:48:5c:83:b1:
cb:25:0f:85:3b:f8:39:ba:18:30:80:d8:51:1d:cd:
eb:9a:6f:94:f4:51:43:68:fa:d9:e9:75:ce:41:82:
8e:93:99:df:d4:7a:85:d7:9c:d0:09:28:c5:6b:84:
dd:02:51:7e:26:62:14:a0:6d:c0:56:d3:b6:98:e5:
ec:80:56:50:b3:40:67:d2:8c:20:8b:d0:27:35:e9:
64:69:be:63:a7:d8:b2:27:f6:15:db:10:85:a2:ce:
90:08:05:52:f5:71:12:6a:3f:e4:47:7c:35:8c:8c:
60:e6:ea:75:b0:a6:66:b2:e6:67:2a:4f:1c:d2:be:
5f:99:7d:c5:78:4c:e3:91:cf:26:1b:8a:2f:11:b4:
ca:76:0c:83:70:c5:87:13:30:1d:70:fd:42:41:5e:
3a:16:4c:c8:74:ce:e7:99:1f:f2:3c:cc:20:16:ea:
22:9a:c7:66:65:97:93:c4:37:9d:23:21:af:d4:d3:
21:83:1e:96:f4:d9:26:0f:13:02:59:bc:38:3d:83:
9c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:80:39:C7:96:61:E3:61:8B:F5:5C:0A:A5:86:38:81:B3:55:B4:B7
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS58325.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.192.56.0/21
Signature Algorithm: sha256WithRSAEncryption
20:48:6a:d9:6d:dd:1e:00:d0:8c:b0:69:f5:2f:2a:8b:23:32:
f4:d5:d8:12:1a:94:79:cd:44:e9:4c:65:75:66:0f:af:7c:2c:
44:5c:11:76:ef:ef:a0:bd:32:94:4d:34:6c:9a:6a:a0:56:47:
88:9e:5b:c0:7f:61:40:cb:5a:09:df:76:78:14:fc:37:a2:97:
40:2b:d4:8a:4f:dc:fd:d0:1c:63:9f:00:c3:58:b0:03:fb:29:
fe:41:96:8d:22:fa:72:e4:5b:f7:48:e5:c0:d3:c3:aa:e0:d6:
e1:bf:47:0e:18:bf:a0:25:b7:b1:52:e0:7b:8d:9a:4b:1c:db:
3d:01:ab:08:99:27:93:28:75:22:3a:16:7a:47:43:44:fa:2f:
1e:a4:44:5a:3b:9b:ea:64:c2:5c:1c:2c:c2:a9:68:1c:08:50:
0f:35:c8:b0:ca:e7:d9:df:66:37:8a:20:83:ab:52:a6:2e:9c:
dc:c1:56:94:7c:15:44:f6:77:93:60:1d:22:a8:d3:c0:76:e9:
96:40:b6:9f:c3:5b:ec:6d:c6:f8:57:10:ca:5f:80:1a:03:76:
63:10:ba:db:e3:16:62:eb:42:1f:c0:0e:af:80:ec:60:3a:83:
83:08:e3:5f:7e:35:f2:67:ad:18:a6:01:50:93:d5:55:3d:a8:
66:c4:e3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:35:41 2026 by rpki-client