Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS59447.roa
File: AS59447.roa (raw, json)
Hash identifier: GsGqAcllJgjT7Ns5VBtxsgdIiLChzpTLhxhgndp70g0=
Subject key identifier: 54:F4:2E:67:5E:44:DB:57:66:A8:04:4F:E0:55:FD:48:75:9C:C3:24
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 30D5B3F974D25D6A4BA7110FE520212AD2215003
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS59447.roa
Signing time: Fri 10 Jul 2026 10:13:39 +0000
ROA not before: Fri 10 Jul 2026 10:08:39 +0000
ROA not after: Fri 09 Jul 2027 10:13:39 +0000
asID: 59447
IP address blocks: 51.146.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 13:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:d5:b3:f9:74:d2:5d:6a:4b:a7:11:0f:e5:20:21:2a:d2:21:50:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jul 10 10:08:39 2026 GMT
Not After : Jul 9 10:13:39 2027 GMT
Subject: CN=54F42E675E44DB5766A8044FE055FD48759CC324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ef:33:c3:41:08:be:1b:c6:bb:7b:ef:9a:cc:
a1:fa:1a:61:d5:e7:72:55:91:9b:98:e8:fd:d4:eb:
45:2a:1c:a3:3b:cb:e4:0a:7a:f4:d1:0a:58:d0:10:
fc:32:bf:52:8d:aa:04:4b:98:12:0d:87:81:e1:18:
cd:bb:3a:2b:70:71:ba:cb:a0:76:8a:87:9f:f9:93:
9c:ab:f7:8c:7d:e2:e3:e1:b0:37:38:cd:2a:ee:d4:
d2:68:b2:4f:5b:e6:65:9b:6a:01:dc:3e:43:a8:f1:
0a:6e:51:04:60:d3:be:44:c7:de:68:35:1f:22:83:
e2:7b:cb:c4:3e:a3:77:d6:fe:02:5c:f2:cf:40:fb:
d1:65:79:af:53:15:ec:a3:5c:8c:85:dc:c3:43:28:
94:b4:1c:1c:1d:e8:7f:65:69:41:02:84:5d:b8:81:
59:08:39:96:04:1b:c2:ce:80:a6:4a:14:68:bc:8e:
78:e2:51:0a:b0:cb:74:a3:1d:59:ad:86:01:c3:c1:
cf:5b:22:40:a2:1f:dd:ee:ff:e7:13:88:01:b6:74:
37:92:31:25:86:5e:d6:7e:60:75:b0:b6:d4:26:e4:
e7:23:ec:0a:95:86:b2:03:b1:84:ea:51:fd:db:ad:
f3:cf:b1:fb:35:b7:29:10:44:a6:d7:be:ac:a0:67:
02:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F4:2E:67:5E:44:DB:57:66:A8:04:4F:E0:55:FD:48:75:9C:C3:24
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS59447.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.124.0/24
Signature Algorithm: sha256WithRSAEncryption
29:4b:f7:25:63:c2:f3:7b:d6:28:44:cf:46:f4:8f:70:43:cf:
05:70:96:2b:89:eb:6d:51:5f:c3:38:30:b1:c4:95:2c:9a:5a:
10:1d:33:6e:44:dd:af:5b:da:24:f6:9c:61:4d:59:8a:da:1d:
e7:bf:a5:e7:a8:bc:0a:d7:f5:9c:79:23:df:a2:9e:24:e2:b4:
25:83:62:c2:b9:18:02:b9:61:6e:09:e9:06:0b:04:18:d6:53:
99:b2:e5:35:9f:de:e2:9a:32:f5:a5:79:00:4a:8c:22:61:b3:
68:68:65:96:80:eb:e5:27:86:c0:5f:85:22:b4:91:3a:00:52:
8a:c5:8d:9f:25:55:d4:df:f8:96:6c:33:24:da:d3:46:29:8c:
0b:1e:ea:b2:c0:4e:15:3a:42:b6:1d:47:1a:fa:20:f7:be:c1:
3e:cf:30:c8:3d:00:01:fc:ed:bb:ee:e5:7a:04:2c:15:3c:28:
53:92:bd:13:14:0c:47:fe:e6:ca:86:13:fa:df:26:9d:5d:e8:
91:5d:35:27:cc:c7:ad:35:28:d0:9b:7b:ec:64:4d:a8:65:bc:
3b:7c:d2:89:8b:2d:1f:74:c1:a6:c7:cb:93:b2:8a:af:b0:ff:
5f:11:d4:53:9c:d3:70:a2:33:79:8f:dd:4e:39:35:f0:1d:1a:
58:1d:34:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:29 2026 by rpki-client