Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS59642.roa
File: AS59642.roa (raw, json)
Hash identifier: lf4gEII1Kvyqk6iCjeNTaxPv3HHj6g4TALusZz8ytyc=
Subject key identifier: BA:9E:C8:63:F0:87:A4:39:3D:AB:3A:97:53:42:80:88:CF:CE:C9:2B
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 77B60C47756154FEF80C38FF53C1A8340018B5A7
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS59642.roa
Signing time: Wed 12 Aug 2026 14:57:48 +0000
ROA not before: Wed 12 Aug 2026 14:52:48 +0000
ROA not after: Wed 11 Aug 2027 14:57:48 +0000
asID: 59642
IP address blocks: 94.194.96.0/20 maxlen: 24
94.194.176.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:b6:0c:47:75:61:54:fe:f8:0c:38:ff:53:c1:a8:34:00:18:b5:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 12 14:52:48 2026 GMT
Not After : Aug 11 14:57:48 2027 GMT
Subject: CN=BA9EC863F087A4393DAB3A9753428088CFCEC92B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:43:29:79:9f:80:3d:ea:32:cf:d8:52:28:eb:
ec:c2:10:f4:d6:91:17:2e:e8:8a:e4:a7:51:8c:7e:
22:a0:f5:ea:b0:41:b7:fd:f5:f7:d6:01:3e:32:b7:
9f:b6:61:c2:03:b9:ca:9b:cf:03:c6:ad:eb:4a:f7:
20:50:6a:ac:71:ea:bc:fe:7e:0f:3a:8c:de:b4:4c:
7f:05:78:74:c4:a6:a5:09:72:01:5e:fa:e8:e1:2f:
80:1f:40:cd:e2:38:f5:d2:08:89:22:b1:c8:4a:06:
f0:a5:33:4e:a5:cd:01:d6:07:f3:b8:94:e0:07:4c:
4d:13:6d:26:7d:cb:c0:c9:21:db:34:93:6b:20:91:
45:58:29:73:c1:ab:73:7d:05:5b:98:a9:d3:4b:ff:
eb:eb:53:31:6b:77:0a:a9:93:1b:aa:8b:53:59:92:
f3:1b:d7:e6:5c:4f:36:9e:9a:aa:03:5a:f5:d2:21:
81:a2:33:2e:b0:19:69:c0:d4:d1:36:b9:b3:c0:cb:
0a:b2:a3:12:53:6f:26:28:b7:12:99:11:f6:ae:3b:
f4:78:33:f1:79:5f:e5:a0:95:03:80:b2:02:5e:03:
f0:2c:62:be:df:20:fb:70:5d:23:25:e3:99:fa:31:
95:28:7a:2e:63:a4:7b:2f:18:22:3c:c4:1a:ad:e1:
d8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:9E:C8:63:F0:87:A4:39:3D:AB:3A:97:53:42:80:88:CF:CE:C9:2B
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS59642.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.194.96.0/20
94.194.176.0/20
Signature Algorithm: sha256WithRSAEncryption
6b:c8:a5:52:36:66:15:22:d1:3a:be:0e:29:ee:72:86:a2:1f:
f3:46:21:1c:54:30:75:3a:12:2b:7e:5e:0d:6f:e0:05:5d:1b:
7b:65:eb:62:bd:c2:4d:e9:b7:7d:18:f3:64:d9:38:78:05:e8:
17:92:01:ed:ad:72:e3:52:ed:37:56:63:3c:ee:7f:60:f9:2b:
af:7d:14:31:88:f6:0b:ca:f8:cd:5f:a7:1c:c4:44:06:d3:36:
cb:24:63:15:74:98:3b:bc:4d:5a:4e:82:96:5e:a4:1f:76:15:
bc:f3:23:4e:68:ff:6c:d5:2d:9d:2d:d0:a6:a7:9d:f8:46:b8:
32:03:5d:59:d6:4e:d9:05:a5:ab:b9:59:2b:52:9b:c9:f0:70:
0e:17:be:3d:ab:b2:92:16:4b:8f:89:29:42:53:79:3f:bd:07:
3f:c1:f4:ab:53:56:f0:7b:f0:4e:46:b9:71:51:59:7e:ec:4a:
dd:7f:2f:3e:d6:69:14:9b:d1:89:8e:89:42:82:f1:e7:90:82:
70:f0:8b:4b:cb:cb:ee:83:8b:f5:ac:13:68:5a:6f:49:6c:2c:
7d:cc:e0:2a:f4:b6:16:50:0a:1c:64:42:5e:38:9c:97:c6:43:
45:e2:f3:36:f8:b3:02:94:87:de:ff:9d:16:38:cd:aa:f2:28:
9f:00:4c:63
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUd7YMR3VhVP74DDj/U8GoNAAYtacwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA4MTIxNDUyNDhaFw0yNzA4MTExNDU3NDhaMDMxMTAvBgNV
BAMTKEJBOUVDODYzRjA4N0E0MzkzREFCM0E5NzUzNDI4MDg4Q0ZDRUM5MkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjQyl5n4A96jLP2FIo6+zCEPTW
kRcu6Irkp1GMfiKg9eqwQbf99ffWAT4yt5+2YcIDucqbzwPGretK9yBQaqxx6rz+
fg86jN60TH8FeHTEpqUJcgFe+ujhL4AfQM3iOPXSCIkischKBvClM06lzQHWB/O4
lOAHTE0TbSZ9y8DJIds0k2sgkUVYKXPBq3N9BVuYqdNL/+vrUzFrdwqpkxuqi1NZ
kvMb1+ZcTzaemqoDWvXSIYGiMy6wGWnA1NE2ubPAywqyoxJTbyYotxKZEfauO/R4
M/F5X+WglQOAsgJeA/AsYr7fIPtwXSMl45n6MZUoei5jpHsvGCI8xBqt4djZAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUup7IY/CHpDk9qzqXU0KAiM/OySswHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTNTk2NDIucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBARewmAD
BARewrAwDQYJKoZIhvcNAQELBQADggEBAGvIpVI2ZhUi0Tq+DinucoaiH/NGIRxU
MHU6Eit+Xg1v4AVdG3tl62K9wk3pt30Y82TZOHgF6BeSAe2tcuNS7TdWYzzuf2D5
K699FDGI9gvK+M1fpxzERAbTNsskYxV0mDu8TVpOgpZepB92FbzzI05o/2zVLZ0t
0KannfhGuDIDXVnWTtkFpau5WStSm8nwcA4Xvj2rspIWS4+JKUJTeT+9Bz/B9KtT
VvB78E5GuXFRWX7sSt1/Lz7WaRSb0YmOiUKC8eeQgnDwi0vLy+6Di/WsE2hab0ls
LH3M4Cr0thZQChxkQl44nJfGQ0Xi8zb4swKUh97/nRY4zaryKJ8ATGM=
-----END CERTIFICATE-----
Generated at Sat Aug 15 09:19:05 2026 by rpki-client