Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS58485.roa
File: AS58485.roa (raw, json)
Hash identifier: JM6yWWNP0N9aNOqtjZU5vdRkfQBBCgfFmiPc+bw4DpY=
Subject key identifier: 24:B0:7E:6B:8F:3E:B8:02:D5:65:1E:09:12:C9:82:29:F2:64:CA:91
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 3523759D16CA953E4A5738F48F5CFD5C27966DEA
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS58485.roa
Signing time: Mon 10 Aug 2026 23:06:50 +0000
ROA not before: Mon 10 Aug 2026 23:01:50 +0000
ROA not after: Mon 09 Aug 2027 23:06:50 +0000
asID: 58485
IP address blocks: 141.11.88.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:23:75:9d:16:ca:95:3e:4a:57:38:f4:8f:5c:fd:5c:27:96:6d:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Aug 10 23:01:50 2026 GMT
Not After : Aug 9 23:06:50 2027 GMT
Subject: CN=24B07E6B8F3EB802D5651E0912C98229F264CA91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1b:95:7e:ff:33:91:58:d5:6d:da:06:8a:91:
14:82:f8:d2:7c:45:84:e3:d9:ba:32:18:d5:97:24:
70:88:98:6a:16:d1:70:d5:ac:5b:ac:15:40:a6:d5:
e7:f1:a7:4c:57:72:e9:9c:bc:62:ce:0b:17:95:5a:
84:4c:b9:e2:97:93:ac:e8:4d:29:12:e7:01:1e:01:
75:5a:d3:a1:43:e5:67:a3:0a:d6:4b:8b:21:5f:2a:
a8:76:91:1a:4e:c9:b0:05:7b:9d:80:bb:6c:77:f5:
cc:a8:8b:96:43:00:c8:d0:58:c0:3f:d6:12:77:43:
53:6e:56:bc:f8:d1:5a:6e:2a:f4:a3:cc:8a:0a:f9:
ae:d5:2b:56:25:a7:65:77:16:71:b2:b8:c8:1a:27:
94:62:2b:c4:dc:1c:bc:8b:b2:d4:fd:9f:c4:de:cd:
f6:0c:6a:b9:db:1d:1e:33:5a:be:5c:cf:d8:6b:9f:
9a:7d:b9:5c:92:f0:5a:31:4e:bc:5b:5f:4f:d6:4e:
76:17:84:b3:a9:35:78:f8:8d:5c:17:a8:ec:05:52:
3b:74:a7:68:ca:a9:9e:0e:73:7e:48:42:26:04:19:
20:63:bc:da:2e:2b:a6:73:97:1e:e4:db:3e:d5:98:
0b:29:95:d7:5c:d7:41:c0:51:e5:df:95:cf:c8:18:
b1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B0:7E:6B:8F:3E:B8:02:D5:65:1E:09:12:C9:82:29:F2:64:CA:91
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS58485.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.88.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:70:7d:7f:6e:e4:f1:2d:88:61:30:c9:8f:e6:3f:40:2a:00:
53:35:81:8f:ec:2f:81:95:74:c8:c7:7a:76:00:d1:3e:21:db:
1a:4a:1a:6a:b7:70:03:3d:4d:9b:13:cb:17:96:9e:aa:c7:3b:
84:3d:48:21:1a:e1:96:d0:0c:0d:6f:01:f8:fa:96:9c:51:7e:
7b:3b:fe:7e:4f:79:6a:c8:7d:07:12:ee:1a:0d:65:02:48:1a:
0d:80:5e:dd:ad:0a:22:6a:f9:5d:7a:31:82:a3:6f:9d:ca:25:
3e:f8:a1:ef:f3:dc:0f:e4:e3:56:a3:02:ed:8d:49:34:7c:5c:
05:2c:5d:c3:26:c7:16:2f:9d:ac:af:b2:bb:8b:7f:dd:66:fa:
ee:8b:9a:fb:30:60:6b:c2:89:d0:55:79:94:47:43:b4:3f:34:
9c:f1:f5:16:80:0d:3a:41:c9:8f:71:db:2f:21:c5:b5:da:9b:
2f:99:26:9b:e5:65:ea:3f:11:b4:6e:17:0e:ff:22:e0:f9:f6:
a3:c6:9a:0d:5e:d0:71:d8:2e:e0:22:b7:6a:4b:e0:64:0a:ce:
52:8c:91:07:33:99:dc:49:dc:cd:cd:5e:12:14:e2:85:99:0d:
a7:a5:9e:b9:55:37:5d:55:75:57:3d:05:65:f5:8e:37:5c:1a:
8d:47:34:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:51:56 2026 by rpki-client