Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS59796.roa
File: AS59796.roa (raw, json)
Hash identifier: 4+avumfmztSKSY3zS74ckErvlUtY7+kaGCzUqoS50l0=
Subject key identifier: 0D:31:C4:6A:C2:CB:0C:CE:A4:74:BA:A7:8B:AC:64:2F:EC:AD:77:64
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 46AACEBB72ED888C207DCA659B3B1D4D050BA4B9
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS59796.roa
Signing time: Sun 26 Apr 2026 19:20:01 +0000
ROA not before: Sun 26 Apr 2026 19:15:01 +0000
ROA not after: Sun 25 Apr 2027 19:20:01 +0000
asID: 59796
IP address blocks: 95.134.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:aa:ce:bb:72:ed:88:8c:20:7d:ca:65:9b:3b:1d:4d:05:0b:a4:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Apr 26 19:15:01 2026 GMT
Not After : Apr 25 19:20:01 2027 GMT
Subject: CN=0D31C46AC2CB0CCEA474BAA78BAC642FECAD7764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6b:f0:da:1d:01:4b:db:86:58:53:98:6d:1d:
c9:0f:3b:42:9f:eb:a6:ea:2f:5d:b3:7c:80:6b:b0:
1b:be:e3:c9:6b:89:09:e9:95:7a:d8:8a:5a:67:96:
c0:bb:f3:ab:ec:24:f6:12:20:aa:97:f5:25:3e:47:
e0:3c:e5:03:a4:2a:6b:14:91:6c:77:3c:31:ab:d8:
d7:03:97:a5:95:b8:c7:72:d6:24:cf:47:69:db:f2:
88:fe:ab:14:ba:d8:ea:d3:95:13:5a:e1:31:56:7d:
c4:6e:85:fc:a5:06:53:82:bf:2c:25:94:5d:80:45:
de:bf:08:83:b1:a1:40:a8:e4:04:6b:3f:f3:1b:e0:
df:3b:f4:8e:b3:16:97:47:b8:1f:94:81:15:9a:9f:
0c:2e:36:07:7e:a0:0f:25:27:95:52:93:53:a4:2f:
5a:18:1a:c8:09:88:c2:59:0d:fd:84:2b:ac:98:89:
c1:b0:dc:41:c7:bc:30:00:07:ad:b2:69:db:a8:5a:
60:9c:58:80:06:b0:db:25:2d:87:a1:2b:be:49:ed:
d9:6f:af:d2:70:4d:1e:e5:50:d2:db:b2:1c:59:fe:
0f:06:e2:76:5b:a1:57:8d:8d:ab:9f:d2:5f:3e:09:
e6:74:a3:36:40:bb:6a:1d:2a:98:25:a1:d8:55:04:
5c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:31:C4:6A:C2:CB:0C:CE:A4:74:BA:A7:8B:AC:64:2F:EC:AD:77:64
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS59796.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.134.4.0/24
Signature Algorithm: sha256WithRSAEncryption
07:21:bb:2f:7d:19:d2:7c:9f:9c:ae:31:19:f9:e6:6a:fa:f9:
a9:04:aa:4b:7b:1c:f9:fb:0a:6c:e7:49:21:da:04:ac:ec:75:
18:67:4a:be:6f:80:08:bc:0f:3d:d0:f0:85:95:d7:bc:cf:12:
7c:ac:11:74:ab:5e:46:07:e1:fe:ce:ef:5d:19:d5:c4:48:1c:
ff:42:37:d2:41:e0:1e:08:21:b0:f6:0a:22:b1:df:98:97:62:
30:1f:e5:0b:ef:93:cb:34:e8:dc:eb:26:17:d5:fb:6c:3e:8d:
72:6f:47:82:4f:7f:ed:ab:80:ca:d1:22:04:fe:d4:0f:a8:fc:
cb:09:b8:ab:2c:8b:88:51:1a:30:4e:cb:1a:4f:45:96:11:90:
81:96:d9:61:e0:ab:80:4c:c7:ba:e7:08:dc:f5:c8:87:f0:e0:
47:e1:19:6e:ca:77:54:74:f5:a0:32:03:69:e5:41:52:42:30:
8d:e2:03:66:30:42:85:70:cd:ac:57:38:54:06:76:ab:c2:f9:
d4:14:e9:a1:0d:49:be:e2:3d:e0:fe:4e:47:ef:0d:70:1b:fa:
db:d5:47:83:a9:c0:dc:7d:84:63:54:40:31:89:71:68:c6:61:
5b:31:e0:36:5c:70:80:9d:d3:70:f9:9d:c3:cd:21:82:46:cd:
bc:f1:d0:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 06:25:00 2026 by rpki-client