Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS58232.roa
File: AS58232.roa (raw, json)
Hash identifier: mpMDlUxgcJdVBzC9pfkx+yMXmMiA+BTKPGms7bAi0AQ=
Subject key identifier: 66:33:B2:69:A5:B7:F3:52:AF:93:E3:03:35:41:B0:FD:1E:C1:8E:86
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 42EDA16BCBC17FE7592E96468D83B3368138A32C
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS58232.roa
Signing time: Wed 22 Jul 2026 20:40:30 +0000
ROA not before: Wed 22 Jul 2026 20:35:30 +0000
ROA not after: Wed 21 Jul 2027 20:40:30 +0000
asID: 58232
IP address blocks: 140.150.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:ed:a1:6b:cb:c1:7f:e7:59:2e:96:46:8d:83:b3:36:81:38:a3:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 22 20:35:30 2026 GMT
Not After : Jul 21 20:40:30 2027 GMT
Subject: CN=6633B269A5B7F352AF93E3033541B0FD1EC18E86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e1:fb:4b:36:b3:6f:64:f0:26:a6:25:23:b2:
35:82:ca:cb:df:a2:b7:0c:28:2a:a7:98:34:68:a5:
3e:ed:b4:d8:23:d1:ec:6e:19:3b:6e:d7:cd:19:01:
60:95:08:60:66:78:bb:90:3e:a2:75:3f:fb:bf:82:
a0:b3:be:6c:08:77:ab:f9:6c:e4:5d:47:29:08:16:
d6:45:17:06:d0:8d:eb:75:31:57:b5:72:29:fe:a0:
7e:71:87:ac:bd:cc:f4:9c:43:f0:69:01:ab:9d:d0:
f7:64:2b:5c:28:fa:08:03:41:0f:0c:36:47:06:a9:
08:35:6e:04:e6:50:60:67:48:10:57:b4:3a:18:48:
ed:5e:ca:f6:49:b7:a8:a0:e5:c2:05:8c:cd:cd:d1:
3e:8f:6f:01:fa:10:46:07:7a:ab:17:9f:77:3f:48:
13:b1:ea:c1:e0:10:0f:d0:cd:92:64:bf:86:70:6d:
2d:67:dd:25:1d:18:13:71:f9:88:2e:96:b0:16:4b:
dd:17:8b:85:d7:84:da:97:41:ba:c0:dd:85:25:c4:
4b:a6:c5:07:08:b2:1c:f1:50:35:41:3f:27:7c:eb:
48:53:bb:28:53:79:ae:19:f8:7b:ff:93:37:0e:02:
7f:5b:99:74:1a:d0:fb:18:25:3b:95:5a:b7:48:39:
72:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:33:B2:69:A5:B7:F3:52:AF:93:E3:03:35:41:B0:FD:1E:C1:8E:86
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS58232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.224.0/24
Signature Algorithm: sha256WithRSAEncryption
12:8c:b9:2d:ff:16:e8:aa:1a:80:bc:52:3c:c6:52:b9:91:c2:
cd:8e:cd:82:a7:6c:ec:e9:64:50:3d:4a:bd:40:1d:98:1c:2a:
86:9f:c4:c2:95:69:0a:d3:e7:9a:6e:2e:c5:3e:46:f3:03:65:
a9:c9:f7:43:88:6f:16:64:83:85:bb:74:74:ce:b1:78:86:7d:
b4:c2:b8:cf:87:09:ab:2b:c3:fa:3b:74:4c:6a:86:e3:50:b5:
2b:9e:4e:b7:a8:7d:de:71:38:36:fa:ea:78:2a:1b:49:d0:b4:
31:d9:12:87:12:71:d3:bf:62:95:95:a1:a1:c8:d6:4f:d5:f6:
ee:01:80:57:51:ce:13:7f:8d:07:57:11:81:2c:97:60:81:17:
50:c7:c6:28:a5:39:a4:4a:35:d9:84:d9:09:60:e8:1d:d7:5d:
ea:4c:7a:83:9f:0d:a5:e5:8c:7c:82:df:08:fa:65:12:1e:9d:
a6:25:6a:48:81:6f:6d:a0:4c:80:2d:ba:40:d5:8f:ad:57:f7:
61:f7:55:77:ea:51:03:f2:30:23:30:4b:c5:bd:37:17:5d:6d:
d2:8e:61:48:e0:de:40:21:ef:8d:c3:69:7b:26:03:57:8e:a2:
2f:28:41:3c:8f:97:ad:c6:67:86:3f:c3:e4:6e:df:9a:bb:55:
bf:08:b9:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:01:19 2026 by rpki-client