Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS59432.roa
File: AS59432.roa (raw, json)
Hash identifier: 8YrmadtTtatO0DmbioFGX3Awe+ZBcwP8MJDJN5ktDcg=
Subject key identifier: 62:63:7B:6E:B6:9E:7C:60:A5:14:39:C4:9B:96:66:84:80:CE:C2:89
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 369BB25CF4EB814DC63445E74FE370828E58DD0A
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS59432.roa
Signing time: Fri 17 Oct 2025 07:31:37 +0000
ROA not before: Fri 17 Oct 2025 07:26:37 +0000
ROA not after: Fri 16 Oct 2026 07:31:37 +0000
asID: 59432
IP address blocks: 143.14.91.0/24 maxlen: 24
167.148.183.0/24 maxlen: 24
167.148.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:9b:b2:5c:f4:eb:81:4d:c6:34:45:e7:4f:e3:70:82:8e:58:dd:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 17 07:26:37 2025 GMT
Not After : Oct 16 07:31:37 2026 GMT
Subject: CN=62637B6EB69E7C60A51439C49B96668480CEC289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:74:da:e2:5c:5a:55:c7:43:42:ae:f3:69:bf:
d0:8c:5d:08:2c:20:ba:44:7d:a4:61:bb:a5:2a:1c:
3f:95:41:07:11:66:ef:a5:01:0e:db:49:30:92:b1:
dc:35:7a:51:37:eb:e6:b2:5a:74:08:05:61:66:1e:
ff:71:43:c8:e0:bb:78:45:7f:62:e4:54:5e:0c:91:
4d:3d:37:d5:4a:36:17:35:6c:04:ea:de:7b:3c:08:
fa:b3:24:cf:86:9d:72:c7:de:38:73:41:df:86:85:
d3:98:23:9d:d4:6a:12:2a:09:16:28:b6:f4:10:e8:
fe:5c:ff:2b:fa:cd:c0:a2:7c:7e:0b:ea:22:36:09:
8e:2d:15:4b:a2:c1:6b:f5:3a:fc:6f:4d:1a:a8:bf:
11:f9:e9:0e:c7:05:07:1b:21:70:75:cc:61:7f:f4:
b5:53:f4:14:cb:5d:21:50:04:f6:b6:b0:d5:8a:d9:
f4:03:04:97:16:90:7d:8b:6f:39:55:b0:74:32:93:
1c:a2:93:2e:f9:c3:4c:32:b5:30:91:84:94:0e:7d:
f1:4a:e9:d0:a5:f3:94:91:46:28:2c:5d:dc:9a:ed:
49:44:03:e7:ce:b9:a6:b4:61:0a:63:63:76:17:81:
8a:9e:1d:3f:3e:a1:19:f0:1a:ba:d4:7c:e9:94:b5:
3a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:63:7B:6E:B6:9E:7C:60:A5:14:39:C4:9B:96:66:84:80:CE:C2:89
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS59432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.91.0/24
167.148.183.0/24
167.148.202.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:da:94:2d:81:14:f3:e7:d8:5a:b6:7b:83:7d:7d:75:44:89:
e0:35:2d:3f:10:78:18:eb:17:ff:dd:7d:ed:39:37:24:fe:5d:
61:40:c3:b2:54:68:39:7c:72:c4:d7:f8:43:7d:04:06:c8:af:
8e:47:1e:bf:60:32:a1:e4:07:81:a9:fb:7f:54:61:c9:2a:5b:
60:c2:20:c9:d3:75:16:de:c7:c4:17:a3:6f:9e:38:ee:f8:72:
ec:48:84:ec:d3:ce:a2:a7:92:31:ca:33:b3:a5:8f:53:72:97:
a7:24:64:29:3a:79:f9:e8:a7:e7:29:3a:c9:8b:91:df:2c:fb:
60:5f:54:b3:cd:71:cd:a5:74:a3:7c:e7:a7:af:c6:cd:5b:7a:
74:d8:fc:af:f4:ee:e2:5f:31:bc:de:fb:01:3d:ca:75:d8:3c:
af:85:44:93:cc:60:80:64:5d:c2:9f:25:be:0d:c4:87:39:33:
9d:ad:56:69:05:a5:4a:17:e9:6f:71:4e:ac:ce:a1:36:4c:c4:
12:84:32:12:d2:f4:16:7d:8c:c6:eb:23:c4:b6:7b:8d:05:9f:
2c:7c:b6:b0:80:fb:2f:cb:ea:11:0c:8e:c2:af:86:15:fc:22:
71:0a:25:47:3b:ef:df:17:07:2d:39:16:aa:69:24:0c:2b:76:
44:0e:98:fb
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIUNpuyXPTrgU3GNEXnT+Nwgo5Y3QowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNTEwMTcwNzI2MzdaFw0yNjEwMTYwNzMxMzdaMDMxMTAvBgNV
BAMTKDYyNjM3QjZFQjY5RTdDNjBBNTE0MzlDNDlCOTY2Njg0ODBDRUMyODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUdNriXFpVx0NCrvNpv9CMXQgs
ILpEfaRhu6UqHD+VQQcRZu+lAQ7bSTCSsdw1elE36+ayWnQIBWFmHv9xQ8jgu3hF
f2LkVF4MkU09N9VKNhc1bATq3ns8CPqzJM+GnXLH3jhzQd+GhdOYI53UahIqCRYo
tvQQ6P5c/yv6zcCifH4L6iI2CY4tFUuiwWv1OvxvTRqovxH56Q7HBQcbIXB1zGF/
9LVT9BTLXSFQBPa2sNWK2fQDBJcWkH2LbzlVsHQykxyiky75w0wytTCRhJQOffFK
6dCl85SRRigsXdya7UlEA+fOuaa0YQpjY3YXgYqeHT8+oRnwGrrUfOmUtTo5AgMB
AAGjggIVMIICETAdBgNVHQ4EFgQUYmN7braefGClFDnEm5ZmhIDOwokwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTNTk0MzIucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBACPDlsD
BACnlLcDBACnlMowDQYJKoZIhvcNAQELBQADggEBAKTalC2BFPPn2Fq2e4N9fXVE
ieA1LT8QeBjrF//dfe05NyT+XWFAw7JUaDl8csTX+EN9BAbIr45HHr9gMqHkB4Gp
+39UYckqW2DCIMnTdRbex8QXo2+eOO74cuxIhOzTzqKnkjHKM7Olj1Nyl6ckZCk6
efnop+cpOsmLkd8s+2BfVLPNcc2ldKN856evxs1benTY/K/07uJfMbze+wE9ynXY
PK+FRJPMYIBkXcKfJb4NxIc5M52tVmkFpUoX6W9xTqzOoTZMxBKEMhLS9BZ9jMbr
I8S2e40Fnyx8trCA+y/L6hEMjsKvhhX8InEKJUc7798XBy05FqppJAwrdkQOmPs=
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:26:42 2025 by rpki-client