Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS4593.roa
File: AS4593.roa (raw, json)
Hash identifier: zXzYWRduyDK4d/4yDhfcSJyW0iyQ6XP9nUvi1YcicD0=
Subject key identifier: 19:70:DA:1B:68:77:8C:B9:72:6D:15:E7:5A:4C:1B:F6:02:9D:A9:56
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 62E902C93612419F462FCAB92B00393D170ECFE6
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS4593.roa
Signing time: Sat 09 May 2026 07:31:54 +0000
ROA not before: Sat 09 May 2026 07:26:54 +0000
ROA not after: Sat 08 May 2027 07:31:54 +0000
asID: 4593
IP address blocks: 84.75.139.0/24 maxlen: 24
178.83.144.0/24 maxlen: 24
178.83.153.0/24 maxlen: 24
178.83.155.0/24 maxlen: 24
178.83.180.0/24 maxlen: 24
178.83.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:e9:02:c9:36:12:41:9f:46:2f:ca:b9:2b:00:39:3d:17:0e:cf:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 9 07:26:54 2026 GMT
Not After : May 8 07:31:54 2027 GMT
Subject: CN=1970DA1B68778CB9726D15E75A4C1BF6029DA956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7e:05:53:e9:58:5a:ee:82:57:48:a9:93:34:
67:f7:68:44:c0:66:44:10:59:c5:b5:b3:17:92:e0:
d4:6a:14:39:8e:0b:d7:f1:67:9c:28:b6:cf:dd:b3:
b2:86:66:c0:ed:fe:21:93:42:c7:88:2b:29:45:e8:
fe:f8:63:7a:d8:8d:8d:3e:74:0d:37:83:02:f6:a0:
0c:a8:69:a3:7e:00:99:02:ea:16:48:ad:ea:f7:e2:
6e:c7:ee:95:90:f7:99:7d:5d:78:c8:f0:54:63:4c:
02:07:38:84:7a:5f:e3:b1:07:08:c7:58:03:4d:4f:
c2:d7:d0:aa:b3:17:b8:b1:e3:ee:e5:ae:20:9d:b7:
55:0f:05:79:9a:73:7e:a1:9a:ef:39:36:86:58:59:
e1:be:6a:97:b3:89:e0:f8:b0:02:82:a6:97:b4:90:
b9:17:d8:c6:b3:ef:17:a7:c5:46:e1:df:43:11:21:
68:86:06:20:54:a4:75:6c:cd:a6:9f:54:ed:1b:c6:
56:7f:b9:1f:ec:53:1e:83:77:34:0e:73:17:24:43:
52:21:ae:4c:7c:1a:8c:4c:78:13:75:12:c9:3b:65:
a0:58:e9:7c:6f:2a:2f:61:72:71:43:09:03:fa:e6:
5f:30:51:ec:af:8b:cb:99:ed:d2:5f:01:cb:2b:8d:
68:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:70:DA:1B:68:77:8C:B9:72:6D:15:E7:5A:4C:1B:F6:02:9D:A9:56
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS4593.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.75.139.0/24
178.83.144.0/24
178.83.153.0/24
178.83.155.0/24
178.83.180.0/24
178.83.207.0/24
Signature Algorithm: sha256WithRSAEncryption
57:1e:b9:0b:61:4b:9c:97:42:44:f2:d9:e0:63:25:1b:57:21:
e8:04:e6:c7:53:f9:c0:95:21:d6:e3:47:bc:81:f6:9c:0a:30:
cb:70:3b:eb:ce:39:3c:1d:75:fa:8b:a2:13:4d:df:d3:d2:73:
52:63:b9:88:42:fe:d9:10:8b:c9:9f:2b:3c:dd:0e:cf:39:dd:
7a:e4:5b:ab:ff:cb:f3:f8:3a:4d:09:01:dd:da:1c:15:67:0f:
7c:fa:a8:68:65:d6:7f:17:4d:48:95:1a:db:f3:68:52:48:ce:
87:66:74:a8:c6:c6:39:89:d2:f1:f2:b4:d8:db:ce:90:da:db:
df:85:4a:83:f4:9d:b4:68:a7:9e:c6:d2:7a:46:ec:73:b1:3d:
90:1c:d8:a2:a2:de:c2:7f:84:ac:6b:ec:ca:c7:f1:17:f5:af:
c2:dc:cd:76:d1:18:91:16:85:07:da:7a:9f:27:97:86:fa:12:
1c:8a:03:fd:b4:3b:0c:59:00:ff:5a:72:e4:02:8e:26:98:07:
2b:8d:22:85:32:47:d7:ea:e2:80:06:d1:81:f6:a8:09:12:67:
e4:22:6e:30:9e:55:d0:0c:86:34:04:a9:dd:07:96:c8:41:2c:
59:8c:43:41:93:51:0d:f7:44:55:60:88:90:94:06:9e:a9:ba:
91:33:a5:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:38:47 2026 by rpki-client