Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS59432.roa
File: AS59432.roa (raw, json)
Hash identifier: rCqeAK3NePnnESxw6ogshWEUr/7ZLLs+Faw94wduUhA=
Subject key identifier: 34:D2:6A:01:D9:31:BB:78:33:BD:1A:4D:A0:DC:B8:3F:F8:FF:A2:32
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 65947207D15F0CBEABD8D59232741E9DD15A4CDC
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS59432.roa
Signing time: Fri 17 Oct 2025 07:31:35 +0000
ROA not before: Fri 17 Oct 2025 07:26:35 +0000
ROA not after: Fri 16 Oct 2026 07:31:35 +0000
asID: 59432
IP address blocks: 193.111.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:94:72:07:d1:5f:0c:be:ab:d8:d5:92:32:74:1e:9d:d1:5a:4c:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Oct 17 07:26:35 2025 GMT
Not After : Oct 16 07:31:35 2026 GMT
Subject: CN=34D26A01D931BB7833BD1A4DA0DCB83FF8FFA232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9e:69:e7:21:1f:e0:99:10:53:7a:53:8d:c5:
a1:b1:75:35:f7:27:82:3f:0e:a0:d7:cf:79:bd:d0:
2d:0e:a8:a7:ec:45:c4:25:64:9c:a5:5d:52:ca:9a:
33:4a:66:f0:0a:41:36:f6:36:d1:7f:31:5a:db:3f:
b6:14:a6:ac:f6:42:14:fd:29:93:d8:7f:c5:31:bf:
c3:87:90:4d:48:08:17:37:f5:42:9a:80:8b:26:94:
ed:4b:95:54:15:80:b8:32:57:c7:d3:c6:20:b1:11:
f7:14:00:12:69:75:64:af:d5:5a:54:79:df:7b:cf:
89:61:9b:fb:4f:5e:1c:84:3a:45:b1:62:a3:78:aa:
cb:38:db:a1:3a:88:2e:d4:64:43:a2:2c:14:84:cd:
fd:7a:9c:4c:93:81:b4:47:a5:e5:b9:88:d9:bf:9c:
f1:c0:a7:aa:11:a3:a0:17:fe:ad:a7:de:af:cc:a6:
66:72:4f:2f:39:e4:cb:9b:ea:cb:e5:79:54:c7:82:
96:b0:61:24:0c:fd:56:92:e6:da:a1:2b:80:cc:4a:
d4:9b:29:d0:8b:46:95:d3:64:8d:c3:1a:a4:25:f4:
bd:8d:a3:a4:05:f4:6c:86:df:dc:70:0e:cd:18:d9:
aa:41:7f:89:21:54:65:d4:7f:31:b2:e7:6a:29:e5:
af:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D2:6A:01:D9:31:BB:78:33:BD:1A:4D:A0:DC:B8:3F:F8:FF:A2:32
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS59432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.116.0/24
Signature Algorithm: sha256WithRSAEncryption
53:09:d6:e8:c8:8f:8c:cd:8c:17:7f:93:dc:f5:d3:a3:af:b2:
00:66:04:9d:81:15:73:5d:84:80:dc:85:f9:b6:59:a2:56:9e:
fa:5e:f3:cc:3c:fc:56:0f:e4:57:a2:ff:2e:84:4b:61:85:72:
84:ac:69:9d:cb:38:64:c7:92:ea:32:4b:fc:15:b5:f4:78:dc:
f3:07:72:31:32:16:5b:5f:fd:8b:48:4b:ff:6d:2a:0c:68:ae:
0d:73:87:6a:44:1b:33:c5:ca:1c:fe:a9:f0:f1:fa:d8:b5:e5:
cf:d2:9e:33:da:4d:fb:b0:24:d0:69:9e:9f:6c:81:18:9a:5e:
12:30:3d:14:08:86:57:f2:e7:ce:fa:33:db:36:d7:b8:02:e3:
af:4e:78:2d:33:45:53:d4:96:c3:ac:51:4a:c3:3b:98:ec:1f:
7a:b8:f2:b9:7c:6f:17:be:5e:6f:67:93:dd:65:5c:3e:04:1d:
68:5a:0c:61:65:ac:96:8c:64:92:2b:34:1d:cc:7f:84:0d:7f:
2a:44:cc:50:b3:3d:5b:8f:b6:ed:e6:28:57:60:5a:94:86:2d:
b4:27:50:ec:d9:b0:43:db:fd:6a:76:8e:f9:e6:80:6e:2e:ac:
eb:d4:4f:73:c4:7a:22:b5:57:a1:02:ad:18:a2:ef:31:0a:c3:
ca:b4:1f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:19:22 2025 by rpki-client