Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS58202.roa
File: AS58202.roa (raw, json)
Hash identifier: HHlf7mV2SsuLYsbD1rnws31FOXZO5eN6WeQ0Bvo+7u0=
Subject key identifier: B4:26:AE:41:FD:50:BB:04:37:E6:F3:EC:61:59:C5:F8:4D:C7:38:E8
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 1B8CF6213D3860C35E92DFD96ADA21690436CCA9
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS58202.roa
Signing time: Thu 16 Jul 2026 02:27:26 +0000
ROA not before: Thu 16 Jul 2026 02:22:26 +0000
ROA not after: Thu 15 Jul 2027 02:27:26 +0000
asID: 58202
IP address blocks: 2a14:7580::/44 maxlen: 48
2a14:7580::/48 maxlen: 48
2a14:7580:1::/48 maxlen: 48
2a14:7580:2::/48 maxlen: 48
2a14:7580:3::/48 maxlen: 48
2a14:7581:5a00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:8c:f6:21:3d:38:60:c3:5e:92:df:d9:6a:da:21:69:04:36:cc:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jul 16 02:22:26 2026 GMT
Not After : Jul 15 02:27:26 2027 GMT
Subject: CN=B426AE41FD50BB0437E6F3EC6159C5F84DC738E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:20:31:69:a6:90:d9:82:c5:ea:36:8b:7f:b1:
3e:f3:54:17:df:db:b0:05:c0:e8:5e:82:8b:63:4d:
1c:0c:88:d9:23:3e:7b:64:0c:6a:98:9f:aa:22:ca:
b5:55:e8:79:a8:60:88:c1:b3:ff:18:a5:41:75:9d:
b2:7c:54:d5:c5:6a:4b:e6:90:16:64:da:40:9e:c8:
06:6d:12:93:4f:f2:25:89:ec:ba:f7:af:ab:8f:b6:
1b:7b:8d:82:e0:9e:c9:00:d8:a5:0f:26:0c:e7:7f:
a3:71:c3:7c:f7:a0:89:6e:ea:d3:14:a9:0d:45:cd:
41:b3:fb:c5:ac:27:2a:c9:89:c6:b3:8d:fe:21:a7:
aa:f1:23:74:f5:3b:b9:64:2f:8c:64:ab:35:34:8d:
26:a6:ac:db:e6:8e:a2:a2:73:7d:b7:74:b0:e9:02:
fd:d4:15:3e:8a:6c:ab:fd:4c:1d:86:65:90:34:a7:
4c:74:a1:38:98:ee:b7:03:35:2b:bc:c2:05:ea:6e:
a6:94:8d:8f:de:8a:64:02:e8:84:e5:13:51:76:6f:
fc:7a:18:24:f1:0a:18:37:20:1f:ee:1a:ce:c4:ad:
66:d3:30:55:64:67:8f:7d:55:c5:6f:16:54:82:ea:
3f:e5:55:7a:df:99:82:33:a5:05:0b:44:ea:dd:65:
f8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:26:AE:41:FD:50:BB:04:37:E6:F3:EC:61:59:C5:F8:4D:C7:38:E8
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS58202.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580::/44
2a14:7581:5a00::/40
Signature Algorithm: sha256WithRSAEncryption
45:38:e1:bc:5a:57:38:b8:d8:56:d3:2d:9f:62:5a:55:e1:99:
d9:f8:ad:be:3c:0b:b8:04:72:48:45:4f:b6:28:11:3d:26:ac:
6e:1e:b6:6d:b6:e7:74:36:d4:e0:aa:12:55:8a:da:a6:e5:50:
0c:8b:65:f8:ef:58:49:fd:dd:da:88:ee:75:be:82:d9:39:36:
48:a0:9e:93:70:49:f8:ce:97:05:58:47:5a:a2:fb:ec:3f:82:
14:38:91:aa:86:77:44:88:22:f1:16:6c:f0:da:a4:59:6c:d0:
9b:9e:91:2e:1d:2a:50:b0:ce:15:4a:09:1d:1d:ac:dd:05:a5:
f1:a9:4c:52:23:9f:f5:ab:5c:3a:c4:02:46:47:74:b1:6b:53:
2a:07:49:93:39:8b:05:9e:7b:5e:ff:1a:18:9a:e0:1f:0e:4a:
13:f8:6d:7f:79:5c:34:11:0b:ef:1c:0d:31:c1:6f:3e:5b:ca:
e0:2c:23:0f:1a:27:65:ff:3d:01:ba:cf:f8:1e:c3:a3:4c:ae:
3b:de:7f:a2:fe:55:ac:62:be:d3:9d:9b:4c:5e:9c:d3:4c:80:
93:d7:a8:d4:b8:c8:7b:f2:77:43:4f:59:8b:cb:6c:92:a9:9f:
fa:c7:db:fa:3e:07:fb:98:aa:b4:4b:48:78:53:42:ee:88:e7:
13:b2:55:22
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:42:18 2026 by rpki-client