Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS57043.roa
File: AS57043.roa (raw, json)
Hash identifier: ZeM2Isz4fsQqVuU5DpOcQhRjjifgBoLDl7JLL+IgtFA=
Subject key identifier: 7C:DF:BA:B2:FE:AF:FF:8C:71:87:AE:05:00:87:CD:55:6A:01:41:C9
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 3FE18F9F6AE8D3A997CAF09E216D2DCB5D9A268E
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS57043.roa
Signing time: Wed 09 Sep 2026 10:48:08 +0000
ROA not before: Wed 09 Sep 2026 10:43:08 +0000
ROA not after: Wed 08 Sep 2027 10:48:08 +0000
asID: 57043
IP address blocks: 96.62.219.0/24 maxlen: 24
140.150.226.0/24 maxlen: 24
140.150.238.0/24 maxlen: 24
145.223.3.0/24 maxlen: 24
146.103.25.0/24 maxlen: 24
148.135.175.0/24 maxlen: 24
148.135.184.0/24 maxlen: 24
148.135.185.0/24 maxlen: 24
148.135.202.0/24 maxlen: 24
148.135.203.0/24 maxlen: 24
148.135.208.0/24 maxlen: 24
148.135.209.0/24 maxlen: 24
148.135.211.0/24 maxlen: 24
150.241.228.0/24 maxlen: 24
150.241.239.0/24 maxlen: 24
162.141.93.0/24 maxlen: 24
162.141.123.0/24 maxlen: 24
167.148.156.0/24 maxlen: 24
167.148.170.0/24 maxlen: 24
167.148.209.0/24 maxlen: 24
167.148.223.0/24 maxlen: 24
168.222.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:e1:8f:9f:6a:e8:d3:a9:97:ca:f0:9e:21:6d:2d:cb:5d:9a:26:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 9 10:43:08 2026 GMT
Not After : Sep 8 10:48:08 2027 GMT
Subject: CN=7CDFBAB2FEAFFF8C7187AE050087CD556A0141C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f7:20:89:36:46:18:e1:32:4a:64:e8:6f:fe:
3c:bd:e3:c2:f1:b6:ed:ef:64:b3:a6:a6:fd:57:d0:
fc:88:f5:fb:b0:0f:73:4e:32:2e:c2:d2:bb:de:1e:
5a:68:47:ee:ab:b8:bd:30:3b:8a:e4:9d:2d:ce:7b:
78:f6:f3:99:c0:56:e3:56:8d:1c:f3:4f:c4:52:1f:
74:53:2b:f0:16:b5:7e:7b:db:f3:08:d5:c1:63:5d:
6c:17:67:98:6d:0c:e1:af:1a:fa:ef:1d:f2:d7:7c:
b2:f1:26:77:f6:d9:b7:e3:95:ca:8e:c4:10:ce:81:
17:2f:8e:3b:0d:04:e7:3a:7a:b4:74:1e:5b:b5:28:
d3:ce:c7:a6:27:fa:10:bb:c6:53:68:e1:e2:40:57:
d9:ce:6d:0c:be:3c:a4:a2:1a:d9:f8:aa:10:fa:b6:
ac:31:2e:44:da:62:c9:42:a6:a2:9e:d0:e5:b2:50:
14:3f:06:ef:d5:61:c6:b8:8f:1f:fc:06:cf:3c:a1:
73:69:7c:eb:89:72:32:b2:00:e9:c0:c9:97:45:c2:
50:ec:ab:f7:47:16:7d:ab:3b:9c:41:78:52:46:6b:
58:49:d8:04:10:9f:9b:80:b9:01:4a:52:16:79:22:
75:ad:4c:a4:10:b1:38:0d:3d:79:c8:a0:c4:39:c7:
af:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:DF:BA:B2:FE:AF:FF:8C:71:87:AE:05:00:87:CD:55:6A:01:41:C9
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS57043.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.219.0/24
140.150.226.0/24
140.150.238.0/24
145.223.3.0/24
146.103.25.0/24
148.135.175.0/24
148.135.184.0/23
148.135.202.0/23
148.135.208.0/23
148.135.211.0/24
150.241.228.0/24
150.241.239.0/24
162.141.93.0/24
162.141.123.0/24
167.148.156.0/24
167.148.170.0/24
167.148.209.0/24
167.148.223.0/24
168.222.78.0/24
Signature Algorithm: sha256WithRSAEncryption
58:aa:25:a7:ca:88:c0:65:d4:4b:99:54:7b:63:93:93:04:f6:
ca:21:32:71:40:b6:3b:c6:1f:81:cc:ae:28:40:77:1d:67:17:
a7:4b:07:0c:a1:66:e3:e2:84:ec:88:f9:80:ed:5a:cf:97:57:
91:2e:22:ef:ee:79:73:f0:ac:49:b5:ee:99:15:a8:5d:06:f0:
bb:a1:09:cc:42:64:4f:e3:44:e8:3a:0f:e3:e7:26:c7:59:86:
1d:38:24:17:48:78:09:66:81:74:ba:dd:a2:50:fe:26:50:60:
13:e4:0f:ea:fa:4b:81:5e:9e:e5:5f:cf:6f:94:a7:cc:f5:f8:
d7:c7:79:c3:15:a1:6d:49:2f:78:9c:3d:ab:35:0f:69:3c:09:
2a:40:cb:27:c7:2f:e1:09:d1:97:a6:d0:b3:11:eb:6a:53:f0:
64:b4:17:20:17:5f:a3:83:43:ce:49:6c:20:90:5b:98:a6:67:
3c:73:2e:94:24:21:59:79:9b:cc:63:41:dc:75:d8:4f:f4:ad:
1e:32:4c:e8:f8:23:a7:3c:22:14:3b:82:19:62:68:a4:cc:35:
f8:e2:51:f6:73:c7:1a:b8:76:8b:66:6b:a7:42:11:f5:3d:e4:
7a:0d:cc:d2:3d:2a:7a:41:93:87:02:87:2f:79:bb:4d:56:b8:
2f:37:e0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 15:46:27 2026 by rpki-client