Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS57043.roa
File: AS57043.roa (raw, json)
Hash identifier: slFiRxWhRN4YJ2hjF/jSL/6HnRX0kOS/jcPTQVs4b7M=
Subject key identifier: F6:6C:76:32:DB:88:B2:C2:DE:6F:BB:AE:88:47:D4:D7:31:21:53:3D
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 488CA519ED257BCD84DF00F5A249F490B3045D03
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS57043.roa
Signing time: Mon 27 Jul 2026 12:16:14 +0000
ROA not before: Mon 27 Jul 2026 12:11:14 +0000
ROA not after: Mon 26 Jul 2027 12:16:14 +0000
asID: 57043
IP address blocks: 181.41.216.0/24 maxlen: 24
181.214.115.0/24 maxlen: 24
185.135.156.0/24 maxlen: 24
191.101.113.0/24 maxlen: 24
194.110.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:8c:a5:19:ed:25:7b:cd:84:df:00:f5:a2:49:f4:90:b3:04:5d:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jul 27 12:11:14 2026 GMT
Not After : Jul 26 12:16:14 2027 GMT
Subject: CN=F66C7632DB88B2C2DE6FBBAE8847D4D73121533D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:09:09:35:fc:08:c2:c2:2e:9c:bf:83:bc:6e:
3c:9e:ef:eb:a2:18:b7:9d:cd:27:6e:6d:76:4d:e9:
a9:40:d6:a8:de:af:00:83:38:16:55:83:37:48:81:
31:6b:50:25:9b:68:a2:5c:e4:24:ac:1b:d6:1d:05:
da:ad:cc:52:92:fa:fe:6b:b3:11:3c:90:e9:a9:f4:
2e:76:d0:79:97:ea:e0:d5:3d:f0:dc:cd:f2:78:8d:
e7:19:27:76:4d:43:6d:65:7e:02:02:e7:d1:4e:eb:
e5:c8:26:fd:66:e1:d8:4d:30:c4:79:7c:f3:89:be:
04:d3:ca:43:70:25:58:e1:f2:f6:7e:e0:f8:2a:7a:
35:0e:bd:4b:86:01:5e:4c:2d:f9:18:3c:48:c1:ad:
14:ed:60:a0:c1:09:16:a2:0e:11:b2:3d:26:37:e2:
14:b4:45:24:ae:4d:63:6b:12:99:c6:d7:77:01:33:
86:d4:95:e4:9a:97:24:3d:01:c6:51:fa:f7:cd:ff:
19:f2:36:d3:86:ba:a1:b9:cd:d5:98:09:31:2e:f0:
c1:b1:75:cd:88:fa:fa:d4:e9:99:60:c9:36:42:91:
de:b2:f5:34:0b:27:c3:b7:9c:b5:68:b7:43:66:67:
6c:27:bd:7a:66:58:8c:02:cc:da:0e:81:f4:20:64:
e0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:6C:76:32:DB:88:B2:C2:DE:6F:BB:AE:88:47:D4:D7:31:21:53:3D
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS57043.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.41.216.0/24
181.214.115.0/24
185.135.156.0/24
191.101.113.0/24
194.110.242.0/24
Signature Algorithm: sha256WithRSAEncryption
70:c2:e3:e1:92:e7:4d:17:0c:ad:99:c3:c0:af:28:c7:3e:a4:
ba:ff:a4:94:4a:24:12:68:50:a4:36:2f:0f:f8:69:df:8c:3f:
ec:a4:eb:ad:99:cc:ec:8f:86:7f:52:93:38:5a:5b:79:c3:50:
dc:84:4b:dd:14:37:b8:d7:3c:b9:f2:ec:c8:af:7c:f7:0d:97:
3f:19:23:f0:18:87:bc:f0:5f:dc:db:e0:59:a4:a7:e4:25:17:
15:a1:58:ac:2e:3e:15:44:e9:32:5f:d5:0c:8e:be:f2:24:3a:
ff:7f:c3:18:42:44:af:c7:b0:30:2b:1e:5d:d8:28:1e:60:eb:
98:7e:ce:2e:4b:73:0f:8a:01:f2:57:2f:72:c3:49:83:d6:d6:
88:ba:0e:9b:c5:67:56:3e:ac:61:82:fe:1e:36:f8:8b:1f:6e:
f6:7b:09:f6:66:6e:ae:35:1d:5d:00:9f:b4:54:7e:83:91:0c:
0f:35:fb:88:03:58:07:b5:61:24:e4:48:3f:3a:2c:40:46:f4:
e6:4b:fd:32:74:e9:b0:9f:a9:0c:2e:b1:94:93:8e:42:55:96:
02:08:69:21:5d:e6:74:1d:aa:a7:72:84:19:5c:62:41:8f:da:
1e:c5:83:9a:85:51:a7:de:42:46:14:44:fd:03:36:6b:5b:3f:
75:d5:8a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:10:15 2026 by rpki-client