Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS57043.roa
File: AS57043.roa (raw, json)
Hash identifier: EwFky/ddWYOwzUadNe0xl5SlIB0uMhH7bFzkOmIJhbg=
Subject key identifier: E7:AB:A5:F5:1A:1E:BB:3F:E1:BD:62:5A:51:C0:BD:84:DA:52:8D:DA
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 59D6E4BA03CEBDE44ACF8F1B8BA3BE40D981C2F3
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS57043.roa
Signing time: Sun 02 Aug 2026 20:30:22 +0000
ROA not before: Sun 02 Aug 2026 20:25:22 +0000
ROA not after: Sun 01 Aug 2027 20:30:22 +0000
asID: 57043
IP address blocks: 45.87.184.0/24 maxlen: 24
181.41.216.0/24 maxlen: 24
181.214.115.0/24 maxlen: 24
185.135.156.0/24 maxlen: 24
191.101.113.0/24 maxlen: 24
194.110.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:20:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:d6:e4:ba:03:ce:bd:e4:4a:cf:8f:1b:8b:a3:be:40:d9:81:c2:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 2 20:25:22 2026 GMT
Not After : Aug 1 20:30:22 2027 GMT
Subject: CN=E7ABA5F51A1EBB3FE1BD625A51C0BD84DA528DDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:df:f4:82:3e:82:1b:f6:bc:e3:18:ee:9e:24:
59:16:c7:21:a0:36:67:a6:6f:7c:9a:77:1b:f2:19:
36:cc:8d:e4:59:c5:10:52:e9:b2:8b:c1:d6:01:1d:
86:5b:42:ac:f1:e1:7c:6b:18:be:8c:21:0d:c3:54:
81:b3:58:5a:a2:dc:26:0f:ce:f4:08:4b:b8:9f:3f:
74:e8:d1:04:f8:5a:44:30:b7:8d:53:b6:69:db:4b:
79:6b:3a:b6:d1:6f:15:3d:43:77:59:fc:43:35:80:
c1:e3:3d:b3:91:5f:e6:d2:cb:80:aa:76:1d:cc:fa:
d6:30:41:6f:c0:e9:7e:3f:86:26:e7:1f:41:2f:37:
cb:d9:11:43:50:d6:12:f2:68:e7:98:14:e9:26:fa:
45:ec:5c:9f:83:02:73:38:02:a6:28:17:6b:70:ce:
ed:1d:f2:c6:81:b3:c2:47:d6:1a:d1:7b:13:be:ce:
2a:e4:6a:34:bb:7a:fe:49:7c:4a:33:fb:0c:19:76:
2c:48:ab:8d:5f:f5:49:0b:9e:bd:a7:51:4e:5d:1b:
5f:ed:15:d9:19:18:53:d3:8e:47:ee:6c:aa:a3:ce:
a4:41:0e:af:87:d6:bc:3b:3e:88:47:d8:89:7a:7e:
30:d7:a8:00:3e:54:98:a3:2a:36:30:16:ab:3b:fa:
ea:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:AB:A5:F5:1A:1E:BB:3F:E1:BD:62:5A:51:C0:BD:84:DA:52:8D:DA
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS57043.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.184.0/24
181.41.216.0/24
181.214.115.0/24
185.135.156.0/24
191.101.113.0/24
194.110.242.0/24
Signature Algorithm: sha256WithRSAEncryption
07:c1:d3:1d:7c:7c:c8:f6:bf:d6:69:39:44:b5:fe:ae:97:02:
0e:89:8d:10:a6:eb:e1:35:ed:98:77:b2:77:6b:7e:8b:ca:dd:
23:73:e0:95:bc:12:64:79:a4:83:a6:3c:a9:73:c7:3f:b3:4a:
99:7b:8d:6e:16:16:79:83:91:66:66:e3:b5:5c:9a:34:5b:10:
68:4a:58:da:04:52:0f:aa:ae:2b:0a:a3:89:98:b9:3d:ae:db:
bd:50:5e:53:e9:71:8a:8a:ea:fe:c5:df:06:40:3b:cd:ee:1f:
da:77:80:f8:74:09:92:a8:f9:66:6b:83:41:cd:ec:18:3a:a0:
b7:a0:64:24:e3:80:9e:da:3a:9b:b6:f6:41:64:18:4a:9e:dc:
22:99:d4:23:b0:e9:17:8b:a4:38:ad:12:d8:1d:50:54:7a:c5:
aa:5d:82:30:cb:70:26:84:c1:3a:fc:44:dc:45:43:35:78:57:
98:82:6e:5d:79:1d:5b:fa:e7:66:a2:41:f7:d9:e7:47:05:82:
eb:26:cd:af:4b:dc:61:ad:ae:5a:c0:5b:a3:97:6c:4d:3c:8a:
30:7e:76:5d:d6:8b:58:9f:14:46:5b:24:2b:c5:89:eb:2b:5e:
cc:0d:18:24:06:6e:4b:6d:16:b7:ab:60:7c:40:40:83:37:73:
d1:d3:e2:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:21:40 2026 by rpki-client