Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS57043.roa
File: AS57043.roa (raw, json)
Hash identifier: 91JWKQbuFlMGxJqONBKADHN4qaRjzWf3q1pHijmsW5A=
Subject key identifier: F8:61:8E:69:72:40:DA:07:6F:48:36:12:F8:34:33:E1:50:16:50:5E
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 5DEC018F64C821F801CDE04E10304217DDBC7636
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS57043.roa
Signing time: Tue 28 Oct 2025 08:55:10 +0000
ROA not before: Tue 28 Oct 2025 08:50:10 +0000
ROA not after: Tue 27 Oct 2026 08:55:10 +0000
asID: 57043
IP address blocks: 191.101.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:14:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:ec:01:8f:64:c8:21:f8:01:cd:e0:4e:10:30:42:17:dd:bc:76:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Oct 28 08:50:10 2025 GMT
Not After : Oct 27 08:55:10 2026 GMT
Subject: CN=F8618E697240DA076F483612F83433E15016505E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8c:4d:1a:56:d6:91:90:d0:a4:f1:ad:02:c8:
5a:22:58:eb:dd:c0:72:5f:d8:b1:d5:92:70:17:49:
cb:a5:8a:bb:85:52:45:19:65:44:b0:4e:1d:71:76:
64:ad:4f:e0:75:66:da:b9:60:14:36:32:b3:3c:28:
05:8a:ea:34:33:56:14:0c:52:84:17:dc:84:d7:b0:
cb:5f:e9:b9:ba:d1:f1:03:30:0a:b6:5b:0d:44:c0:
ed:8f:19:d5:92:da:dc:b0:2f:62:58:b9:89:46:30:
94:0c:cb:c7:d4:ce:46:2b:a1:2e:29:9c:02:23:b6:
d7:5f:99:e4:cb:17:ff:b0:58:10:28:4c:87:62:d6:
dd:95:17:4f:fd:ea:1f:35:2c:d1:41:e6:f1:e4:55:
42:59:74:1f:6b:9e:0e:75:a1:3c:5d:79:d1:12:7f:
46:6c:4d:d2:ef:74:19:da:fe:b4:99:76:65:03:34:
06:27:22:a3:03:e0:d2:c0:4a:8f:e2:a6:bd:7b:8f:
76:b0:fb:bd:ff:ee:38:20:9d:39:ee:f9:fb:0c:7e:
45:36:48:cb:7b:46:73:d2:4c:95:90:19:ff:08:32:
9b:1c:39:78:31:e7:4f:a8:72:ff:1a:01:34:b7:3f:
b5:6a:c2:33:13:3d:25:b7:77:a4:67:65:3b:ac:52:
3d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:61:8E:69:72:40:DA:07:6F:48:36:12:F8:34:33:E1:50:16:50:5E
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS57043.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.101.113.0/24
Signature Algorithm: sha256WithRSAEncryption
02:b8:d8:e1:b9:43:59:cf:53:7c:48:73:0b:2f:e8:fd:69:a5:
c8:b2:a8:1f:6a:0c:58:60:79:b8:ec:ba:de:32:63:5f:16:4a:
8b:5f:99:6c:56:cb:76:9c:b0:92:d8:ee:29:92:44:3d:22:1f:
a8:ce:aa:cc:c4:12:f1:df:e2:36:d1:e8:73:40:b2:01:94:4a:
1e:33:01:ee:af:c6:f1:46:6f:10:87:81:80:20:b4:ec:3e:e4:
49:df:7c:f2:dc:3b:da:eb:2a:e2:30:92:3b:a5:b9:2c:00:67:
11:57:70:88:7d:ed:2a:60:e4:9d:4e:af:24:2e:84:7d:af:ed:
1b:63:88:0f:7a:c1:3f:de:e8:39:20:49:7d:52:90:57:0e:e5:
80:2f:fd:83:a4:c9:23:00:63:11:29:2a:4a:78:80:b1:9f:8d:
fe:e6:d4:3c:7d:f4:8a:b2:06:92:8c:e0:e2:a1:0c:8b:a2:6e:
b9:7d:a3:f1:40:2a:0e:ae:01:ed:05:c6:22:e3:82:9c:2e:30:
fd:95:cb:a0:eb:c9:b9:8d:31:6c:d3:1c:10:76:95:05:f6:28:
8c:3b:0a:79:7f:e9:67:3b:ef:71:fc:af:45:50:33:5c:8a:41:
5d:c4:9d:b6:2c:15:b7:23:b0:aa:9f:05:c5:55:13:b0:a5:b0:
29:cc:e0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:21:32 2025 by rpki-client