Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS57043.roa
File: AS57043.roa (raw, json)
Hash identifier: 1tOzqfvqYKnWPE8UZZDP0OH8J3IPu7B5Gkf7U6QNmQk=
Subject key identifier: 95:E6:06:17:8E:E3:4A:30:E9:CD:79:F5:F9:F0:7F:11:B1:BD:08:A2
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 04C6E0734257D2F4A0AD5AAAB31930355BC9B489
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS57043.roa
Signing time: Thu 19 Feb 2026 15:56:06 +0000
ROA not before: Thu 19 Feb 2026 15:51:06 +0000
ROA not after: Thu 18 Feb 2027 15:56:06 +0000
asID: 57043
IP address blocks: 82.21.7.0/24 maxlen: 24
82.21.53.0/24 maxlen: 24
82.21.114.0/24 maxlen: 24
82.21.117.0/24 maxlen: 24
82.21.150.0/24 maxlen: 24
82.21.153.0/24 maxlen: 24
82.22.3.0/24 maxlen: 24
82.22.6.0/24 maxlen: 24
82.22.35.0/24 maxlen: 24
82.22.36.0/24 maxlen: 24
82.22.38.0/24 maxlen: 24
82.22.47.0/24 maxlen: 24
82.22.50.0/24 maxlen: 24
82.22.53.0/24 maxlen: 24
82.22.146.0/24 maxlen: 24
82.22.175.0/24 maxlen: 24
82.22.187.0/24 maxlen: 24
82.23.138.0/24 maxlen: 24
82.23.162.0/24 maxlen: 24
82.23.163.0/24 maxlen: 24
82.23.173.0/24 maxlen: 24
82.23.177.0/24 maxlen: 24
82.23.248.0/24 maxlen: 24
82.23.249.0/24 maxlen: 24
82.24.19.0/24 maxlen: 24
82.24.110.0/24 maxlen: 24
82.24.123.0/24 maxlen: 24
82.24.174.0/24 maxlen: 24
82.24.195.0/24 maxlen: 24
82.25.12.0/24 maxlen: 24
82.25.20.0/24 maxlen: 24
82.25.39.0/24 maxlen: 24
82.25.58.0/24 maxlen: 24
82.25.60.0/24 maxlen: 24
82.25.61.0/24 maxlen: 24
82.25.161.0/24 maxlen: 24
82.25.174.0/24 maxlen: 24
82.25.185.0/24 maxlen: 24
82.25.190.0/24 maxlen: 24
82.26.86.0/24 maxlen: 24
82.26.91.0/24 maxlen: 24
82.26.94.0/24 maxlen: 24
82.26.136.0/24 maxlen: 24
82.26.150.0/24 maxlen: 24
82.26.151.0/24 maxlen: 24
82.26.152.0/24 maxlen: 24
82.26.171.0/24 maxlen: 24
82.26.193.0/24 maxlen: 24
82.26.198.0/24 maxlen: 24
82.27.117.0/24 maxlen: 24
82.27.118.0/24 maxlen: 24
82.38.40.0/24 maxlen: 24
82.38.64.0/24 maxlen: 24
82.38.65.0/24 maxlen: 24
82.38.66.0/24 maxlen: 24
82.38.67.0/24 maxlen: 24
82.38.70.0/24 maxlen: 24
82.38.71.0/24 maxlen: 24
82.38.135.0/24 maxlen: 24
82.38.139.0/24 maxlen: 24
82.38.171.0/24 maxlen: 24
82.39.215.0/24 maxlen: 24
82.40.37.0/24 maxlen: 24
82.40.38.0/24 maxlen: 24
82.40.49.0/24 maxlen: 24
82.40.56.0/24 maxlen: 24
82.40.57.0/24 maxlen: 24
82.40.58.0/24 maxlen: 24
82.40.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:c6:e0:73:42:57:d2:f4:a0:ad:5a:aa:b3:19:30:35:5b:c9:b4:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Feb 19 15:51:06 2026 GMT
Not After : Feb 18 15:56:06 2027 GMT
Subject: CN=95E606178EE34A30E9CD79F5F9F07F11B1BD08A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f0:6e:c7:76:ba:97:67:44:20:1a:59:f0:b7:
df:f2:54:44:83:29:9f:b0:fa:c1:99:d4:61:83:72:
2b:89:f1:f6:20:48:aa:3e:d3:b5:a0:f7:6b:9c:99:
30:61:65:ce:55:a4:bd:a7:3c:24:41:44:39:6c:8c:
4d:f8:6c:ef:f7:ea:6d:3c:26:39:80:c4:d1:b9:b9:
6c:e8:31:1e:87:21:71:e9:19:82:54:f9:ab:9d:0c:
4b:e8:c3:81:63:7b:ae:42:9f:6c:ef:7b:d3:5a:ac:
0f:52:a0:34:da:e1:34:98:9b:1c:69:af:ef:f1:8a:
ef:df:80:a4:91:ad:6e:cf:5b:5c:be:6a:ef:4d:55:
27:ca:e9:a7:f2:bf:50:e5:6e:ed:99:41:51:be:8e:
94:5c:a2:d7:e2:61:f8:3c:3b:9a:43:66:f4:38:df:
f3:7b:b1:3c:18:a2:2a:0e:6f:53:93:de:34:ff:8a:
b3:f3:4f:d1:3b:18:ea:a0:11:21:48:67:1d:c5:b6:
1a:b6:c8:24:1f:05:44:0d:4d:86:47:a8:d5:e9:3f:
1e:0a:a9:70:d3:9c:0f:3c:e4:e7:4f:32:ae:9b:f3:
da:dd:f2:9a:ac:80:99:f9:74:84:1c:8f:0e:0a:80:
f4:a6:53:d9:26:67:2f:85:91:8e:9c:9b:72:06:c3:
eb:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E6:06:17:8E:E3:4A:30:E9:CD:79:F5:F9:F0:7F:11:B1:BD:08:A2
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS57043.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.7.0/24
82.21.53.0/24
82.21.114.0/24
82.21.117.0/24
82.21.150.0/24
82.21.153.0/24
82.22.3.0/24
82.22.6.0/24
82.22.35.0-82.22.36.255
82.22.38.0/24
82.22.47.0/24
82.22.50.0/24
82.22.53.0/24
82.22.146.0/24
82.22.175.0/24
82.22.187.0/24
82.23.138.0/24
82.23.162.0/23
82.23.173.0/24
82.23.177.0/24
82.23.248.0/23
82.24.19.0/24
82.24.110.0/24
82.24.123.0/24
82.24.174.0/24
82.24.195.0/24
82.25.12.0/24
82.25.20.0/24
82.25.39.0/24
82.25.58.0/24
82.25.60.0/23
82.25.161.0/24
82.25.174.0/24
82.25.185.0/24
82.25.190.0/24
82.26.86.0/24
82.26.91.0/24
82.26.94.0/24
82.26.136.0/24
82.26.150.0-82.26.152.255
82.26.171.0/24
82.26.193.0/24
82.26.198.0/24
82.27.117.0-82.27.118.255
82.38.40.0/24
82.38.64.0/22
82.38.70.0/23
82.38.135.0/24
82.38.139.0/24
82.38.171.0/24
82.39.215.0/24
82.40.37.0-82.40.38.255
82.40.49.0/24
82.40.56.0-82.40.58.255
82.40.60.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:d7:6b:c9:32:d1:b7:d3:3a:e9:d0:3d:8f:1c:0a:43:45:d4:
6f:1a:ac:58:53:32:c3:dc:1b:9e:ec:b8:1e:03:6e:eb:10:8d:
9d:56:31:ee:3b:0c:2a:fe:81:23:0c:f0:8d:c4:4a:e3:c8:35:
3d:c2:52:8e:6f:2b:d6:74:71:f5:b8:ad:d4:fe:6d:fa:82:33:
7f:ba:06:ad:6f:66:db:fb:3f:10:1c:e7:57:48:c8:a7:e5:5d:
94:36:13:65:d4:e0:59:cc:b8:ec:70:da:4c:8c:6a:26:93:89:
b7:e9:8e:6b:1a:f1:9e:9a:0f:4c:0c:ef:70:1b:ab:78:da:6b:
b1:44:51:d3:a9:31:ca:86:80:65:80:c7:b0:82:a5:d7:3d:22:
12:6a:98:f9:8b:f6:a2:da:ef:f3:dc:89:89:8f:8c:96:7d:23:
56:f8:c5:6c:40:eb:4c:ac:57:fa:3e:57:b1:62:98:7b:5f:62:
3e:81:ed:4f:13:12:a5:7c:f6:a7:fa:ee:7f:37:06:0f:d7:5d:
ee:cb:73:3a:ca:0d:14:95:0a:d3:cf:1a:b2:30:fe:75:cc:a7:
54:92:0d:e1:2b:74:da:72:55:10:41:16:4d:69:a7:07:f5:45:
ef:72:90:59:18:17:e2:a2:3d:00:c1:72:0a:17:89:a4:c3:e3:
72:26:b4:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:13:35 2026 by rpki-client