Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS57043.roa
File: AS57043.roa (raw, json)
Hash identifier: 3g7e6+SKxpt5G0q9oh9VUDaxeJs+xvxAuQYcvnZhUk4=
Subject key identifier: B4:BF:B5:3F:AA:24:49:73:26:56:62:DE:C7:9E:1B:FA:39:B4:82:8E
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 3A49D623EF2C978F15ABA008F85D71395E2F2516
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS57043.roa
Signing time: Tue 15 Sep 2026 08:54:04 +0000
ROA not before: Tue 15 Sep 2026 08:49:04 +0000
ROA not after: Tue 14 Sep 2027 08:54:04 +0000
asID: 57043
IP address blocks: 82.21.7.0/24 maxlen: 24
82.21.53.0/24 maxlen: 24
82.21.114.0/24 maxlen: 24
82.21.117.0/24 maxlen: 24
82.21.150.0/24 maxlen: 24
82.21.153.0/24 maxlen: 24
82.22.3.0/24 maxlen: 24
82.22.6.0/24 maxlen: 24
82.22.35.0/24 maxlen: 24
82.22.36.0/24 maxlen: 24
82.22.38.0/24 maxlen: 24
82.22.47.0/24 maxlen: 24
82.22.50.0/24 maxlen: 24
82.22.53.0/24 maxlen: 24
82.22.146.0/24 maxlen: 24
82.22.175.0/24 maxlen: 24
82.22.187.0/24 maxlen: 24
82.23.138.0/24 maxlen: 24
82.23.162.0/24 maxlen: 24
82.23.163.0/24 maxlen: 24
82.23.173.0/24 maxlen: 24
82.23.177.0/24 maxlen: 24
82.23.248.0/24 maxlen: 24
82.23.249.0/24 maxlen: 24
82.24.19.0/24 maxlen: 24
82.24.110.0/24 maxlen: 24
82.24.123.0/24 maxlen: 24
82.24.174.0/24 maxlen: 24
82.24.195.0/24 maxlen: 24
82.25.12.0/24 maxlen: 24
82.25.39.0/24 maxlen: 24
82.25.58.0/24 maxlen: 24
82.25.60.0/24 maxlen: 24
82.25.61.0/24 maxlen: 24
82.25.161.0/24 maxlen: 24
82.25.174.0/24 maxlen: 24
82.25.185.0/24 maxlen: 24
82.25.190.0/24 maxlen: 24
82.26.86.0/24 maxlen: 24
82.26.91.0/24 maxlen: 24
82.26.94.0/24 maxlen: 24
82.26.136.0/24 maxlen: 24
82.26.150.0/24 maxlen: 24
82.26.151.0/24 maxlen: 24
82.26.152.0/24 maxlen: 24
82.26.171.0/24 maxlen: 24
82.26.193.0/24 maxlen: 24
82.26.198.0/24 maxlen: 24
82.27.117.0/24 maxlen: 24
82.27.118.0/24 maxlen: 24
82.38.40.0/24 maxlen: 24
82.38.64.0/24 maxlen: 24
82.38.65.0/24 maxlen: 24
82.38.66.0/24 maxlen: 24
82.38.67.0/24 maxlen: 24
82.38.70.0/24 maxlen: 24
82.38.71.0/24 maxlen: 24
82.38.135.0/24 maxlen: 24
82.38.139.0/24 maxlen: 24
82.38.171.0/24 maxlen: 24
82.39.165.0/24 maxlen: 24
82.39.215.0/24 maxlen: 24
82.40.37.0/24 maxlen: 24
82.40.38.0/24 maxlen: 24
82.40.49.0/24 maxlen: 24
82.40.56.0/24 maxlen: 24
82.40.57.0/24 maxlen: 24
82.40.58.0/24 maxlen: 24
82.40.60.0/24 maxlen: 24
82.47.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 06:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:49:d6:23:ef:2c:97:8f:15:ab:a0:08:f8:5d:71:39:5e:2f:25:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 15 08:49:04 2026 GMT
Not After : Sep 14 08:54:04 2027 GMT
Subject: CN=B4BFB53FAA244973265662DEC79E1BFA39B4828E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4c:1f:96:70:8b:df:73:e6:43:1a:69:b4:aa:
04:59:67:d6:91:f6:47:1c:2f:ea:89:e7:c1:0e:a3:
aa:ab:0a:e7:38:c6:22:0d:2d:1a:86:24:4f:3a:3e:
4e:67:f0:c4:07:f6:2a:70:1c:b6:d0:f5:13:29:a7:
06:8b:25:38:c1:6e:36:05:34:0c:5b:ad:c0:55:b0:
98:a3:87:04:bc:e5:43:aa:4a:ee:d2:bf:24:da:a4:
b8:3f:d3:f3:27:f4:c3:f7:03:92:67:9b:0b:e7:3d:
12:15:83:da:e7:3e:08:f9:de:f8:48:0b:80:2d:54:
d3:b8:66:fa:44:ca:57:e0:84:fc:10:ff:1b:9f:b8:
02:83:d0:91:cb:43:1c:db:b8:02:73:0f:3e:32:ac:
0c:f2:8c:7f:fe:0d:56:d6:25:82:b8:96:73:c0:5d:
f0:e2:d7:17:51:dc:cf:54:b5:3d:0e:22:14:0e:4a:
b7:f8:cb:0e:35:24:ae:c6:c4:8b:94:7e:5f:bf:b0:
b4:df:5c:6b:85:16:bc:84:7e:9a:02:5a:2a:32:6f:
8f:69:f8:7b:9b:3b:29:ec:d6:f9:d9:ba:63:b9:42:
24:08:ff:0f:47:ef:a2:5c:16:4f:80:da:33:81:50:
c7:47:c3:25:f5:23:a4:91:e0:c6:15:80:4a:3a:29:
78:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:BF:B5:3F:AA:24:49:73:26:56:62:DE:C7:9E:1B:FA:39:B4:82:8E
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS57043.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.7.0/24
82.21.53.0/24
82.21.114.0/24
82.21.117.0/24
82.21.150.0/24
82.21.153.0/24
82.22.3.0/24
82.22.6.0/24
82.22.35.0-82.22.36.255
82.22.38.0/24
82.22.47.0/24
82.22.50.0/24
82.22.53.0/24
82.22.146.0/24
82.22.175.0/24
82.22.187.0/24
82.23.138.0/24
82.23.162.0/23
82.23.173.0/24
82.23.177.0/24
82.23.248.0/23
82.24.19.0/24
82.24.110.0/24
82.24.123.0/24
82.24.174.0/24
82.24.195.0/24
82.25.12.0/24
82.25.39.0/24
82.25.58.0/24
82.25.60.0/23
82.25.161.0/24
82.25.174.0/24
82.25.185.0/24
82.25.190.0/24
82.26.86.0/24
82.26.91.0/24
82.26.94.0/24
82.26.136.0/24
82.26.150.0-82.26.152.255
82.26.171.0/24
82.26.193.0/24
82.26.198.0/24
82.27.117.0-82.27.118.255
82.38.40.0/24
82.38.64.0/22
82.38.70.0/23
82.38.135.0/24
82.38.139.0/24
82.38.171.0/24
82.39.165.0/24
82.39.215.0/24
82.40.37.0-82.40.38.255
82.40.49.0/24
82.40.56.0-82.40.58.255
82.40.60.0/24
82.47.188.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:6a:95:b4:70:bb:27:40:4e:68:dc:ae:97:4f:8d:b4:1d:f2:
c0:19:75:6c:f4:04:13:91:f7:02:80:78:55:29:4f:a9:6f:2c:
87:c8:5a:fe:58:16:27:4d:b1:45:77:4d:f7:40:0e:37:9c:43:
dc:91:f5:a4:a9:59:4e:bd:41:4c:6c:12:d6:1f:3a:d7:5f:95:
db:a5:cf:f1:c3:63:28:13:cb:3c:e8:35:5e:dc:b0:c0:83:eb:
1e:d0:02:2a:cb:96:c0:e1:e2:ae:55:54:e3:ff:73:08:c3:dc:
3e:15:91:8c:86:0a:f1:23:61:f7:9f:ff:98:18:8f:37:88:8e:
1a:7d:78:4f:8e:63:16:e1:ae:76:ec:91:72:5a:a7:ee:9b:b7:
67:45:d9:8c:4a:5b:39:1b:39:c4:57:a2:26:7f:24:58:4f:f9:
b4:0e:35:e7:0a:a7:3e:ba:66:c5:d3:73:c3:fb:8f:d8:6a:fe:
7e:6b:0f:d5:6c:98:b6:41:bc:45:97:20:ad:9e:d1:97:8c:a0:
cf:e8:bc:a5:1f:1c:ba:60:3d:2e:ce:09:85:b8:41:f9:5f:e1:
d9:43:58:3c:8e:be:1d:8b:d3:b9:5a:bf:47:e2:51:1e:67:86:
6f:72:bb:27:03:2c:3f:6c:ca:ca:cd:9b:73:e7:07:22:d1:1e:
23:f5:e0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:21:35 2026 by rpki-client