Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS57043.roa
File: AS57043.roa (raw, json)
Hash identifier: x1SQsss9Z6Kw8ARcs3rFper7o6+9OiFG/HNO0RQ5Wgk=
Subject key identifier: F9:78:74:96:32:01:6D:C9:78:20:4A:5B:F6:C9:3B:A6:98:26:7A:2E
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 3B98941F0D17C57466DD5D1A234BE7C19E314F17
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS57043.roa
Signing time: Wed 10 Jun 2026 11:50:34 +0000
ROA not before: Wed 10 Jun 2026 11:45:34 +0000
ROA not after: Wed 09 Jun 2027 11:50:34 +0000
asID: 57043
IP address blocks: 188.220.224.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:98:94:1f:0d:17:c5:74:66:dd:5d:1a:23:4b:e7:c1:9e:31:4f:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 10 11:45:34 2026 GMT
Not After : Jun 9 11:50:34 2027 GMT
Subject: CN=F978749632016DC978204A5BF6C93BA698267A2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6c:4c:13:07:55:71:df:cf:67:7b:fb:9a:4f:
ce:c2:bc:a6:9b:a8:ec:cd:58:b2:76:3b:b3:48:92:
b9:57:97:da:f4:52:0b:20:9c:31:02:11:a1:2d:dc:
df:94:bb:92:f1:7d:1a:ba:33:7b:f4:0c:15:37:78:
ba:bf:55:dd:a8:89:b9:58:fb:63:19:b2:62:51:f4:
0a:46:4b:78:1d:9c:1b:86:3d:14:47:a7:9e:2c:27:
28:0b:74:ff:86:f5:a8:62:48:3a:4c:c9:3b:42:2e:
e6:c8:34:c9:bf:0c:bb:34:aa:a8:4a:83:1f:cc:49:
b3:00:a3:f8:07:ec:c0:0a:f6:46:be:3d:9f:f8:b0:
2c:15:61:7c:dd:be:f3:fc:80:95:b6:10:2a:b3:9d:
40:bc:a9:91:9b:db:a1:29:42:e2:95:63:13:48:dd:
f0:fa:b1:80:e1:29:95:46:00:e9:7f:3b:33:52:3f:
1d:8d:4d:3d:a1:dc:09:3d:64:ab:4d:bc:2d:d5:af:
ec:d0:b1:65:33:f6:15:7e:59:89:6a:24:f9:79:76:
53:72:e3:78:44:1f:b6:51:88:e0:b6:76:22:5f:ff:
fe:e6:9e:bb:6f:0b:bf:df:36:ff:1d:78:2c:28:d4:
35:1c:6a:c4:c4:c5:3e:ea:08:1b:f7:c7:3f:99:cc:
a8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:78:74:96:32:01:6D:C9:78:20:4A:5B:F6:C9:3B:A6:98:26:7A:2E
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS57043.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.220.224.0/23
Signature Algorithm: sha256WithRSAEncryption
51:01:d8:f9:32:4a:cf:95:98:bb:e3:ec:16:16:9c:f0:2c:cc:
0c:64:19:03:df:96:ab:19:ed:67:92:1c:5b:47:c6:ad:f5:f7:
9b:34:c5:5e:b0:35:cf:09:15:b8:06:9e:e4:b4:b0:5d:a1:2e:
f1:1f:b1:6e:71:9a:41:79:cb:9d:86:ca:94:d5:8c:db:66:29:
80:5b:c9:50:19:a0:14:8a:7c:12:43:42:10:98:fa:2f:bf:80:
b1:fb:c6:1d:eb:14:e4:eb:66:1f:b1:86:8c:42:2c:43:e8:e3:
3a:82:91:46:bc:88:d4:10:a2:ce:c6:b6:ac:d0:94:66:d1:26:
db:0b:6c:10:4c:3b:48:f7:46:f5:02:ae:cd:f1:ea:ed:f5:cb:
80:bc:69:0e:f8:17:64:4d:a9:47:1b:b1:48:8d:6f:f5:70:44:
83:7b:f5:ac:32:8b:db:64:08:40:ce:bd:5a:65:d5:57:18:68:
c2:ed:34:2e:61:f0:de:c5:36:01:01:e0:3d:d5:96:7c:75:97:
9c:71:1d:e4:d0:11:27:cc:18:06:73:32:12:95:17:98:49:14:
99:cc:74:a5:54:1c:88:c6:08:bb:45:4a:28:9d:83:40:fa:2b:
39:6b:92:fb:89:ae:98:22:48:58:7f:74:71:31:c5:4f:fd:37:
00:5f:2c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:53:59 2026 by rpki-client