Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS57043.roa
File: AS57043.roa (raw, json)
Hash identifier: boFRstBT+YKla/ERKcBiFD8qpNrYllhtDaXQUNyaLas=
Subject key identifier: 9F:74:79:5D:FD:62:52:1C:12:EC:72:F6:40:39:CE:D1:12:BE:CC:BE
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 6119A3696A290F3FB137902AD341AAAF5B7244BB
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS57043.roa
Signing time: Thu 10 Sep 2026 00:04:53 +0000
ROA not before: Wed 09 Sep 2026 23:59:53 +0000
ROA not after: Thu 09 Sep 2027 00:04:53 +0000
asID: 57043
IP address blocks: 51.146.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 09:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:19:a3:69:6a:29:0f:3f:b1:37:90:2a:d3:41:aa:af:5b:72:44:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 9 23:59:53 2026 GMT
Not After : Sep 9 00:04:53 2027 GMT
Subject: CN=9F74795DFD62521C12EC72F64039CED112BECCBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:67:7d:92:64:eb:12:c3:fe:43:07:e4:3f:fd:
b4:0c:69:49:26:07:5b:2d:d7:4a:9b:b8:53:d3:38:
d5:71:a5:ea:94:2e:a2:81:c9:71:52:84:47:f7:79:
44:d6:a2:9f:f8:ad:ef:18:6f:8b:19:f6:a8:a0:9d:
1d:90:05:19:bd:18:2a:6a:99:7a:45:dd:47:a8:1e:
ef:2b:12:af:7b:3f:07:96:7d:08:99:78:bd:be:ad:
cc:04:2a:4b:8a:3f:71:25:89:64:b1:eb:4d:42:e9:
11:29:3c:38:7c:87:ff:f6:81:8b:2c:d8:00:37:38:
9d:63:e1:73:0d:25:43:2b:af:bd:87:f3:ab:d9:1c:
95:a3:63:a8:36:32:57:a2:4f:54:00:af:e5:13:3d:
e5:5b:c0:07:04:bd:01:17:ca:80:3d:e8:2d:b5:8c:
92:64:ad:ce:72:16:5f:24:f8:19:82:b7:cb:0e:1e:
56:7f:c9:bb:89:92:aa:d7:3b:fa:bf:b6:65:3d:e2:
b6:8a:3e:28:a7:77:ce:9f:0a:b6:a5:cd:10:51:19:
14:15:2b:f8:76:11:49:42:e7:42:60:5c:95:48:87:
64:ea:30:d6:11:d3:fb:1f:88:97:a6:51:f2:b8:3d:
9e:64:ab:24:54:49:1f:d8:29:00:2c:82:fd:63:fc:
b6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:74:79:5D:FD:62:52:1C:12:EC:72:F6:40:39:CE:D1:12:BE:CC:BE
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS57043.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.8.0/24
Signature Algorithm: sha256WithRSAEncryption
07:b5:bb:92:0e:d6:4f:e2:82:79:c0:a3:a9:01:72:4e:d4:2d:
c8:e7:4b:17:f2:41:62:c0:3c:ea:62:24:ce:fc:6a:03:f2:4b:
5e:26:c1:26:12:34:ee:22:f1:05:2f:94:00:37:a8:4f:aa:4a:
c4:5c:bc:0a:2f:6b:fe:3a:d4:fe:07:98:2f:5c:81:7a:d8:40:
af:b1:f3:d0:32:aa:26:e5:f9:84:a7:53:70:93:3d:66:3f:c7:
cb:76:17:2c:bb:8c:18:32:10:40:ef:4b:79:77:84:91:ca:d1:
74:d7:52:92:31:01:0b:3f:db:1c:4d:6c:18:50:8d:57:e4:9e:
86:eb:33:a0:2d:af:1d:5c:f4:42:a4:7a:07:a4:e8:f8:01:5c:
34:3c:f2:27:70:ad:bc:cf:44:08:91:17:34:54:4e:3d:fe:12:
6d:ca:f8:29:6b:05:58:4a:e5:54:07:1b:c0:0f:a6:9e:de:a0:
89:86:3b:26:ae:5a:fb:24:59:31:73:d0:bd:1d:90:09:78:d0:
09:16:89:de:16:b5:09:5b:c8:79:1c:54:53:3f:17:db:35:47:
04:ff:b3:6f:00:8c:cc:ff:48:97:83:14:72:fe:d4:5e:c4:73:
93:6d:b3:d4:17:57:68:92:dc:bb:fa:9b:9f:94:b8:b1:c2:aa:
40:67:5a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:18:47 2026 by rpki-client