Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS57169.roa
File: AS57169.roa (raw, json)
Hash identifier: cTArO9DeqBC2a3krGYJLVBD4K33XWd9isx0Uw3nPgk8=
Subject key identifier: E1:47:76:C8:80:EB:DD:A2:AF:49:A2:B1:6A:F9:E0:47:E2:76:75:24
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 5BFC8E3CAB5AAF69DF15442919E392E32970D9A3
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS57169.roa
Signing time: Mon 22 Jun 2026 22:47:48 +0000
ROA not before: Mon 22 Jun 2026 22:42:48 +0000
ROA not after: Mon 21 Jun 2027 22:47:48 +0000
asID: 57169
IP address blocks: 162.141.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:fc:8e:3c:ab:5a:af:69:df:15:44:29:19:e3:92:e3:29:70:d9:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 22 22:42:48 2026 GMT
Not After : Jun 21 22:47:48 2027 GMT
Subject: CN=E14776C880EBDDA2AF49A2B16AF9E047E2767524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ae:62:d2:df:91:88:b9:99:fc:1f:c4:b2:4f:
ba:43:29:b2:a0:ba:bb:76:8e:f8:a6:d8:dc:05:12:
b4:7f:e1:24:d8:cc:1a:b4:ac:9f:1b:ab:e0:71:e2:
82:f6:63:c3:4f:83:4d:43:9c:f3:23:dd:cd:d3:a0:
81:84:a2:d2:e1:24:33:2c:9f:d6:73:dd:90:60:96:
d1:1f:ee:fe:de:91:ce:e7:d7:1f:9a:b5:78:41:ab:
96:fa:ee:ab:32:18:f6:1d:b8:84:da:02:af:58:00:
6b:89:85:78:50:6e:9c:5a:01:48:4c:5e:41:74:0f:
cf:ab:aa:47:af:fb:65:0c:9b:f5:51:f0:1c:5d:af:
ab:86:bd:28:de:9c:e8:a7:91:be:74:c6:d7:6e:03:
04:71:66:93:2a:88:4c:c5:3c:27:c9:d5:33:d0:83:
ca:1b:b9:d0:7e:bc:9d:bb:67:84:17:2b:9f:72:64:
b2:c4:85:fa:d6:ae:8c:ad:e6:18:30:94:19:66:d6:
45:cc:c8:0f:71:4d:29:4d:ad:74:41:94:ca:13:a4:
33:c6:5e:a7:63:69:e1:18:4f:43:8d:8e:b1:10:24:
84:5a:10:e9:dc:70:a4:19:d4:67:fe:93:4e:ac:90:
b0:e3:51:f6:05:ab:4c:88:7c:19:68:24:2f:2a:fd:
ca:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:47:76:C8:80:EB:DD:A2:AF:49:A2:B1:6A:F9:E0:47:E2:76:75:24
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS57169.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.141.12.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:99:e7:a9:c1:15:e2:93:6a:c7:0e:0f:8a:55:bf:38:e1:24:
19:b3:bb:a3:d3:31:98:dc:72:86:6e:38:e1:56:af:6e:ee:cf:
4f:1a:10:3c:75:4f:b9:58:05:db:be:01:20:7a:ed:9e:23:04:
0a:9a:24:48:6d:c9:4d:13:a2:d3:62:df:45:2d:2f:fb:40:1f:
df:97:44:c1:a1:03:ba:f2:c6:d6:40:67:b8:cf:0c:87:3d:6c:
89:28:7e:52:b6:93:7f:86:4a:4a:af:94:50:84:15:d6:c8:68:
82:38:6d:86:2e:ae:f4:56:26:f9:c0:cf:00:b3:c2:55:f1:7f:
a0:a2:10:4f:b2:c8:ab:0d:c0:d2:f6:b7:d0:79:39:9b:4d:d8:
22:d0:1d:5a:1c:68:5d:1a:ae:b6:78:34:53:66:ec:5d:74:1d:
86:4a:cd:3c:b1:ad:6c:7a:c4:48:58:a8:12:17:65:b0:c3:6c:
11:cd:37:1f:08:80:b0:27:1d:fa:9c:2e:f3:32:1a:bb:6d:fd:
1a:70:7d:db:c0:a2:e0:f3:ae:13:47:0c:eb:28:82:2e:ad:19:
57:37:7e:48:ed:e5:e0:f2:d8:f6:52:bb:f3:29:f2:70:e7:bb:
25:a8:cf:20:3c:df:a8:f2:66:12:86:69:6d:59:90:78:78:5d:
0c:6b:68:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 18:35:31 2026 by rpki-client