Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS57043.roa
File: AS57043.roa (raw, json)
Hash identifier: yi2TQH7e8B1igP9vlOWRBdOwKO17dHiy8BYSk3P4gjo=
Subject key identifier: 19:65:4B:06:22:04:FC:82:10:6A:C6:24:34:D5:19:C4:80:DC:F9:49
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 780C85DB8A5E522094A5A01DF6BA2E26828A61B7
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS57043.roa
Signing time: Wed 30 Sep 2026 14:49:35 +0000
ROA not before: Wed 30 Sep 2026 14:44:35 +0000
ROA not after: Wed 29 Sep 2027 14:49:35 +0000
asID: 57043
IP address blocks: 82.139.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 15:23:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:0c:85:db:8a:5e:52:20:94:a5:a0:1d:f6:ba:2e:26:82:8a:61:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Sep 30 14:44:35 2026 GMT
Not After : Sep 29 14:49:35 2027 GMT
Subject: CN=19654B062204FC82106AC62434D519C480DCF949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:93:fe:9a:4a:4d:78:89:d7:6f:bd:f1:11:5d:
c0:1d:08:07:01:8b:51:51:75:a7:1d:73:2a:2a:4c:
4f:00:26:ff:8b:e2:21:12:5c:7e:6d:4b:44:75:e7:
08:eb:e6:54:ac:3f:eb:ef:bc:68:0d:25:11:54:31:
20:da:a5:54:57:cc:03:a3:17:38:23:35:7b:ea:29:
28:d2:f4:df:f1:81:a1:cb:a2:75:2d:1b:40:1f:70:
16:a3:7a:71:86:fa:ff:45:52:d9:c8:0e:c8:f1:da:
9f:36:c5:14:08:bc:42:25:ee:0c:0a:6a:a0:03:34:
c5:aa:4c:59:ad:e0:cb:41:d2:8b:b9:54:00:e7:6f:
3d:52:4a:4a:68:f0:07:de:0a:f6:98:69:a5:73:fb:
2a:7f:39:da:b0:83:9f:e0:32:33:a5:3a:95:6e:11:
6e:51:b7:91:7c:a4:24:2a:8a:41:8d:d3:b9:ba:c9:
6f:74:0e:27:7b:49:9f:fd:8f:ed:b9:9f:ea:13:59:
38:53:4e:de:ee:0d:05:e5:39:95:a6:b8:29:96:28:
a8:80:b5:7d:59:1c:fb:dd:81:aa:58:ac:f1:8b:00:
2d:04:eb:af:21:f2:9f:2d:8a:da:5a:e9:ff:dd:f3:
04:e4:ca:51:05:a5:9f:cc:83:ba:f4:bd:00:30:29:
8e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:65:4B:06:22:04:FC:82:10:6A:C6:24:34:D5:19:C4:80:DC:F9:49
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS57043.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.139.193.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:bf:e8:17:51:ed:55:4e:6b:00:86:4a:23:4e:3f:50:45:51:
57:6b:af:e9:9f:0f:d0:c7:fd:8e:7c:95:a5:4a:cb:b6:b5:78:
3b:1d:6d:6f:02:8f:99:16:84:22:2b:ce:b1:ce:4e:bb:a4:8c:
d8:54:af:a3:4a:bf:77:0b:75:44:fe:e7:c5:82:ae:e4:bb:21:
bb:f7:fd:69:e5:29:53:f8:a9:4d:51:9e:b4:ca:29:ef:f3:90:
58:83:f5:d0:48:f0:ba:5a:5b:f8:33:0e:90:a2:31:ec:d8:60:
a5:59:90:a2:2b:f9:d6:bb:29:21:e3:47:15:df:62:aa:38:4e:
ef:eb:c2:41:2a:00:e1:dc:20:e1:95:6d:a6:14:a7:d5:f5:07:
6d:36:14:93:ce:41:86:7d:94:2d:17:f0:fa:35:37:0a:10:29:
77:04:7c:ec:0e:75:fe:83:b1:29:f4:b7:cf:50:4e:84:19:06:
29:71:fa:95:d8:97:16:20:b2:1f:be:ad:8b:b8:49:04:f9:7e:
0c:aa:44:36:eb:84:7e:55:3d:98:af:a7:9c:d7:81:ae:2c:ed:
04:8d:b7:43:71:55:99:68:7b:11:a0:89:2c:51:63:48:a6:fb:
91:a2:c7:ce:f1:f5:41:75:18:af:a8:c7:12:39:b1:ff:fe:f8:
96:59:a8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 09:36:52 2026 by rpki-client