Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS57666.roa
File: AS57666.roa (raw, json)
Hash identifier: eYbGXewDemTRoyNxoc/pjViPyhTBrhw09fdwK3scvDA=
Subject key identifier: 0A:62:15:90:F4:80:E9:07:B7:64:1E:B1:BF:1D:2E:2A:27:09:13:37
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 70C9A21B040AA6044F730A9187A3CC1D864091FC
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS57666.roa
Signing time: Sun 04 Oct 2026 00:52:44 +0000
ROA not before: Sun 04 Oct 2026 00:47:44 +0000
ROA not after: Sun 03 Oct 2027 00:52:44 +0000
asID: 57666
IP address blocks: 84.108.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 16:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:c9:a2:1b:04:0a:a6:04:4f:73:0a:91:87:a3:cc:1d:86:40:91:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 4 00:47:44 2026 GMT
Not After : Oct 3 00:52:44 2027 GMT
Subject: CN=0A621590F480E907B7641EB1BF1D2E2A27091337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1f:66:9e:ef:54:3b:1b:df:23:ec:4f:db:e4:
15:31:96:de:84:6f:d8:a1:1c:2a:3d:5b:4a:62:22:
78:58:22:4b:b7:57:99:77:85:93:8f:c4:70:5a:5f:
1c:06:a1:d2:79:13:c1:6b:bc:06:c3:49:dc:56:4b:
c0:46:05:0d:4b:14:f2:f5:89:d8:a3:1c:8f:53:88:
25:b3:8a:80:d2:0e:70:75:b7:74:7a:48:2b:82:58:
02:b3:96:8e:30:fc:cc:27:c4:1e:21:a0:51:94:b7:
7a:28:bc:4c:e1:fe:ff:6e:29:16:5e:1b:6d:e5:98:
a8:da:3e:bf:84:21:aa:6a:69:07:c2:b8:49:83:ae:
64:4f:67:8d:07:e2:07:38:1c:6b:81:18:84:8a:28:
14:24:d0:aa:af:09:46:34:18:73:68:80:ae:a1:3c:
bc:21:cb:c6:2a:45:04:a3:0d:cc:7f:07:32:0c:6f:
cb:69:9e:9c:06:04:03:f0:88:2e:2c:28:16:5a:ae:
86:4f:2c:b6:df:46:f4:3f:49:09:cf:08:84:de:41:
9e:34:04:75:98:e5:e8:22:ac:c4:33:61:54:0b:8f:
e6:63:8b:8e:7e:00:ef:d8:72:6e:24:44:09:cf:42:
f5:ee:56:5c:02:48:70:c3:be:2d:d7:5c:61:f9:ba:
b2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:62:15:90:F4:80:E9:07:B7:64:1E:B1:BF:1D:2E:2A:27:09:13:37
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS57666.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.108.8.0/24
Signature Algorithm: sha256WithRSAEncryption
45:a1:6f:c3:61:a3:41:ef:91:1d:14:d5:05:47:79:d8:2b:d3:
57:d9:46:31:3b:fc:ae:3f:e4:19:5e:3f:69:92:31:32:be:f8:
1e:4a:6f:c5:f7:7c:36:2b:e7:e9:2d:1b:25:b9:b8:4e:2d:99:
aa:7b:91:4b:00:04:5d:e7:e7:00:95:f2:da:87:a1:63:04:69:
80:b9:59:5d:5d:95:cc:ed:e5:7e:1e:6c:ad:cd:52:d5:1c:47:
19:2b:19:14:fb:4b:d5:96:13:47:f8:62:53:f0:bd:47:f5:9c:
d8:dd:f6:9f:5e:d6:58:4c:29:71:7b:f9:7e:9b:14:3a:f6:9b:
88:a7:ef:9c:3e:1c:6e:59:e0:bf:b7:b9:c2:b4:7c:08:7c:14:
bf:8a:f8:5a:93:69:8f:bb:57:8f:10:30:40:c6:d2:05:ac:5a:
de:a5:74:d4:3b:80:d1:23:4e:d4:5f:86:69:53:16:53:4d:9c:
a7:47:00:1d:99:4e:63:6a:0c:c6:1b:76:ab:4c:06:6f:22:9b:
29:60:07:27:f8:6d:2d:14:ee:3b:53:74:87:a1:71:de:ae:bf:
29:8f:67:95:05:05:59:3d:e2:68:91:6e:05:22:04:ab:34:73:
76:5f:af:0b:7b:44:40:e0:a4:f5:c0:5e:cb:04:35:9f:91:7c:
f1:57:eb:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:19:20 2026 by rpki-client